Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
File:                     f4f0a900-b310-382d-b883-64f958388735.roa (raw, json)
Hash identifier:          0DOy5V/R+81Pshbg9fjCnh7YF1fm1kVvXz+cm02VybA=
Subject key identifier:   E4:83:73:65:78:C0:B9:EF:0A:39:B6:C7:40:26:ED:48:6E:26:5B:B0
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AE1968F8995D91C554331BBE0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26744
IP address blocks:        199.166.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8f:89:95:d9:1c:55:43:31:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f264e2fa-e593-49e3-93e6-452a1aea8644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:51:53:8a:92:78:82:d4:12:7f:e7:89:84:
                    7e:b4:f6:93:2a:e0:41:e6:46:2a:cb:7c:48:9e:2a:
                    5b:11:98:9a:47:46:0c:78:af:0a:cd:d7:3c:b5:b5:
                    f7:df:6b:9d:4e:cb:88:a2:12:1e:fe:31:01:f6:94:
                    cc:38:b1:87:5b:75:d4:d0:0f:46:34:4e:bc:58:2e:
                    0c:03:df:f0:c6:9c:7b:2e:bb:dc:04:3d:88:f4:42:
                    97:02:f1:5c:3a:ec:47:b6:0e:7e:61:90:b8:19:ea:
                    d5:c8:24:c4:87:f5:da:b0:e3:a1:2f:88:d9:39:3f:
                    bd:fc:99:36:05:51:f1:41:05:77:af:6d:9f:41:2f:
                    1d:a0:1b:78:7f:2b:80:2b:a8:c6:93:b1:a0:bf:ee:
                    fa:08:81:5f:ea:71:36:72:e7:31:a6:80:a6:03:2a:
                    fa:97:62:0b:cc:e5:91:e6:d5:d5:8e:97:87:78:09:
                    87:75:e7:3f:c5:9f:88:41:4b:c4:58:0c:cf:53:84:
                    5f:3d:95:2f:e7:fa:eb:f6:e0:d7:d0:95:63:ec:2c:
                    e1:71:b5:d5:b0:a9:f2:ac:9a:59:6b:ba:65:a0:58:
                    58:4c:ea:95:4a:96:2e:17:da:d1:18:e4:0d:f6:17:
                    28:38:55:65:ba:48:4c:c2:e0:1e:95:59:89:e9:08:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:83:73:65:78:C0:B9:EF:0A:39:B6:C7:40:26:ED:48:6E:26:5B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:16:b6:ff:c4:24:1d:ba:53:42:88:08:18:9a:11:99:6d:
         c7:25:df:03:15:49:03:23:59:3c:ae:96:2a:cf:c5:37:fa:e9:
         f7:27:65:5d:ae:5d:e3:37:5b:3f:79:7b:9f:cc:72:21:29:5e:
         02:42:17:36:c9:d3:17:af:a6:13:ec:bf:1a:3d:ba:fc:bb:8d:
         05:0c:a0:71:3e:34:b0:8e:23:f9:70:15:d6:51:e9:bd:33:71:
         3f:c8:cb:9e:3b:ad:a6:f8:a3:4a:29:1e:a9:67:a9:95:75:b1:
         6e:58:93:44:5b:ac:33:ef:db:91:7f:b6:61:8b:7c:47:37:f4:
         00:30:de:bc:12:de:f6:7d:13:51:59:63:f2:9b:19:5a:bb:ef:
         3e:8e:70:24:7b:a2:a0:db:49:fa:d0:bf:6c:72:96:d8:a0:3e:
         a7:73:48:0b:53:d9:90:fe:d5:26:21:15:33:8d:59:f2:c6:d5:
         c4:6a:17:fa:25:09:9b:0d:36:77:06:14:71:82:05:e0:17:10:
         0c:77:e0:01:41:b0:05:cb:d0:01:4d:5f:56:42:6f:6f:37:5d:
         95:41:ba:92:2b:c6:72:22:c7:1f:e8:06:02:c5:85:30:e6:a6:
         b6:04:7b:b1:06:ce:f7:dd:c5:3e:53:56:b4:60:ed:a5:52:11:
         59:1e:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:20:28 2025 by rpki-client