Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/65b76c03-234d-329e-a05c-0710c292420d.roa
File:                     65b76c03-234d-329e-a05c-0710c292420d.roa (raw, json)
Hash identifier:          Hs37L98WqMEF0J3VnkU9goMqc8haWTRgVm//HzORA4I=
Subject key identifier:   AB:05:0A:E6:4C:82:D2:80:5A:72:BB:F6:CA:60:A8:F1:DA:CA:80:EA
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D8EF57486030ABA33D642FA80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/65b76c03-234d-329e-a05c-0710c292420d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     393740
IP address blocks:        147.124.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:74:86:03:0a:ba:33:d6:42:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=7df09395-6b1b-4d60-aa12-bb058a10af89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:fe:6c:9f:a2:b7:7a:3e:57:f8:29:07:1e:
                    91:cb:e1:b2:cf:da:11:c6:d5:74:94:ff:43:7e:78:
                    3a:cd:60:41:14:7d:b6:fb:af:f5:59:e1:ea:7c:08:
                    5b:fb:da:8f:9f:dc:7d:7c:63:03:91:bb:63:ea:c7:
                    0d:9b:7b:76:76:0f:85:6d:6b:89:82:48:96:0c:30:
                    27:e6:88:11:e0:01:57:a5:b9:bc:2f:56:8f:e1:72:
                    32:71:e1:69:04:ce:aa:89:53:f2:cf:bb:ed:15:52:
                    b5:31:c4:41:de:ff:38:d9:bf:1e:cb:36:63:75:e7:
                    6f:e4:8e:1a:94:3b:3e:b4:da:7e:34:f0:0c:f2:4b:
                    c3:91:85:25:3e:62:74:34:f8:0b:01:96:f5:57:c4:
                    78:40:bb:a5:63:4d:a7:5f:65:60:ba:15:df:6b:96:
                    9d:2a:67:02:f1:97:2d:be:30:9e:c4:14:a1:af:44:
                    38:9e:96:c9:73:24:72:9d:4c:a2:ec:76:d8:6c:7e:
                    33:10:54:85:11:93:68:4f:f4:70:07:2b:b8:d8:56:
                    97:97:79:eb:6f:a2:32:83:44:5a:38:dd:34:10:9b:
                    cc:3f:e8:3e:18:35:3b:45:31:8f:d6:07:e2:93:86:
                    c8:0d:48:9f:7e:c9:43:1b:1b:9c:b2:4c:8e:fc:d5:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:05:0A:E6:4C:82:D2:80:5A:72:BB:F6:CA:60:A8:F1:DA:CA:80:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/65b76c03-234d-329e-a05c-0710c292420d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:59:61:8b:68:20:10:de:4d:e5:46:8a:16:ef:e6:97:56:e7:
         66:4d:72:0a:db:75:c1:39:a4:60:ee:78:80:77:29:4c:93:c9:
         d0:92:8b:7d:ff:cf:42:5e:3d:11:af:e8:f2:60:ad:9c:47:36:
         5e:09:87:55:04:a3:6b:02:5d:54:78:fb:00:b8:40:5a:7e:ac:
         0b:61:49:c5:45:3c:64:42:c8:b3:28:40:a2:5c:88:f8:dc:42:
         1c:13:d3:0d:2e:0a:64:17:24:34:ac:12:d9:8c:e5:4e:fc:97:
         11:22:35:4d:80:e2:04:36:95:d9:c1:2e:17:30:97:cd:09:7c:
         77:0a:8c:2a:4d:61:b1:36:9c:7c:3e:3f:10:12:6d:27:13:70:
         43:c0:4b:29:14:9d:93:ba:e0:ac:d5:de:5c:a6:18:be:d9:9c:
         66:3a:db:1d:ce:1f:f3:33:3a:5f:70:d0:cb:80:5a:9f:c1:47:
         06:21:7d:bb:43:3b:0f:d2:77:1b:88:23:0f:4b:dc:18:a1:33:
         59:f7:97:32:e7:3a:0c:dc:0a:57:a5:5f:03:30:4e:11:ec:38:
         f4:7d:ac:4a:83:e5:de:fc:7d:7a:ca:ee:03:bf:09:ce:a7:51:
         59:a3:65:79:44:c9:30:9c:ad:7b:58:55:3b:31:c5:71:c8:bf:
         6b:ea:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:57:47 2026 by rpki-client