Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bb67222d-2500-3d4a-8911-f5b1c05f6086.roa
File:                     bb67222d-2500-3d4a-8911-f5b1c05f6086.roa (raw, json)
Hash identifier:          kjxkFue83X5KdgYu5r7vuLLs6Agf5vtWezb5uJlJn8w=
Subject key identifier:   D1:8A:98:EB:2E:BC:A6:7F:E7:BD:58:77:63:3B:56:61:E9:EE:8F:FE
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F067241975C83336E6E163E00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bb67222d-2500-3d4a-8911-f5b1c05f6086.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        162.247.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:41:97:5c:83:33:6e:6e:16:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=44f9077d-9fbd-4f3a-84b5-d4dd604b3db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:15:a0:15:eb:29:cd:85:41:39:e9:08:3b:
                    79:2a:a6:30:c7:a0:67:98:7b:30:0c:ed:db:e8:3a:
                    79:60:43:36:23:db:6f:3c:8e:06:fd:6f:68:a0:d7:
                    f7:2b:03:f0:02:be:7a:77:65:33:b5:66:0b:26:51:
                    0f:2d:89:37:b0:40:05:8c:52:fa:bc:3d:a5:11:8d:
                    88:40:d2:2a:56:ab:34:e9:3f:29:a1:7f:d5:f2:55:
                    f8:e9:c8:ec:97:38:ff:f9:16:05:9a:21:29:a7:c9:
                    78:38:b8:bb:59:93:2f:7f:13:5b:71:86:d4:4c:7a:
                    8f:4b:92:4e:06:7f:ac:ad:42:b7:c3:9b:47:2a:7f:
                    0f:dc:7f:bd:10:88:1e:7c:36:a0:7a:44:ef:d0:f3:
                    f9:76:78:8f:fc:fe:80:00:aa:01:60:63:e4:ac:0e:
                    da:5f:1e:68:fb:0b:75:cb:09:22:52:f5:68:a0:1d:
                    e9:08:c4:e9:48:30:ed:0f:4f:c9:93:33:01:bb:ba:
                    7f:4f:8b:d6:24:2a:16:da:93:3c:3c:4d:1a:6f:b3:
                    db:53:d6:92:df:70:c0:0f:fb:ed:f3:c2:fe:b2:65:
                    a6:6f:e1:68:a7:a5:e5:99:81:9b:f8:be:aa:68:83:
                    54:e7:43:53:29:08:82:ee:3d:07:44:59:6b:21:ee:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:98:EB:2E:BC:A6:7F:E7:BD:58:77:63:3B:56:61:E9:EE:8F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bb67222d-2500-3d4a-8911-f5b1c05f6086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:5c:3c:21:48:9d:4d:2e:3f:83:4d:fe:63:3e:60:83:1c:
         cc:f5:8b:a7:5e:72:a6:d1:d9:5c:aa:e0:2a:e7:4a:a9:93:5b:
         a0:ee:f9:06:ef:bf:b1:ca:b2:22:ed:4b:b4:f3:cf:b5:d2:68:
         28:2c:cc:a5:27:90:9b:d0:f8:27:0c:02:76:b2:94:5a:27:7f:
         9d:8c:4e:95:5e:7e:89:11:0a:05:80:cf:17:23:7d:03:65:52:
         df:4e:d4:86:d4:bb:de:dd:87:b4:96:27:a1:0f:5f:ca:22:f1:
         3c:20:ac:53:95:7d:38:d3:cf:1a:cd:af:f3:ca:70:70:46:65:
         24:b5:0f:e7:00:b5:68:51:46:eb:3a:74:b1:94:1b:e7:7f:45:
         ef:4a:8c:aa:e3:8b:14:38:b5:55:f9:7a:7b:77:79:4f:df:17:
         74:0a:9e:f6:91:63:c0:84:02:ef:ff:82:a6:82:a2:8b:5c:6f:
         91:11:6e:e3:79:e3:28:29:f7:17:c7:51:23:3c:a2:4d:83:7e:
         a1:fd:b6:52:a7:b2:37:5c:e4:a9:a6:3c:92:0e:db:45:a0:03:
         88:45:bc:2e:d9:cf:64:97:9f:92:d8:a2:2c:5b:be:3e:15:82:
         cc:06:6f:10:e9:1b:37:ef:8c:68:f4:c8:df:c5:02:ed:84:ae:
         02:91:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:46:00 2026 by rpki-client