Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59/611e8019-8cb3-3bbe-b44a-513acae3d54a.roa
File:                     611e8019-8cb3-3bbe-b44a-513acae3d54a.roa (raw, json)
Hash identifier:          V7Y/HBjDSCx3JfnEltvZTyY7OQ0S/ZhrTl+2Emj0HDY=
Subject key identifier:   A4:63:F4:5C:22:33:36:D4:94:A4:24:B2:38:4F:FC:92:95:7B:2B:0D
Certificate issuer:       /CN=f62dd428-2f30-4262-bc65-70f1c7a9da59
Certificate serial:       010D0C9F4328584ED1672A15328452F757E39840
Authority key identifier: BC:E4:A6:5A:68:88:3E:73:3E:E4:0E:26:D3:1A:3E:1F:34:10:CD:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59/611e8019-8cb3-3bbe-b44a-513acae3d54a.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     22616
IP address blocks:        168.246.8.0/24 maxlen: 24
                          168.246.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59/f62dd428-2f30-4262-bc65-70f1c7a9da59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59/f62dd428-2f30-4262-bc65-70f1c7a9da59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:2a:15:32:84:52:f7:57:e3:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62dd428-2f30-4262-bc65-70f1c7a9da59
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=4c3ea357-4102-4001-b5b5-772b33eb731e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:97:fc:9f:48:70:fd:c7:e6:49:db:2f:36:
                    94:7b:f9:ec:ef:81:20:66:57:df:05:13:11:32:b5:
                    92:a7:ae:5f:66:5f:c6:9c:54:7e:bb:30:49:5b:68:
                    11:24:79:5a:1b:9c:c8:21:c5:cf:92:3b:c2:ba:f0:
                    07:9b:bb:08:72:30:a7:d5:b0:91:81:b0:31:f1:16:
                    4a:fe:7c:1a:9a:37:51:6a:46:de:ec:e4:8c:b4:40:
                    0c:60:c3:f5:7a:4d:b8:a4:98:03:74:65:9b:9c:1c:
                    b4:ae:81:b2:48:2b:48:20:54:38:34:92:1a:28:85:
                    be:d4:c4:8f:0a:ef:b0:ba:cf:9a:18:63:7c:d5:0d:
                    5b:cc:66:ca:0f:3a:58:e3:4b:de:9c:68:d9:91:1b:
                    88:e8:ad:a0:86:cd:8f:7f:3f:40:ea:01:bf:7e:98:
                    89:47:01:c6:d3:37:3d:94:f5:7d:58:db:e6:47:79:
                    1a:66:5b:b3:36:7b:5f:e6:50:c9:a9:cc:a7:b3:79:
                    a0:a7:4f:db:56:30:fe:27:83:fe:e7:2d:8f:75:cb:
                    cc:8f:14:d7:e2:ab:9b:46:e0:68:58:be:d1:ac:af:
                    2a:4f:d7:2b:e6:b6:0a:9f:7e:ff:10:de:20:5b:8e:
                    61:63:91:c5:a3:bf:11:bc:85:9c:61:59:76:5b:21:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:63:F4:5C:22:33:36:D4:94:A4:24:B2:38:4F:FC:92:95:7B:2B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59/611e8019-8cb3-3bbe-b44a-513acae3d54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59/f62dd428-2f30-4262-bc65-70f1c7a9da59.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E4:A6:5A:68:88:3E:73:3E:E4:0E:26:D3:1A:3E:1F:34:10:CD:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f62dd428-2f30-4262-bc65-70f1c7a9da59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.246.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:8b:68:a9:9d:b4:8c:99:1b:3d:57:77:c6:02:3a:cd:a9:
         73:e3:48:65:f9:84:5d:04:74:b0:0d:06:1a:44:5f:24:8a:9e:
         25:86:ad:14:18:d1:cf:b7:fb:cc:a3:34:c0:1d:20:95:79:1f:
         69:5c:88:10:9c:bb:f5:57:45:2e:b3:76:bf:b2:fb:16:bf:16:
         fe:28:96:3a:39:d8:61:51:01:96:be:4b:37:d9:f7:63:3a:7c:
         c7:17:f1:6a:53:31:b2:50:1b:80:3b:21:7e:9a:53:fd:4b:3e:
         c4:ce:29:2f:4e:60:3a:fd:dd:15:43:97:26:db:22:63:a8:25:
         2d:fa:6f:83:35:44:40:7c:8e:5c:8a:1b:18:3a:a0:9a:b7:37:
         ae:9b:82:6c:ba:5d:5c:25:79:4d:f6:82:a4:00:8d:ff:d1:6d:
         59:0f:c7:65:9e:fd:35:1c:92:e4:d1:cd:d0:6b:fc:a8:48:e4:
         2a:1e:19:6a:9f:1e:c0:a6:19:42:e6:cd:06:35:63:46:c1:63:
         66:55:39:b9:81:c0:9b:4a:51:e6:32:5c:56:93:1b:63:a5:f5:
         21:71:bb:7f:83:ef:6e:75:61:14:fc:96:49:e7:93:ef:1f:dd:
         22:f5:37:41:40:88:91:19:bb:aa:9a:c2:fe:6f:34:01:50:b0:
         13:74:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:44 2026 by rpki-client