Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/188c51de-a2a1-31f4-b455-2afd5eaf8414.roa
File:                     188c51de-a2a1-31f4-b455-2afd5eaf8414.roa (raw, json)
Hash identifier:          mlVf5dhR2wC0A8Ksyo0n3sv0nWuEy1zv4Uc++sUaR20=
Subject key identifier:   DE:7B:BE:E4:86:62:71:ED:52:E4:EC:69:C2:F2:AA:56:3F:07:32:2B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D8EF574B5B3C0BB9329564340
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/188c51de-a2a1-31f4-b455-2afd5eaf8414.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     15313
IP address blocks:        147.124.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:74:b5:b3:c0:bb:93:29:56:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=907a24b1-93bd-416f-9f4f-317188a67166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:e0:0a:04:01:ec:a3:3f:f6:62:26:e6:3b:
                    71:54:09:8c:f2:d2:1e:1f:14:49:4e:fa:2f:db:fb:
                    53:77:e1:ed:e2:f7:11:7a:3e:b3:cb:b6:95:83:1b:
                    22:35:b2:ec:c4:41:18:a1:a7:a5:1e:60:16:2e:90:
                    56:c2:ec:5e:ab:3d:75:c5:7e:24:01:60:67:4c:8f:
                    c9:c1:0f:d5:1b:8d:4c:09:79:d4:e7:74:98:2e:47:
                    06:ff:24:ef:3c:91:31:13:ea:b1:11:f9:cc:6d:04:
                    99:f0:e9:b5:0d:2b:84:43:e6:23:5e:14:ad:c1:dc:
                    9c:1a:09:8e:7a:48:79:b1:59:48:ee:10:53:24:d9:
                    2b:73:14:3d:9c:fb:53:4e:14:2e:bf:d3:cd:f8:cd:
                    f2:83:32:d1:9e:d2:44:31:05:00:fd:fa:f0:d1:0e:
                    b3:47:d4:96:1a:dc:d2:0b:98:9b:a5:e7:f7:27:70:
                    4c:fa:0b:a0:9c:04:1a:24:3f:42:3f:25:32:2b:fa:
                    13:82:54:48:31:7a:77:40:c3:f4:07:c5:e7:cb:ab:
                    dd:a8:8e:42:2c:ed:e2:5f:16:7c:d1:ea:b7:6c:bf:
                    aa:f0:29:77:4e:91:bb:a6:d0:5f:5a:c9:45:f1:44:
                    f4:03:bc:a1:2c:75:97:00:78:25:d3:97:37:10:62:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7B:BE:E4:86:62:71:ED:52:E4:EC:69:C2:F2:AA:56:3F:07:32:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/188c51de-a2a1-31f4-b455-2afd5eaf8414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:81:e3:63:82:02:23:42:a1:09:f8:2c:60:c3:0d:67:95:
         98:b2:58:a6:30:ae:47:be:57:dc:89:ad:88:68:bd:d5:21:0f:
         3d:6c:13:b9:0c:53:9d:10:67:d0:7c:fd:35:18:35:b5:8b:92:
         4c:f8:2a:fd:f2:98:ec:8f:84:55:7f:31:05:7c:56:13:4e:6c:
         30:94:ff:46:82:f2:d4:2e:df:c8:66:c7:2d:66:00:45:11:83:
         e1:39:2b:5f:77:ee:0b:2d:6e:20:5b:50:52:3f:37:65:75:5f:
         4e:c2:ee:1b:47:57:a2:71:e0:dc:62:59:3c:eb:4a:5b:f1:d8:
         87:fe:52:7b:42:d0:0f:24:12:a3:77:f0:cf:24:9f:49:e9:de:
         20:b3:15:a6:f8:0d:c7:05:04:a0:03:90:ab:41:10:50:34:57:
         18:63:72:91:41:84:a6:59:a9:54:55:c4:d0:16:dc:e2:80:aa:
         6c:05:86:ba:46:5c:04:17:75:19:01:49:7c:c6:77:43:27:64:
         35:36:f0:ab:52:ec:6e:63:10:80:6d:b1:d2:74:94:f4:78:cc:
         d4:41:ee:6c:ec:48:2e:04:eb:17:4a:ac:0c:21:b7:5e:85:a8:
         9c:97:89:a6:ff:57:9c:61:c6:be:8e:78:2c:84:c8:02:ff:9e:
         2c:35:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:57:17 2026 by rpki-client