Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa
File:                     dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa (raw, json)
Hash identifier:          MmJE3SK2pKPuyKFg2Jl+2jn70tC5Ik9+GrfF4rFFnpg=
Subject key identifier:   5F:F1:B3:2F:3F:FD:21:4D:8C:E8:B5:97:92:D2:F1:4B:4A:74:E6:43
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D8EF574A9C6EA13B28589D500
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     15313
IP address blocks:        147.124.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:74:a9:c6:ea:13:b2:85:89:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ac97d609-d66c-4f1d-9f83-58e2819f6a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:5e:f8:50:6a:1c:b9:10:d4:5c:00:00:42:
                    da:cc:08:ba:31:43:d8:72:dd:f1:d4:9b:91:86:34:
                    7d:c7:f8:96:20:2a:28:7b:84:a6:cd:0a:8c:a4:74:
                    cb:35:c1:21:32:57:4c:62:a2:4d:5c:6e:b5:45:44:
                    1e:8b:96:a6:c4:43:63:a0:34:53:46:e9:c8:f0:0e:
                    e7:a4:26:c8:d0:0f:63:64:0e:6d:aa:a2:47:6e:03:
                    36:2a:25:72:00:e8:9b:00:34:db:00:57:36:9f:e0:
                    8d:e0:57:2d:6f:6b:89:8f:39:6c:bd:73:74:b6:5a:
                    e6:ab:c1:ae:71:9f:07:0e:de:51:71:de:b3:22:8f:
                    d6:4d:37:d8:ab:46:b1:bd:72:a3:f8:91:40:b8:07:
                    3d:7a:4f:45:8e:2a:2b:00:48:4b:46:8d:42:c4:10:
                    94:72:92:35:04:c0:83:b8:e3:37:78:5f:f4:55:53:
                    6d:cd:6f:61:b8:c1:84:cd:d0:90:1d:4e:3f:e0:ce:
                    b7:12:b6:00:65:6b:25:8e:32:a5:39:d0:81:6d:e3:
                    5c:dc:e1:54:c8:e3:9f:1f:3a:1a:4a:5d:8c:c1:1f:
                    56:67:eb:5b:67:53:ad:1d:f3:d2:dc:79:d8:85:d8:
                    c4:31:b7:f3:95:e9:d3:17:70:6b:78:fb:e3:7a:f8:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F1:B3:2F:3F:FD:21:4D:8C:E8:B5:97:92:D2:F1:4B:4A:74:E6:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:de:02:a1:54:60:15:f2:bc:b1:bd:73:06:71:bf:25:cf:b4:
         5c:fa:c8:9b:3f:cc:1f:68:dc:45:7a:7a:d3:da:d5:87:12:da:
         ed:a0:94:45:b4:78:d6:a9:d3:5d:20:e5:28:02:36:84:10:1d:
         24:5b:0b:0a:8b:93:ac:0b:c4:b0:a6:e0:e7:31:03:b2:94:1d:
         ad:63:eb:ce:89:97:bf:ef:e6:ce:22:b3:30:77:a9:ca:50:d3:
         f8:dc:5f:f1:b6:ff:e8:22:5f:39:d1:fe:fe:96:4a:0a:ef:16:
         55:cd:cd:93:04:7f:cc:14:bb:1d:7a:50:3c:2d:70:b6:f2:c0:
         8d:25:27:d5:63:9b:95:14:9c:ce:b2:68:64:cf:b8:45:0a:4e:
         bf:8c:1f:de:ea:8b:6e:9b:b1:29:0a:4a:93:6d:43:9b:31:d1:
         f2:a6:94:f9:30:67:78:d8:1f:fc:5e:51:ff:92:85:19:4c:d0:
         e8:5b:8d:77:6a:c0:2d:0b:f4:2f:d0:58:a0:d5:d5:b3:14:20:
         30:66:d1:af:e7:57:e5:fa:de:55:25:3b:c4:e9:3e:0a:7d:34:
         e8:60:47:6c:8f:70:87:bb:82:9f:aa:c7:c0:de:e9:df:f3:1e:
         de:69:b5:f2:2b:87:c6:b4:b3:25:19:77:ab:d8:bb:8a:a4:68:
         61:a1:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:57:18 2026 by rpki-client