Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa
File:                     6585343a-f4b9-3ec1-89e9-7b7770469b30.roa (raw, json)
Hash identifier:          d0EuazBEwNJNq9TOAFifgBK+x3cQ+qEcZsnaz/+ak2c=
Subject key identifier:   47:89:E5:14:AB:54:32:2C:9B:CF:E8:70:25:24:BC:FF:E3:40:BF:BF
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584E4824BA030B78D2C8112A7C80
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     54478
IP address blocks:        170.88.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:ba:03:0b:78:d2:c8:11:2a:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=9da4b7ee-c473-4efc-a72a-1e440ebbfb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:f8:e0:97:47:8b:b9:00:99:20:90:6f:00:
                    30:0e:29:13:5d:20:37:bd:9f:ca:ac:ce:1e:85:22:
                    37:b1:d9:b6:65:c4:59:70:e4:41:9f:8b:1d:ad:6b:
                    2e:80:2a:30:63:4d:21:45:f5:ae:05:a0:86:bf:d0:
                    79:4a:63:cf:8b:b0:76:a2:c6:11:e5:e0:76:55:e3:
                    6c:e2:ad:bc:e5:be:11:93:ec:05:a0:6b:46:a7:1c:
                    1e:2a:71:4a:e8:f9:cc:a4:fc:1f:30:5e:66:47:21:
                    58:a4:4a:a3:10:bd:d9:e5:3c:ca:05:46:3b:ab:7b:
                    18:9e:d0:63:e6:81:6a:95:43:ef:b0:71:5c:56:6f:
                    98:12:0f:8e:85:b7:62:fc:1c:7a:07:3e:ba:0e:e8:
                    a2:65:23:83:f5:d8:29:18:0c:e6:b2:34:68:74:41:
                    17:23:be:1f:63:2c:65:ea:ef:0f:66:f0:bd:af:58:
                    cc:ac:1c:f9:de:3b:69:f8:af:85:57:0f:db:93:83:
                    0b:ad:4b:ee:24:09:6e:9e:08:97:2e:f4:51:2f:1d:
                    50:91:0f:f3:65:3a:9e:b0:02:a1:4d:5c:90:46:d6:
                    9e:c9:3b:b1:8e:59:98:69:d5:78:db:a2:e3:86:51:
                    2d:a8:74:61:25:00:fe:9d:62:16:a7:94:eb:e7:9a:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:E5:14:AB:54:32:2C:9B:CF:E8:70:25:24:BC:FF:E3:40:BF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:6c:ad:33:2a:9a:ac:ae:0f:b1:c3:12:39:c5:59:62:dd:
         f9:85:2d:55:8e:cb:8b:82:8f:55:d3:7d:17:7a:60:cb:2f:37:
         00:29:8a:fa:5e:c9:bd:1f:0e:82:7a:20:da:23:d0:1f:11:77:
         2f:e7:4c:a5:94:34:47:87:99:6a:ca:6a:7a:42:3c:64:74:df:
         79:b1:f5:fa:6f:d1:98:24:d2:28:fe:86:2c:cb:5d:7f:89:0a:
         3a:4e:3e:07:f0:ea:6a:21:e5:21:f9:db:40:3e:ac:05:bb:e7:
         b6:18:24:ee:f2:41:e8:c0:d7:ad:11:c8:d4:72:83:48:7d:32:
         2d:1c:a7:05:37:d4:d7:59:13:bd:70:dd:0b:2d:e4:85:9a:24:
         80:db:95:a7:b9:34:b3:fe:e3:a0:1e:dc:f9:72:09:42:34:66:
         23:81:49:fa:8d:90:cb:eb:5c:df:b2:70:90:1b:46:26:e8:7f:
         02:3b:2e:f4:2b:67:38:11:77:8b:e7:76:02:61:26:6b:63:f8:
         ec:de:e8:cb:9a:b3:d7:48:7b:fe:67:71:b1:7e:95:ce:3a:6d:
         20:3e:19:ae:7a:5c:73:b3:11:05:bf:8b:bd:7d:d0:03:ba:3b:
         e4:69:77:d6:85:de:48:41:da:ad:30:c6:45:1e:fc:86:4c:56:
         a8:b2:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:46 2026 by rpki-client