Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4e5f189e-a38d-3bdf-b82c-3a43df657e3c.roa
File:                     4e5f189e-a38d-3bdf-b82c-3a43df657e3c.roa (raw, json)
Hash identifier:          uZQ1O1cIDcc2KwA18JH31BmXhPAXs2jCpohArq8JGgs=
Subject key identifier:   15:B5:BB:5D:0D:13:F0:80:88:3B:FE:20:10:A7:4F:A7:0F:0E:70:9C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AECC1382B2C1BB79AD288BA80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4e5f189e-a38d-3bdf-b82c-3a43df657e3c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        147.124.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:38:2b:2c:1b:b7:9a:d2:88:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c318e45d-c63a-4e37-b5bd-df1e6f9ed8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:00:c9:2d:b8:cf:4e:f8:4b:ec:0d:cd:64:
                    63:bb:78:58:6f:47:13:18:9c:28:e3:b5:f7:9d:05:
                    42:b6:00:03:ea:a1:a3:9d:bc:ec:59:41:f5:16:8b:
                    db:ac:3c:a3:a9:fd:38:e9:e8:04:15:ed:fb:d6:84:
                    1e:35:60:21:a1:a4:1d:94:e1:3c:69:7b:ee:2d:78:
                    6b:e6:09:06:f0:0e:32:cf:94:40:d9:7e:bf:1a:05:
                    ee:88:9a:28:05:95:d2:10:aa:0d:2c:40:8b:29:6f:
                    cc:2f:24:c9:69:9d:b6:10:cc:77:dc:db:f1:8c:57:
                    4e:9f:18:ff:ee:17:e4:37:99:6c:88:c3:72:17:63:
                    c9:2e:41:02:f7:8c:c8:6b:f6:67:3b:06:c1:2f:e8:
                    9a:99:44:b9:6b:41:0b:49:c1:c6:71:14:9c:12:d2:
                    fe:e8:16:72:99:47:d3:e5:42:f0:ca:95:db:2a:c1:
                    43:06:55:3f:96:07:27:6a:b8:14:44:fd:10:17:c9:
                    05:c4:06:ac:13:90:cb:90:7c:16:be:38:39:18:04:
                    7b:0d:02:3a:5d:e6:e1:80:1c:31:65:d2:17:5b:c1:
                    50:bc:75:c7:f3:ee:20:b8:17:98:fc:d9:3a:9e:b1:
                    c7:9f:86:51:0b:83:7d:b7:bd:e5:1c:8a:ce:d4:a2:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B5:BB:5D:0D:13:F0:80:88:3B:FE:20:10:A7:4F:A7:0F:0E:70:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4e5f189e-a38d-3bdf-b82c-3a43df657e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:13:cc:90:5b:64:79:7a:fa:12:e5:87:97:79:fb:03:58:99:
         3e:da:d3:d3:ad:90:3d:9a:1a:87:4b:e1:c7:2f:98:dc:75:09:
         0c:e4:35:e6:3c:2a:a3:ce:e0:91:b1:58:91:a7:62:d5:47:53:
         07:06:87:5b:49:d1:51:fe:bc:64:8c:0d:c5:5e:c1:dc:4c:cb:
         68:22:4a:00:69:ef:92:37:9b:54:6e:be:69:bf:27:10:f5:fe:
         13:9f:39:b8:c0:21:5c:4d:af:78:07:0d:a0:1e:e5:d9:67:ed:
         16:9a:1f:87:bf:71:f6:13:61:a5:27:29:9c:7e:e1:be:87:08:
         8f:b6:7d:ea:da:13:a7:d3:d7:56:a8:ef:3f:00:a0:42:5d:5d:
         ea:dc:3d:15:6f:3c:a2:ae:6a:20:62:47:03:c0:e2:9a:98:36:
         b9:cd:49:7d:82:7f:84:b0:ff:01:6a:cc:74:c0:04:02:a8:cb:
         79:90:c5:ec:b5:8a:45:49:a5:78:a4:af:08:13:61:9b:68:89:
         e6:5c:41:d6:4a:f7:9c:b3:db:92:08:0d:38:95:13:e9:31:eb:
         b5:90:9a:94:6b:d4:0d:27:bf:25:62:9e:5c:4a:c6:80:32:01:
         40:ab:7c:9a:9b:45:07:18:47:71:cf:74:44:c0:8d:49:32:10:
         a5:4f:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:54:58 2025 by rpki-client