Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa
File:                     b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa (raw, json)
Hash identifier:          RNFfREysAuiMpq3PDFfR3W9WBnUtiq5RPb7o/LxTSFk=
Subject key identifier:   52:04:19:4B:D2:DC:BF:93:D3:C9:26:2F:7E:B0:29:92:A4:AB:7A:D9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C4102C37287E8B3D0780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        137.186.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c4:10:2c:37:28:7e:8b:3d:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e2ac927b-1bbd-482a-aefc-8b7af6b9b663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:a3:9c:5b:16:f2:dd:2b:a8:86:d8:38:15:
                    23:39:33:1c:ac:b5:ef:24:c3:43:20:54:13:8f:6f:
                    72:fd:ec:da:7c:55:2f:33:f0:f4:cc:8f:1a:fb:ce:
                    dc:6e:aa:22:16:72:7f:82:d2:b4:48:6d:e6:29:db:
                    b9:13:24:fe:a0:73:df:06:69:76:4d:65:72:4e:75:
                    75:6f:8f:65:0a:34:1d:31:a0:79:f2:68:c4:32:73:
                    5f:5d:28:9d:79:1f:86:eb:d1:66:7e:9f:ff:80:86:
                    30:86:ca:c0:3d:d3:44:9e:7c:5c:09:64:5a:d6:ba:
                    f1:4b:a8:9c:f3:f1:0b:fb:dc:d6:df:a7:da:b2:58:
                    e8:9c:b6:5a:11:4f:fd:28:3a:67:f6:04:d7:b6:d7:
                    30:fa:2f:04:70:e9:2a:cc:ea:f8:38:04:4a:54:14:
                    9f:d7:29:c2:fb:fc:c7:49:b2:d2:e1:59:29:f9:43:
                    ff:3a:1d:0a:91:09:8d:f5:00:c2:1f:76:c0:7c:99:
                    24:b8:cc:ca:be:af:00:3c:9d:1a:f4:fe:8d:a3:92:
                    a5:32:83:fc:05:20:4d:f7:37:9f:17:72:ff:c5:07:
                    93:8f:a6:de:88:2f:ad:62:55:af:24:0b:5e:38:07:
                    b5:b4:bb:4d:36:18:42:9f:17:dd:ed:c0:4e:de:ae:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:04:19:4B:D2:DC:BF:93:D3:C9:26:2F:7E:B0:29:92:A4:AB:7A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.186.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:36:3e:b6:44:0c:2d:a6:42:96:55:e5:02:53:73:b5:2a:e3:
         2e:1c:53:e4:76:90:16:d9:59:a4:85:07:93:31:53:2c:bc:37:
         f9:62:d2:33:aa:16:28:1a:15:9b:1a:10:00:b5:d3:88:a4:a9:
         ca:c0:c0:f1:27:78:6c:87:75:46:84:fa:f5:46:13:a8:7d:15:
         87:2a:fc:1b:75:91:35:86:43:3a:50:be:1e:4f:fc:36:b8:eb:
         f2:0f:0d:0d:a8:f8:85:6a:23:35:07:eb:27:b6:5d:1d:79:01:
         07:2b:90:d9:d9:2c:1a:49:ce:50:41:83:a4:10:23:d4:7d:ad:
         24:fc:34:88:80:b0:11:d6:4b:26:4e:aa:bb:10:09:00:04:1e:
         aa:79:56:f8:dc:21:65:33:3f:96:ed:62:9a:99:ae:51:f1:75:
         a3:a8:e7:2a:65:de:b8:e5:20:29:64:a5:57:6f:33:d6:ef:e5:
         0e:2c:64:7c:3e:eb:06:89:8c:f2:78:06:b0:c4:39:e2:ee:62:
         d2:2a:68:f4:77:52:fc:bf:0b:a3:18:6c:74:57:f8:5e:ce:40:
         00:97:ef:b3:2c:8b:c6:40:b1:c0:74:05:e8:43:73:86:49:e7:
         75:c7:75:a9:3c:59:95:f7:c2:d2:3d:f1:69:38:be:cb:86:da:
         d5:db:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:51:30 2026 by rpki-client