Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/45c3cded-a876-3dd5-bb50-b3e5e4cbeb44.roa
File:                     45c3cded-a876-3dd5-bb50-b3e5e4cbeb44.roa (raw, json)
Hash identifier:          SVlO3q/0MWS4WoMof+3ITIQKhGRrYVVsvzYWaLtEfdw=
Subject key identifier:   44:4A:23:0E:C7:3D:CD:E7:AF:A3:37:44:27:F8:99:A3:AA:C0:8E:62
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584E640F732FC3769A93CE6B0700
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/45c3cded-a876-3dd5-bb50-b3e5e4cbeb44.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     26744
IP address blocks:        147.124.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:73:2f:c3:76:9a:93:ce:6b:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=681501fc-9a3c-4e3b-a98b-955766411dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:3c:fb:ee:e3:9c:85:7c:70:fc:92:46:0e:
                    18:2c:c4:31:87:30:a6:e6:2a:52:6e:13:2c:45:7d:
                    69:c8:b2:8c:74:31:d0:a2:98:c1:88:fa:81:73:c7:
                    1d:9e:65:d9:94:83:89:ca:ea:fd:e9:0e:bb:87:23:
                    63:b5:ed:0f:67:6c:e1:7a:7e:2a:3b:17:ff:c4:f7:
                    01:68:cc:28:db:f0:97:c1:5c:ca:88:f9:64:38:42:
                    25:05:80:b5:11:3b:e9:c7:4e:3a:db:ba:6b:eb:d6:
                    02:42:9e:c5:f2:ac:1c:94:cd:69:c4:35:c4:e9:76:
                    bf:7b:04:ec:02:f4:77:c3:32:2f:ff:dc:36:1f:47:
                    5a:bf:0e:fd:2a:a7:44:de:d1:00:4e:0a:a7:5d:32:
                    65:29:75:0d:49:99:52:5a:23:13:3c:38:8a:93:51:
                    cd:25:32:2b:1f:c0:15:72:de:28:eb:3f:04:f0:53:
                    cb:19:3a:85:2c:53:13:79:20:c4:26:fd:22:a6:69:
                    9b:4c:5c:8f:7f:a3:01:b9:39:5c:49:21:2c:6f:c1:
                    54:a9:e2:f7:6f:e3:cb:cf:21:e7:cb:e9:c6:4f:bf:
                    f0:ec:df:8a:eb:3b:1d:e5:c3:b3:72:c0:87:90:b4:
                    d5:7c:d9:cb:40:46:b9:3f:ed:20:3e:c0:23:b0:f5:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4A:23:0E:C7:3D:CD:E7:AF:A3:37:44:27:F8:99:A3:AA:C0:8E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/45c3cded-a876-3dd5-bb50-b3e5e4cbeb44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:41:77:02:4f:4e:f4:90:2e:1f:83:68:41:cc:b2:f3:04:40:
         1e:71:ae:a9:a4:f0:4d:38:86:1d:0a:66:33:2b:e6:a7:7a:f8:
         8a:53:50:d8:53:6e:65:e0:25:42:89:61:03:7f:33:e1:b2:98:
         7a:84:4f:23:88:9e:b3:9b:7d:7a:23:b3:c6:4d:1d:32:2a:39:
         47:a9:1b:8b:a3:c2:86:d6:3f:cb:83:db:ee:f1:7f:71:5e:e5:
         8e:0a:93:ca:e8:b7:3d:f1:0f:b4:86:30:9e:6a:96:d4:25:6d:
         1c:c2:77:9c:96:d8:21:ca:84:eb:db:e1:9f:e9:56:64:06:68:
         93:27:ff:d4:ed:86:a2:be:93:2b:40:68:5b:99:fc:de:98:94:
         85:f5:54:db:6f:83:a8:73:87:59:24:59:3e:4f:ed:cd:c1:21:
         e8:aa:49:8b:6a:3a:e0:d7:d3:fb:60:95:7b:f8:f0:7a:44:7a:
         5a:81:95:fc:c4:38:ce:15:fc:30:b5:a9:bb:2f:cd:dd:fd:5d:
         78:45:c5:28:6a:c2:1a:03:d2:85:9e:6c:60:d1:7d:47:da:37:
         a2:08:ae:fb:af:75:dd:fb:6e:80:02:b8:63:9f:bb:15:48:28:
         95:e4:eb:7b:e3:c0:86:2c:fe:66:4c:31:83:78:ff:c0:d7:da:
         02:89:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:39 2026 by rpki-client