Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa
File:                     b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa (raw, json)
Hash identifier:          iuqX+b72HxafgsKwbQj8ZZnvE4LA30W19c+VyG2m6iU=
Subject key identifier:   6C:E5:59:2E:62:56:BC:87:39:3B:CC:D6:75:78:42:09:6B:E5:67:2D
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584DADAADDED2EABDDCD16613040
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     26744
IP address blocks:        68.170.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:dd:ed:2e:ab:dd:cd:16:61:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=e30debff-d6b8-4e39-8802-bd25f4e820df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:bb:df:23:ee:98:75:a9:22:1a:57:74:8a:
                    e9:b8:19:0b:93:b8:c0:cb:cf:c0:f6:93:57:62:17:
                    41:b0:f9:62:56:42:ad:e9:2c:c3:6c:96:77:4a:40:
                    71:93:00:36:1b:14:03:a6:80:4b:2b:5d:b1:d7:f4:
                    00:0d:1c:e7:a1:59:fb:32:6f:05:94:72:cd:4b:2b:
                    9b:5f:48:c3:ef:e0:11:0d:d8:c3:6a:63:dd:3c:12:
                    50:3d:5d:7e:1e:ba:30:a8:1f:d4:56:1f:b1:51:41:
                    3f:90:86:6a:4c:76:96:46:fb:0e:32:6f:c4:5a:76:
                    7e:b2:de:99:ae:1a:58:37:6d:54:af:fb:40:83:14:
                    99:6f:ac:ec:ec:8d:70:ed:f2:c7:87:83:01:33:13:
                    18:28:02:9c:37:42:c8:bc:5a:f8:c2:27:f8:9e:54:
                    54:12:fc:97:7a:70:97:4b:f4:43:b4:f5:c6:a8:42:
                    bf:ef:6c:68:92:89:c6:bb:d3:5d:0e:07:99:a6:d2:
                    26:a9:66:59:fe:ac:55:70:b4:5b:96:5b:a9:30:5c:
                    af:89:c4:39:08:74:3b:2f:7b:23:a4:fb:a5:65:73:
                    86:93:31:67:14:ea:a9:ef:0e:49:50:83:ff:47:5e:
                    cb:50:69:aa:41:ca:35:34:a4:62:a3:7d:a3:d5:ac:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:59:2E:62:56:BC:87:39:3B:CC:D6:75:78:42:09:6B:E5:67:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1d:7e:60:fe:d8:b5:84:7a:e5:14:a3:b2:3a:a1:5d:a6:f8:
         4b:fd:8d:11:51:bd:00:58:78:16:89:4f:cc:fb:30:76:57:d4:
         cc:ab:b4:dc:ac:29:1f:e8:31:e3:ca:a8:6b:08:21:cc:0c:b4:
         71:1e:4f:23:e1:6f:e8:ea:24:c6:87:13:e5:bc:0a:86:a3:78:
         48:08:7b:6b:69:b5:4b:28:f1:03:1b:d5:08:f2:8b:66:1f:b1:
         2e:82:c1:54:53:9f:15:1a:89:5c:8c:78:23:7f:cb:60:ca:02:
         20:a9:a3:95:35:88:70:e8:c6:73:c1:46:9e:c2:00:10:dc:ee:
         6e:c7:b4:30:78:c0:fd:89:12:f4:2e:11:95:3b:49:72:65:37:
         c1:10:f4:c0:45:a1:ac:b4:84:0e:03:99:b7:88:ea:11:e7:59:
         ab:a2:2f:fc:d7:c5:f4:62:cc:a6:20:9d:ca:73:74:c2:dd:5c:
         49:0c:42:74:0c:83:23:21:72:ef:93:1c:fe:97:6f:1d:a3:75:
         39:73:63:02:6c:f9:0d:05:ec:3e:8c:b6:67:17:9b:9b:e7:5e:
         9c:f7:b7:ca:4c:51:75:c4:ca:ae:c9:62:0e:d6:06:e4:df:ff:
         36:47:66:78:8a:58:66:11:9c:22:74:44:3d:20:a6:8d:0f:da:
         3d:0b:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:57:29 2026 by rpki-client