Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
File:                     6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa (raw, json)
Hash identifier:          iYh5uJEHXmPPhLSLCe98kCS2p0XfAgKGFxsvyj831YM=
Subject key identifier:   AE:F6:18:1E:2C:42:FC:93:F4:C0:E0:75:B8:AB:C3:6F:B8:80:EC:D2
Certificate issuer:       /CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
Certificate serial:       010D0C9F4328584EF2E76CB66F8B8CFC481CFA44
Authority key identifier: 1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     17356
IP address blocks:        66.220.224.0/19 maxlen: 24
                          173.195.240.0/20 maxlen: 24
                          209.134.32.0/20 maxlen: 24
                          216.66.96.0/19 maxlen: 24
                          2607:ffc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6c:b6:6f:8b:8c:fc:48:1c:fa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=25d03543-0509-4bf7-8978-525f4d7f436e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:5b:53:4d:0b:37:ee:d2:3a:14:4c:42:dd:
                    74:db:a7:f2:dc:0a:fd:45:af:79:52:17:68:bf:93:
                    23:98:14:c1:e3:d4:44:55:7e:c3:6e:e8:5d:32:84:
                    91:23:66:33:df:86:58:7c:73:36:e8:e3:52:9b:ff:
                    a7:ce:a7:ed:85:0d:90:57:ab:1d:e5:f5:01:67:e0:
                    92:b6:39:d4:99:44:e1:cf:fe:bb:a1:2e:ff:9d:d3:
                    84:ae:cb:47:f2:84:c2:39:b0:6b:b6:2e:46:d0:42:
                    ae:20:5f:9e:9a:67:74:b1:cb:cb:84:05:c8:18:3d:
                    a1:51:11:92:72:51:02:b6:7e:df:a7:1c:b3:3f:bd:
                    fa:4a:47:4c:d0:70:46:1f:8f:4f:07:57:81:fd:12:
                    ef:c9:f4:c8:a4:a0:ea:1b:b3:85:21:e1:0a:32:21:
                    9a:91:dc:99:ae:db:71:e6:3e:b3:72:1d:cb:3a:fd:
                    f9:3f:4c:54:22:ec:ec:4a:de:22:c2:13:6b:fc:61:
                    ee:c6:dc:d5:8c:ec:e7:e5:bb:e9:39:a8:a6:25:c2:
                    af:ab:4e:12:e3:ff:80:18:96:f1:d1:33:73:6a:11:
                    1e:b7:83:e8:02:a3:b8:11:eb:f9:83:a0:91:cf:0c:
                    0f:a5:80:2f:22:bc:4c:b0:8f:10:83:6b:20:74:a8:
                    b8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F6:18:1E:2C:42:FC:93:F4:C0:E0:75:B8:AB:C3:6F:B8:80:EC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.224.0/19
                  173.195.240.0/20
                  209.134.32.0/20
                  216.66.96.0/19
                IPv6:
                  2607:ffc8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:61:60:43:06:01:df:f0:cb:bb:d9:d0:e8:c0:f9:7a:3e:ae:
         08:f2:08:89:36:42:61:8b:e9:a3:40:1f:a4:51:df:d8:f8:de:
         3d:13:f6:6a:c5:fc:29:24:9c:d6:f9:03:a3:6b:0e:4a:f2:99:
         5c:b8:3b:65:c8:a3:27:89:4c:91:db:24:15:5c:d0:c6:42:5b:
         30:d0:01:b1:6a:e9:93:87:bd:af:b2:fb:39:e0:36:e3:70:64:
         3b:9d:c7:50:2a:b7:3a:e0:f7:a3:6f:ea:35:55:4f:60:f4:25:
         50:75:ea:7a:46:ee:21:ed:2c:e1:d3:8a:4e:d6:a3:94:6b:0f:
         cc:ec:76:a3:28:83:29:2d:a7:93:4f:48:d5:ce:3e:25:ce:ef:
         9b:65:0f:13:43:9e:e3:fb:c2:e4:6b:8c:63:c4:71:67:7f:3c:
         c1:a4:94:0c:59:c6:11:7b:01:e6:bc:5b:81:60:a7:bf:66:d4:
         d6:eb:ce:e1:7e:51:7e:5b:42:1a:35:ea:f7:88:2d:81:19:d9:
         61:26:6e:6d:34:b1:6f:5e:1e:7d:af:70:e9:67:9f:ef:2f:7e:
         84:3a:fa:4d:93:a6:d6:12:9b:38:73:fb:e1:1b:1b:63:42:49:
         18:97:d7:f8:fc:7a:1b:70:3f:5e:ee:64:6c:85:3d:62:df:86:
         76:d7:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:40:45 2026 by rpki-client