Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1071e047-3aaa-3e68-82be-728bc64e3766.roa
File:                     1071e047-3aaa-3e68-82be-728bc64e3766.roa (raw, json)
Hash identifier:          ylkD/ynXFR1AARBoNNrt+hg5SnNUvHJSLx2yusgC3lQ=
Subject key identifier:   F6:20:35:A8:6C:14:D2:7F:AC:C6:46:B8:D0:88:F8:2C:3E:AD:3E:7D
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BCD9B28662C97763D608D1140
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1071e047-3aaa-3e68-82be-728bc64e3766.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        147.124.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:28:66:2c:97:76:3d:60:8d:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=4b5d93d5-6a3e-42da-b773-8e919307e6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:6f:0f:37:48:17:85:7f:30:73:51:5c:f9:
                    60:ef:ab:76:0d:5d:94:88:c6:f2:d6:8f:fe:bc:d9:
                    af:20:05:6c:59:6d:d2:6b:aa:ef:c1:82:40:0c:ce:
                    8f:2a:f0:5a:35:b0:06:cb:e4:7a:a8:62:3b:fe:0e:
                    33:de:23:c2:6d:5a:3d:f5:aa:4b:11:31:af:25:7d:
                    bd:f6:53:b9:1a:70:c0:cf:25:35:80:c9:9a:ce:39:
                    65:75:7e:53:78:62:8e:7a:6f:16:73:0d:a8:ee:88:
                    00:0d:4d:e5:96:f6:b1:80:f9:23:85:f5:b5:76:fb:
                    2e:54:51:6f:4f:0a:e8:a1:fa:81:b6:40:20:0e:34:
                    30:23:8c:91:cc:e4:2b:56:3e:26:c4:2d:1e:0c:03:
                    49:c2:33:4c:9c:18:97:6f:61:7e:38:d8:62:bb:93:
                    23:0f:0d:54:e0:4e:21:78:e8:5a:35:77:ec:ad:c5:
                    08:0e:54:a8:ec:4f:1b:72:10:f3:89:5e:5f:b4:63:
                    a5:3a:20:a8:87:4b:1f:db:d6:81:90:b3:ed:ef:6a:
                    09:7a:b2:a2:01:40:63:03:f5:b3:fe:82:8e:d7:99:
                    98:3d:81:01:fe:f9:f2:23:a0:a5:52:65:17:dc:ea:
                    f5:d0:cb:39:00:3f:f1:e6:e3:84:e0:bc:89:60:04:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:20:35:A8:6C:14:D2:7F:AC:C6:46:B8:D0:88:F8:2C:3E:AD:3E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1071e047-3aaa-3e68-82be-728bc64e3766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:07:88:f9:b2:52:34:c0:94:cd:20:ad:ef:cd:15:ec:83:ad:
         15:fd:b5:3b:92:3b:a9:77:f9:85:2e:89:83:a4:55:fe:b6:c8:
         04:d8:8d:b7:74:f9:d0:f0:82:64:e8:1b:ee:68:fc:b1:f9:b4:
         8e:71:07:02:bc:29:36:1c:a9:cb:29:02:29:b2:05:3f:52:ad:
         45:ef:e7:75:f1:93:a9:be:4b:9d:d8:9a:04:ea:13:a7:59:57:
         24:dd:22:62:52:71:c4:20:b6:bb:0a:98:77:2f:9e:07:f2:96:
         e5:c7:23:35:93:78:ed:45:03:7a:8e:19:29:a2:aa:69:92:5f:
         9b:41:a9:5d:97:25:43:74:1e:f8:c6:4f:8b:ff:e5:53:4f:03:
         c0:5c:73:b1:64:2a:db:04:cf:d7:19:8c:f9:c1:6d:4c:7c:48:
         79:14:74:3b:e0:4e:ae:d7:bf:75:dd:3e:0a:af:4c:3b:fc:e1:
         91:01:60:9c:c1:58:1f:9e:39:18:08:61:e0:00:01:7a:14:22:
         97:56:ff:5b:83:70:6d:0e:cf:ee:0c:78:06:1e:83:d3:b9:ea:
         e8:51:f9:a4:e6:d6:65:a8:5f:3c:5e:58:10:cd:47:39:a7:68:
         a5:b3:bd:e9:38:e5:77:94:0e:b4:a8:66:01:ac:a4:12:c6:d8:
         bb:fa:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:13:04 2025 by rpki-client