Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6cb89579-af3b-39f7-8835-abbb49546079.roa
File:                     6cb89579-af3b-39f7-8835-abbb49546079.roa (raw, json)
Hash identifier:          h8QZQN5efUQ7NKE1oT0tL/hUyzGkYOX45Wc1NOZlems=
Subject key identifier:   6C:65:FC:B8:1B:3E:56:D9:70:92:30:D0:DF:DB:8E:E6:B9:58:56:E6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C77A048CC60BBDB14CA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6cb89579-af3b-39f7-8835-abbb49546079.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        104.157.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c7:7a:04:8c:c6:0b:bd:b1:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=703a00f5-b737-4d94-ba13-58344b940d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:5d:45:5e:10:b8:6b:56:cb:a1:c1:1a:01:
                    e5:cf:65:38:b7:46:ae:ba:22:0a:01:59:e2:ce:a6:
                    03:ab:64:09:93:73:46:2b:10:a5:39:8d:f6:4e:b9:
                    9b:fd:db:47:bb:a5:0b:a2:a6:5b:66:a0:95:a5:aa:
                    14:1e:a1:ab:ed:09:f8:dc:af:4e:cc:c4:2b:a7:66:
                    5e:19:11:eb:dc:33:11:fd:ed:c8:29:a8:75:45:a6:
                    ce:7a:78:cf:2d:ba:74:7c:e1:5d:27:95:6d:e9:1b:
                    21:ee:81:08:ca:a6:e2:28:c3:05:bb:1f:a6:e1:e2:
                    b6:c3:7f:b5:e9:ae:bb:b2:8f:9c:9f:41:de:a1:85:
                    24:bd:ef:3a:26:40:02:a0:44:45:b3:18:8b:cc:0b:
                    52:ea:f6:ab:f2:6e:01:ba:78:a2:42:7b:31:4c:e7:
                    44:90:3d:c2:85:e8:e3:93:a1:32:c0:d3:0a:94:8c:
                    ac:cc:e4:ee:1a:34:17:2f:e2:2b:3f:18:2a:f8:3e:
                    9e:f9:1e:fe:d0:82:30:e6:2f:73:e3:d9:b5:fc:f4:
                    f6:24:63:df:5d:a3:46:f6:08:9c:9c:3f:6c:9d:90:
                    c1:c0:9a:cc:c6:ef:10:c5:37:76:f3:10:0b:26:34:
                    63:9b:f9:d8:82:4b:64:2e:40:3d:26:58:ca:03:38:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:65:FC:B8:1B:3E:56:D9:70:92:30:D0:DF:DB:8E:E6:B9:58:56:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6cb89579-af3b-39f7-8835-abbb49546079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.157.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:b3:53:26:69:81:37:d6:b6:c2:70:8e:ef:e3:35:10:a7:41:
         0d:86:5d:40:e0:1e:05:9c:8e:50:f4:aa:7b:73:a9:c5:69:99:
         fb:79:99:45:ca:aa:62:de:0c:fb:21:b2:07:56:a7:bc:3d:1d:
         69:42:59:cb:07:2b:b3:6f:f3:56:0f:50:25:66:a9:36:ea:4e:
         43:90:87:69:56:d3:b5:04:7b:58:e2:dc:3b:c8:7f:ec:09:54:
         f6:22:ba:7a:97:fb:7d:b9:92:5a:8e:b5:b9:d4:f0:41:0e:55:
         f6:bf:b2:14:4c:9f:df:32:6e:96:74:eb:8d:f8:47:24:7c:7f:
         6e:b7:0c:ea:98:cc:96:ce:a6:32:a0:0d:ae:87:51:50:b8:fe:
         84:95:1d:23:20:11:31:2a:34:7c:76:04:95:3d:9f:32:91:51:
         3b:53:52:5a:87:38:b3:c3:cf:ab:7d:c6:93:11:f3:92:ef:bc:
         99:49:82:8a:9f:db:27:59:35:aa:46:d2:95:38:36:46:8d:e7:
         63:1e:46:6a:16:47:f2:30:2f:e3:3d:7a:06:6d:51:45:59:1c:
         78:af:88:b4:c6:c2:1b:d5:48:e9:90:2c:17:d0:14:7e:1c:62:
         86:74:f9:82:e5:77:ee:62:6d:03:7b:ee:1c:21:0e:7e:81:e6:
         86:23:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:21:01 2026 by rpki-client