Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8fe35b82-e6a5-31cd-b489-00e3e5242e00.roa
File:                     8fe35b82-e6a5-31cd-b489-00e3e5242e00.roa (raw, json)
Hash identifier:          Z1gcbQOQ1CYTVaP2unK1RXqlF9ZJDbNX9RGWmnDYI/M=
Subject key identifier:   A1:D8:C3:F2:61:9C:E4:DC:83:C1:24:78:DA:80:FB:AC:DA:C9:A4:E5
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BCD9B16A395C02347AD4EDC40
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8fe35b82-e6a5-31cd-b489-00e3e5242e00.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        147.124.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:16:a3:95:c0:23:47:ad:4e:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=597a9dd5-8738-4673-b77c-1eca1a8fbc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:c8:06:f3:ec:89:e3:df:4a:b2:a8:a9:90:
                    cf:5f:0f:8e:8b:29:81:db:c8:04:6a:2b:1f:e6:b6:
                    5b:05:bf:86:8f:38:3c:ca:86:62:e2:57:54:84:b4:
                    56:94:1d:66:60:f8:10:7a:28:5a:ab:20:b1:7e:75:
                    56:bf:b3:51:23:2b:c5:94:95:3a:bd:16:3f:b5:55:
                    cd:04:83:7e:a1:d7:76:89:57:28:79:2c:44:51:5d:
                    cf:00:c8:6d:70:ec:fc:49:92:ed:24:30:28:e5:6e:
                    d9:39:2a:35:b4:b9:c1:bd:30:d3:8d:a4:07:36:58:
                    87:4b:a2:ea:5f:b7:83:63:e0:c8:37:99:e7:79:e2:
                    51:64:55:c2:d2:ed:71:bc:ca:1a:d0:37:42:ed:1b:
                    ad:17:f9:fe:7c:2b:a8:49:45:f3:4f:c6:c6:89:5b:
                    24:e5:f3:77:ef:4d:6f:f6:d1:55:97:23:3b:29:19:
                    82:e1:21:36:1e:51:4b:5e:7e:d6:36:e3:bd:83:92:
                    35:b8:11:3a:32:3a:fd:a5:06:a8:79:50:0f:a5:06:
                    a0:fa:cc:48:c7:3c:43:7b:98:3f:78:53:16:18:d5:
                    d9:45:41:b0:c4:dc:ba:73:75:47:ee:08:2d:01:77:
                    e5:fe:46:b2:33:b2:f6:68:70:10:12:38:3e:df:b5:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D8:C3:F2:61:9C:E4:DC:83:C1:24:78:DA:80:FB:AC:DA:C9:A4:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8fe35b82-e6a5-31cd-b489-00e3e5242e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:3d:93:c8:fc:f3:4d:e3:8b:17:2c:40:8d:90:b7:d4:92:
         0d:05:e3:a1:d2:4b:95:29:32:52:de:b1:45:02:09:b2:83:64:
         b2:bf:a6:c9:bf:b5:ba:33:68:30:a8:64:08:2b:f0:f0:3a:49:
         30:4c:04:0e:d5:62:36:c4:76:ed:4f:99:ec:87:c6:a9:a6:e0:
         29:4a:76:c5:9f:90:14:d8:da:be:bb:fe:ca:4e:69:d9:33:e3:
         44:57:47:fd:f6:20:69:cd:53:da:63:9a:56:dc:31:fe:5c:9a:
         f8:b8:54:7f:f1:df:15:b7:b1:68:ae:a3:ac:99:cd:ac:52:7a:
         93:cf:c2:12:d6:e8:d6:f5:d3:b6:a6:c2:67:32:16:30:16:1d:
         9c:51:18:84:bd:b5:54:a9:4a:6b:cf:fe:3d:8c:76:19:03:a7:
         4c:97:f5:03:6b:32:fd:47:b7:a0:8d:0f:20:f5:6d:e6:5f:7f:
         5e:91:dd:e1:72:a8:28:63:3d:99:9a:78:37:71:e6:a0:0e:ab:
         71:5e:db:8e:fd:20:fb:3b:b4:9b:6b:c8:2d:4d:0b:c4:9d:9a:
         f8:59:cd:0e:cb:98:69:0d:64:75:a3:25:bb:21:18:d4:20:27:
         da:7a:dc:10:7e:e7:71:ff:d3:ee:29:d5:e4:5c:1b:10:b7:dd:
         5e:06:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:12:52 2025 by rpki-client