Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/851a5bb0-f875-3875-bb9a-3d9212d96959.roa
File:                     851a5bb0-f875-3875-bb9a-3d9212d96959.roa (raw, json)
Hash identifier:          u3gsekK2I0Aq7qMd30yEPCkhLCUCL43IX0M5iWm89Qo=
Subject key identifier:   C4:A4:35:D8:2D:DC:19:C2:AE:7B:DA:A2:2E:2B:5F:4D:7C:CF:4A:80
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584F214A6FB85E6450319BF7D780
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/851a5bb0-f875-3875-bb9a-3d9212d96959.roa
Signing time:             Thu 10 Sep 2026 15:47:06 +0000
ROA not before:           Thu 10 Sep 2026 15:47:06 +0000
ROA not after:            Wed 09 Dec 2026 16:47:06 +0000
asID:                     32710
IP address blocks:        164.153.248.0/21 maxlen: 32
                          204.138.46.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:4a:6f:b8:5e:64:50:31:9b:f7:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Sep 10 15:47:06 2026 GMT
            Not After : Dec  9 16:47:06 2026 GMT
        Subject: CN=18eddc11-22c7-475c-9a27-a32b127e26eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:56:9e:8a:bf:80:a7:38:ae:e6:0b:63:f0:
                    81:b9:2f:a4:33:f4:0e:a3:98:a9:8c:de:7c:c3:ed:
                    07:fe:cb:9b:8e:3d:72:a4:97:f8:d9:dd:48:03:34:
                    b0:81:43:ed:c3:ef:81:a3:71:3d:3d:02:de:58:5d:
                    75:ca:6f:eb:62:c0:4d:1f:e7:d7:d2:23:f8:75:d3:
                    47:e4:f3:7f:e1:e5:78:1f:a4:f1:5b:4a:53:bd:97:
                    5f:e8:09:d5:5f:08:be:dc:b9:f5:8e:ad:0d:cf:7a:
                    12:2c:07:8d:19:e7:b0:a7:c4:64:31:d3:2b:d7:30:
                    8a:82:b2:69:88:c8:1a:c2:03:4c:49:08:cb:03:de:
                    b6:d2:fc:77:dd:c0:d8:59:2c:90:0a:cc:e8:76:5a:
                    3c:b9:7d:f2:9f:dd:e2:b6:d4:df:dc:c1:da:bd:aa:
                    0a:e5:89:77:61:65:b0:00:1f:fa:48:3d:f6:e1:70:
                    75:5a:bc:21:87:b8:4e:70:f5:53:fd:d8:c0:82:a0:
                    5f:38:4a:a2:ee:63:d0:14:0b:65:93:8b:ea:34:8f:
                    55:fd:39:5a:c3:a6:e6:df:7b:1a:9f:e7:80:a4:43:
                    ef:20:e6:36:37:06:0a:40:49:51:9a:ca:41:bf:76:
                    f0:b4:9a:a4:2d:07:8e:a0:26:6b:dd:d6:bb:aa:f5:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A4:35:D8:2D:DC:19:C2:AE:7B:DA:A2:2E:2B:5F:4D:7C:CF:4A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/851a5bb0-f875-3875-bb9a-3d9212d96959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.248.0/21
                  204.138.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:1d:8e:2c:f1:9e:a2:28:52:96:82:a8:a7:a3:c1:ff:d0:
         8d:bb:23:9d:99:bf:ea:ff:9b:85:5b:fe:19:a1:98:ab:7a:ae:
         29:96:4a:ac:19:e6:83:fe:31:48:0d:c5:74:6e:63:8a:18:08:
         d2:7f:19:a1:38:3c:76:7a:c1:ab:f0:96:a2:68:99:7a:80:40:
         32:81:d2:19:b0:75:3a:57:d7:07:d4:ae:31:e5:e5:cc:f3:e9:
         d4:76:a3:7f:26:6b:25:a8:0c:b3:a6:8b:1f:78:66:7d:28:c6:
         44:d9:e0:63:47:50:1b:b6:9e:22:2b:ed:57:41:90:a4:c0:b4:
         df:02:dd:94:ff:8c:18:b9:8d:96:66:0c:48:e5:3c:b7:f7:eb:
         20:d4:3e:78:40:e2:29:9a:cd:9a:d7:3f:8a:fc:55:8c:09:2a:
         a7:7b:a7:85:13:c5:4d:73:30:7f:40:a4:ed:9b:d4:d4:62:bf:
         95:b7:c6:40:53:d0:94:1d:d7:f9:21:5f:0f:b6:2b:31:21:b9:
         3b:51:38:c0:c1:1c:20:a9:5c:2a:d9:ca:37:18:d8:ee:2e:b3:
         44:d2:2c:ac:43:40:23:b5:79:00:1f:5d:b3:ae:38:a7:9b:30:
         94:21:05:f6:7d:54:c4:6e:45:02:dc:fe:34:d1:4b:33:8d:fc:
         95:58:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:01 2026 by rpki-client