Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b86bb6e6-e7dd-31bd-ab5a-18a43ba22060.roa
File:                     b86bb6e6-e7dd-31bd-ab5a-18a43ba22060.roa (raw, json)
Hash identifier:          /Ve3bliV0OrjfgkLUOUIG/oyNgOTln9d8m9SzLydEzE=
Subject key identifier:   E8:95:0A:27:5F:21:8E:73:91:39:D2:F1:B5:C5:02:64:35:01:B2:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8632DAB3BE8A730CCDD4C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b86bb6e6-e7dd-31bd-ab5a-18a43ba22060.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        71.238.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:2d:ab:3b:e8:a7:30:cc:dd:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=00cbc6c6-4f7f-4778-9710-c732ac65d0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:8c:3e:3b:bb:fe:23:26:93:47:b6:a9:33:
                    90:4d:88:92:59:b6:1a:15:e1:b9:3c:7e:49:3f:1a:
                    60:2b:a0:56:49:7e:cc:bc:51:a5:f9:1b:6e:4b:9e:
                    9c:9c:88:16:81:f5:09:01:8c:18:f8:e8:16:3b:ee:
                    19:30:fb:25:43:c2:6d:d5:2b:de:31:11:9a:c6:3c:
                    e9:c3:bc:eb:7e:3e:af:38:26:1c:43:ed:8b:2c:4f:
                    b3:cf:d1:ca:6a:c5:c0:29:a8:fa:55:dc:37:d9:d8:
                    fc:0e:a8:13:84:53:ac:bc:90:f6:3a:32:a7:68:c5:
                    2b:b6:fb:ab:53:6b:b0:c3:2c:c2:2c:9e:95:22:dd:
                    9d:ad:2a:9e:15:e0:b4:b0:f8:14:ed:1c:d3:b7:dd:
                    c7:2b:b5:b8:b8:61:bd:ad:87:eb:5b:12:2d:b8:29:
                    28:7f:8c:65:ab:ad:b6:fc:e2:68:94:8b:90:ab:10:
                    00:9d:ea:38:36:f9:54:5a:0f:38:c4:65:aa:0e:2b:
                    b1:6b:6f:88:7d:7f:37:47:a4:34:21:1a:b3:e4:75:
                    c4:79:98:f8:44:33:d0:99:80:18:65:9e:38:c0:2a:
                    fd:e0:6e:77:17:4d:61:34:24:b0:6e:fa:ff:7c:71:
                    7d:fb:9d:cc:b4:1b:dd:ae:b3:5d:34:78:10:f3:f0:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:95:0A:27:5F:21:8E:73:91:39:D2:F1:B5:C5:02:64:35:01:B2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b86bb6e6-e7dd-31bd-ab5a-18a43ba22060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.238.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:7b:db:fe:cc:cc:bd:7c:ea:2d:f9:68:ec:fa:70:29:cb:31:
         f2:18:de:dc:f9:b7:c5:08:6f:92:7a:6a:e3:7c:c4:8a:99:cc:
         05:d0:bc:46:b8:1b:37:93:ce:56:7b:70:71:46:1b:85:bf:0e:
         e5:b4:1c:11:a5:91:21:e8:91:00:5f:e9:e5:cf:dc:69:d3:26:
         f5:96:77:39:00:39:50:54:57:58:a8:6a:36:2f:f2:bc:a7:f2:
         d8:50:c6:ff:e9:b2:a8:19:6d:ec:e9:e9:ce:bf:2c:7a:56:11:
         c3:15:0c:a7:b7:7f:a3:b9:84:de:5e:b5:ab:31:8a:29:b6:4b:
         c1:24:1b:d9:6b:75:46:9a:50:25:34:8d:e3:e5:a6:dd:52:35:
         b1:8a:6e:ef:80:40:67:96:3e:48:84:9a:64:74:c9:e9:78:e4:
         15:a0:68:2c:8a:c6:7b:59:99:59:34:25:42:fc:c8:e0:79:58:
         e8:1a:c1:22:59:1c:1b:84:3e:28:22:04:54:8b:d0:ee:bc:1b:
         72:2f:73:24:85:ad:9e:b5:f2:8a:3c:90:64:1f:da:46:5b:58:
         0e:46:36:6b:6b:88:b1:01:4a:b9:c9:d6:31:44:3f:e5:ee:f2:
         e2:94:e1:e5:6d:08:d5:ea:34:c5:98:80:67:b7:69:36:62:35:
         08:eb:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:14:44 2026 by rpki-client