Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa
File:                     086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa (raw, json)
Hash identifier:          FQXlRfR37arPwsdKGENZIkBNrcvtgr9rhaFGChk8G20=
Subject key identifier:   6A:88:C0:38:A3:AD:81:6E:1C:91:D1:6D:E4:39:3F:2E:6F:EB:2B:F8
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584EE7BC9E3000D8A6903A3D8200
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     36445
IP address blocks:        149.248.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9e:30:00:d8:a6:90:3a:3d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=06cf0db2-e200-4d65-b776-f997b9a43057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:6f:53:54:fd:99:c0:da:61:76:f4:47:a1:
                    8a:0e:3d:56:26:19:d9:e2:c1:7c:b6:69:e1:94:3b:
                    f8:5e:bd:60:3e:08:d6:4d:b4:65:c8:90:7c:a6:ca:
                    6c:e6:47:2d:83:11:1a:48:12:a3:57:f6:49:33:f8:
                    5f:8e:1e:97:9a:78:68:b6:af:94:a2:55:38:74:21:
                    ed:bd:ed:68:9b:98:b9:a0:a7:c1:9d:d4:b9:83:a5:
                    8a:c3:04:b5:ac:b6:07:3b:79:12:8d:40:9b:c4:a6:
                    df:0c:ef:e6:5f:c4:32:8c:ec:bd:df:92:bb:68:bc:
                    00:29:bd:86:ca:cc:09:f5:ca:77:05:10:7f:51:c4:
                    9d:0c:5b:d0:de:93:a1:cc:4e:2e:4d:31:03:a2:c8:
                    e6:c7:ab:89:5d:0c:2f:77:86:14:4f:16:0e:82:f0:
                    12:c6:60:07:e3:e6:1d:3c:25:c3:06:ac:ce:63:24:
                    65:0b:04:b8:78:b8:99:87:7a:49:59:e2:2b:8d:41:
                    0b:53:49:d1:4b:d2:75:69:60:78:b4:75:30:70:39:
                    83:89:eb:60:28:cd:3e:43:20:14:4f:fa:32:9e:72:
                    45:94:89:6a:09:41:28:00:b3:0c:1c:19:f3:2a:35:
                    c3:fe:f8:9d:33:ce:8e:e4:1d:d6:6b:68:97:ec:21:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:88:C0:38:A3:AD:81:6E:1C:91:D1:6D:E4:39:3F:2E:6F:EB:2B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:3e:9d:d5:d3:e9:13:c0:02:f7:95:b8:d8:93:59:4f:55:
         6f:d0:1c:86:5f:9e:2b:cb:21:be:c3:c7:7d:9b:74:ca:12:b3:
         18:51:8c:08:a0:e2:d3:09:b7:10:82:fe:82:a5:f8:77:ee:f1:
         e3:20:cb:20:6a:0c:d5:c1:38:4e:9d:8c:07:87:b9:aa:a2:4c:
         9b:df:41:2e:4b:c9:4e:ef:7d:32:41:c0:ba:15:49:c2:29:19:
         ad:5e:16:df:eb:8f:81:1e:b4:18:e9:97:87:62:99:1f:73:7a:
         c2:bd:7c:a9:35:80:17:e0:86:50:8f:77:97:71:bb:c3:2c:7f:
         79:9f:73:7b:eb:49:a6:48:0e:9f:ee:2f:74:56:d2:b4:e8:c0:
         fb:58:69:59:d0:c1:de:38:b1:fd:b7:36:36:25:95:c5:aa:ed:
         60:35:71:b5:25:77:14:20:dc:58:4a:03:db:90:89:f3:01:5c:
         2e:e5:28:e4:dc:3b:c8:16:70:5d:bd:95:47:0c:f6:3f:a2:55:
         3d:ac:5c:0c:9c:87:a3:85:ab:1b:6b:4e:f3:eb:f6:98:57:95:
         9a:0d:04:2e:7b:92:6f:8f:1d:20:86:7a:ce:85:bd:d6:07:23:
         c1:56:1d:70:37:04:10:0b:c4:53:84:cb:f7:e5:aa:bd:7a:06:
         cf:59:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:48 2026 by rpki-client