Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa
File:                     245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa (raw, json)
Hash identifier:          KIrLNe2MpZVsd06MtvC16o3gh7TdVIcJ6+95+AdxrK0=
Subject key identifier:   01:20:71:B3:55:C7:3B:68:F9:3B:A5:D0:52:8D:1D:9E:71:31:2E:15
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584E6F3A38330EBD86EAC767C370
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     15313
IP address blocks:        147.124.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:38:33:0e:bd:86:ea:c7:67:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=51b16467-6e41-4616-a1b1-08dd7723f107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:65:28:74:4e:7a:54:8a:1c:41:b2:0b:4b:
                    6e:46:f5:40:cb:62:59:24:d3:a0:69:e6:45:cf:d6:
                    51:3f:3e:e0:e9:8e:0d:35:b0:3d:b4:b2:18:fa:d2:
                    d3:fa:42:cc:c9:85:2b:a7:22:da:6d:e9:e2:aa:5f:
                    e3:f4:51:ff:f4:00:45:6f:83:3e:0e:2a:66:52:f3:
                    91:5a:bd:b6:ee:fb:d6:88:31:a6:f3:c6:16:dc:91:
                    6a:8e:b8:0d:b5:73:0b:2f:76:54:ac:5a:d2:37:c9:
                    f4:7d:38:46:a2:bf:87:e8:7c:5b:9b:cf:c7:66:30:
                    92:b7:8f:96:a8:c6:cf:d9:26:52:6b:3e:8a:5d:21:
                    f2:0f:a5:34:90:b4:e5:44:99:ab:55:a1:ec:7a:89:
                    ed:de:12:d8:1b:f3:a3:41:99:38:eb:ac:0c:94:e7:
                    81:83:7f:93:56:8c:b9:33:a7:2d:1f:db:27:24:47:
                    0a:75:74:cf:75:f6:db:26:1f:34:5d:d5:b8:c0:4d:
                    b7:18:a5:8d:30:d3:e5:99:08:34:a6:1b:e4:55:48:
                    de:7c:f4:d0:9a:63:49:02:02:9a:fc:1b:d1:e3:d9:
                    0e:1b:1c:b6:b2:91:8d:54:1c:63:e4:2d:87:bf:10:
                    19:8c:a9:8c:7d:42:b8:8a:27:02:37:cf:41:7f:75:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:71:B3:55:C7:3B:68:F9:3B:A5:D0:52:8D:1D:9E:71:31:2E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:fd:a5:00:05:12:02:55:1f:fd:9e:e3:b8:72:e7:a3:29:
         c8:a7:a4:38:46:dd:af:c7:8f:f7:ed:00:3e:76:d8:4f:45:b2:
         4a:6a:c4:19:d3:8c:07:d8:20:a2:05:bc:f0:4e:ff:66:38:a2:
         a6:ee:93:d8:34:15:ac:08:29:3b:81:77:c6:c9:45:0f:9e:3f:
         10:2a:62:23:c0:4a:d3:6a:4d:36:90:8b:1b:8b:75:a3:7b:a0:
         f9:d6:ca:ad:3d:4a:0c:44:be:65:3e:af:35:8e:9d:e2:77:49:
         40:56:cc:2e:0d:26:a8:45:3b:8e:f6:91:9b:58:04:b8:70:70:
         85:47:2e:ba:ab:9d:fb:62:ed:03:2e:87:90:e2:fb:eb:24:58:
         85:c1:29:30:7b:0c:55:f2:12:ec:3b:9d:ab:95:59:b0:b8:fe:
         c5:f1:0f:75:22:b3:69:3f:b3:f8:07:23:9e:e9:09:97:cb:1d:
         cd:df:c2:be:d0:04:62:24:a7:97:19:24:c9:33:d3:8c:30:ff:
         b4:5b:86:6a:6c:d9:c8:50:53:7e:13:2a:d0:64:4a:26:7b:1a:
         60:b9:fc:fd:47:6c:19:29:71:66:c1:93:1f:88:14:ae:13:ff:
         84:27:31:74:58:35:3d:99:8f:a6:03:3c:bb:80:5b:92:b0:0f:
         2d:7e:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:19 2026 by rpki-client