Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa
File:                     cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa (raw, json)
Hash identifier:          mm9ttHd/OHVK0u+1Zq9x8Jk4ZdF+LIkppkywyL4QIiA=
Subject key identifier:   28:9B:4C:D3:1F:56:40:9D:FD:2C:E3:EC:C4:5F:ED:C8:7A:82:93:E4
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AF2567ED6E05B9956B8E62440
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     398371
IP address blocks:        198.160.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7e:d6:e0:5b:99:56:b8:e6:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=914c1976-621d-47f7-a44f-6dcd01997a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:c9:a0:60:b3:73:3a:31:41:b3:f8:b9:3c:
                    a0:a0:ca:a9:8f:37:2f:65:a8:3b:aa:cf:96:79:bd:
                    a8:5c:b8:3e:4a:1e:5a:8c:66:92:4a:14:fc:9c:91:
                    ac:d7:a1:4d:05:19:a8:ee:fb:a4:e3:ee:f7:5f:e3:
                    9d:8e:ad:d7:7c:e2:2e:c3:7a:45:c5:50:c1:8f:2f:
                    68:11:82:71:ce:80:b6:5a:6f:64:69:98:9e:9f:b3:
                    5e:aa:7f:25:ca:f3:8e:d0:2e:ab:a0:2d:d2:42:9e:
                    52:b8:18:78:9c:f9:b7:69:0d:cd:e1:a1:bc:c1:4c:
                    0b:95:97:a7:7e:de:fe:24:44:4a:88:96:27:a2:6b:
                    fc:1f:18:a5:f2:1d:e6:60:5c:ab:18:c3:11:1c:25:
                    37:47:b9:b2:26:b2:01:2f:68:3c:b1:b6:af:ff:ec:
                    19:c7:4e:ff:e9:3d:97:b9:63:c3:36:96:a9:80:30:
                    3c:12:db:7a:3c:74:e1:77:97:ec:86:c3:c2:ab:a0:
                    b6:07:06:e4:0b:f9:3d:07:e0:e8:a4:bf:c1:0e:be:
                    b2:53:ba:37:77:66:d8:ba:8f:ac:90:2c:85:a6:86:
                    34:81:e7:30:4b:50:d6:51:94:01:82:ab:13:97:d9:
                    48:b4:8c:64:fc:36:29:3a:33:41:7f:3d:02:04:b1:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9B:4C:D3:1F:56:40:9D:FD:2C:E3:EC:C4:5F:ED:C8:7A:82:93:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:e5:c4:db:d4:8f:0b:ef:54:98:56:c6:54:a3:e4:f0:91:
         79:cb:73:6d:9c:78:a9:96:98:4e:8f:ef:53:e5:cf:95:db:f2:
         db:df:da:af:20:c6:52:6c:8e:46:f0:cb:cd:d4:b5:03:6c:04:
         0b:35:2d:0c:b0:71:67:a6:9c:6a:39:8d:ee:c4:a8:da:04:28:
         e6:25:28:af:9f:b1:03:e3:58:0c:26:c6:0f:1c:91:88:0a:49:
         96:8d:7e:64:05:41:33:bd:18:35:a1:c3:d2:67:e5:90:2c:a8:
         b8:6b:cf:ec:da:03:84:af:49:6f:11:66:5f:7b:60:1d:b2:8a:
         ca:8e:bf:2a:40:0e:fe:23:89:b2:9f:c3:37:97:37:fe:45:1e:
         8d:16:5c:43:9d:60:95:45:57:74:3a:b7:8e:4a:44:7d:53:70:
         19:2f:30:e1:79:23:4b:52:b0:17:06:2e:5b:8e:2c:69:29:1a:
         23:dc:7d:1c:2c:8d:1d:b3:af:ec:e6:73:4c:ad:df:68:33:8c:
         37:ae:2e:7b:09:4b:21:01:2b:9e:d0:ff:11:d7:53:aa:2e:47:
         b7:bc:bf:2a:0c:04:4b:97:48:05:80:b3:8b:b9:e5:70:d4:26:
         b6:9a:50:cd:90:72:ab:da:f6:57:c1:6f:a8:76:97:cd:1b:9f:
         bc:0f:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:56:58 2025 by rpki-client