Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2332260e-cb50-3fde-a80e-36b7fcfb6360.roa
File:                     2332260e-cb50-3fde-a80e-36b7fcfb6360.roa (raw, json)
Hash identifier:          JTxP6SICje+f9zVarOjvzMA6o8U3n0xK9/XofXbIny4=
Subject key identifier:   CA:B4:8D:15:B9:61:10:0F:61:03:FE:4E:A3:D2:85:41:F0:74:03:5E
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D8EF574353E4BBAEB71784300
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2332260e-cb50-3fde-a80e-36b7fcfb6360.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     26744
IP address blocks:        147.124.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:74:35:3e:4b:ba:eb:71:78:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=a091b75b-7654-42e8-ae88-0ed2a30bc11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:ff:fc:54:cd:f3:53:b9:42:32:c6:57:25:
                    b1:c2:03:b5:07:63:a8:71:f7:66:a7:40:17:e3:11:
                    f7:51:91:eb:1c:df:64:ac:0e:85:e9:5d:39:2b:b4:
                    5a:80:6b:27:bd:ec:70:cf:6d:00:b0:bc:ad:50:f3:
                    6a:10:33:50:ca:53:15:99:aa:86:f3:84:3f:2f:b4:
                    81:78:9a:20:c2:4e:4b:3c:dc:85:44:9a:f7:a5:34:
                    23:40:16:3c:fd:55:66:a1:a6:2e:95:5c:35:bf:39:
                    bd:85:7d:1b:10:a0:d1:ac:8c:c3:d3:c5:df:fa:d5:
                    81:ec:2d:c8:4a:ab:b3:05:66:78:0d:ed:15:d7:c9:
                    ee:3c:62:8d:28:64:ef:9f:9a:78:bd:38:c8:1f:81:
                    49:cf:f7:c2:1c:1b:ec:c5:5f:6f:ac:2a:0e:a3:2e:
                    01:7a:3a:7b:a5:89:7b:bd:0f:ef:36:53:0f:6c:70:
                    92:ef:d9:69:01:4b:24:0d:2a:45:3b:26:33:68:68:
                    f4:66:38:88:b1:51:a6:ee:bc:1a:1e:f5:80:a8:f5:
                    34:7b:c6:39:d4:1d:c5:70:ae:6e:0c:4f:34:a1:80:
                    ca:06:f5:38:5d:10:cd:de:9e:f6:68:95:ba:f7:0d:
                    65:0c:df:76:de:ea:f9:ac:f1:76:50:e7:d7:00:f8:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B4:8D:15:B9:61:10:0F:61:03:FE:4E:A3:D2:85:41:F0:74:03:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2332260e-cb50-3fde-a80e-36b7fcfb6360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:90:73:d2:ec:3c:50:ca:3d:67:20:5d:fa:46:10:aa:43:
         e1:21:e6:51:64:27:ed:a7:0a:1b:a9:78:68:5f:fe:d0:00:d8:
         13:22:e6:7b:a9:5d:e0:7e:dd:46:e4:1a:de:6c:06:7a:b3:96:
         ee:ed:b8:d5:b9:1d:34:09:1c:e8:e6:13:01:95:a1:6a:f9:c5:
         7c:9b:91:61:92:2a:96:f2:42:6f:b1:93:93:b7:3f:67:8f:07:
         1a:66:be:7f:da:46:e8:36:f8:43:66:9d:d4:1f:5b:55:71:d3:
         ff:99:f2:c0:83:58:70:4b:cb:1b:53:ac:3d:6d:13:7e:15:b4:
         67:25:a0:d9:50:53:4e:60:9b:62:a2:39:41:d2:f9:4a:98:89:
         fb:19:68:d3:e2:18:c3:fd:6a:8a:04:72:c8:11:4e:2c:b0:45:
         65:e2:1f:cf:0a:0a:f6:4e:14:ea:0b:3e:8d:81:11:10:30:25:
         a5:fd:3a:d0:ac:c9:0b:5d:83:ba:4c:c3:1a:02:6e:e3:7a:35:
         0f:da:9a:ff:8a:16:f1:3f:e3:c8:84:73:76:ae:6c:63:cc:d0:
         98:4a:8b:78:24:78:80:71:2b:29:5b:4c:a4:3e:ed:5f:e7:e6:
         42:55:87:37:51:4e:a2:bd:00:0e:96:20:d8:af:8a:18:2b:69:
         01:c1:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:56:14 2026 by rpki-client