Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4faa0bb8-825d-3134-a243-0635887e58a3.roa
File:                     4faa0bb8-825d-3134-a243-0635887e58a3.roa (raw, json)
Hash identifier:          wlqTEV42+nU64iRvoPHvgeYAD0jUAQpdbZ6v7sJ8v2g=
Subject key identifier:   6A:C5:72:FF:D0:15:A4:C9:EE:00:2B:FD:9F:56:60:DE:81:F8:62:38
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F067242EAB3BA03B0E36802C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4faa0bb8-825d-3134-a243-0635887e58a3.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        147.124.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:42:ea:b3:ba:03:b0:e3:68:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c089ff67-b135-4e3e-b96c-39ad169bda1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:a2:9b:d7:7c:89:d3:4a:29:5c:42:4e:d7:
                    34:1d:54:5f:2a:44:e8:e5:7c:54:77:fc:1d:70:84:
                    c9:12:fd:40:89:02:4e:d5:ae:e3:88:91:92:33:7f:
                    e1:b2:da:df:bc:65:8c:13:4c:74:8d:cf:4c:61:b5:
                    b7:e5:a5:45:f7:d3:4f:71:1a:0c:2c:eb:71:b1:33:
                    31:7d:b1:6e:7a:10:93:6a:70:f3:63:18:76:c6:10:
                    d0:62:7f:d4:a6:fe:8c:67:10:ed:31:a7:1f:34:53:
                    b4:c0:ff:ed:de:24:24:e3:30:52:50:b5:32:f6:78:
                    46:cf:8f:f9:aa:ad:19:89:d4:cf:66:61:d0:ca:e1:
                    d3:88:54:49:25:5c:a0:f0:a8:6b:96:b9:a8:14:94:
                    e9:a5:2a:cc:4a:6d:f6:d6:22:fa:3a:f8:58:43:2b:
                    63:ee:9d:58:cf:2c:ed:43:d5:96:a0:ed:9e:3c:33:
                    0e:7f:37:f5:e5:3c:dc:b5:9b:d4:b3:36:85:91:b9:
                    67:fc:a3:78:3c:a9:2c:64:9e:8d:99:61:89:bc:d7:
                    6b:56:70:81:bc:0a:eb:76:3f:e4:91:74:f3:a6:ea:
                    f5:93:29:c6:2b:e9:8e:b0:28:65:f7:ec:8c:14:99:
                    95:1a:30:6a:aa:22:2c:3e:ee:0c:95:25:d3:d7:97:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C5:72:FF:D0:15:A4:C9:EE:00:2B:FD:9F:56:60:DE:81:F8:62:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4faa0bb8-825d-3134-a243-0635887e58a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:59:b1:c4:78:bc:58:61:63:79:7e:da:2d:ba:ff:d0:bf:9f:
         60:38:29:7e:2d:90:ae:ec:5d:7d:1a:25:89:36:c0:3a:ae:51:
         84:39:8f:f1:67:24:9a:d3:0e:88:ad:7c:bd:79:a8:c9:5e:cd:
         8b:76:18:d7:59:47:42:46:9c:88:56:6c:e5:b2:25:70:7e:fd:
         fd:9a:47:bf:31:f9:27:2e:73:f6:d5:e5:b8:96:48:37:62:82:
         b7:c5:dd:09:a5:bf:78:00:da:1b:9f:44:50:fd:bb:95:df:16:
         73:2c:38:d4:69:31:df:69:ba:42:d0:f3:d4:61:3b:89:0a:72:
         a1:b0:a0:68:31:71:45:9c:8c:1d:0c:be:22:8c:a1:31:86:61:
         22:9c:f7:41:73:6a:6f:2d:2d:07:86:8e:b0:28:01:a5:9b:85:
         fa:35:09:b8:3d:d8:68:a6:ef:60:f0:7a:ad:39:bd:67:c5:a9:
         8a:19:66:49:d0:39:7c:b9:5a:26:68:89:9d:85:f8:c7:89:4c:
         27:6c:27:7e:e9:e1:85:c0:cb:a5:29:9b:a9:42:4c:52:77:e2:
         11:09:22:b5:f4:ad:50:2f:88:7a:0f:4e:19:48:50:45:db:0a:
         2a:88:fd:07:fe:35:ee:61:fd:ba:1f:a3:98:ed:a2:30:7d:29:
         1c:02:14:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckLqs7oDsONoAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YzA4OWZmNjctYjEzNS00ZTNlLWI5NmMtMzlhZDE2OWJkYTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya+im9d8idNKKVxCTtc0HVRfKkTo5XxUd/wd
cITJEv1AiQJO1a7jiJGSM3/hstrfvGWME0x0jc9MYbW35aVF99NPcRoMLOtxsTMx
fbFuehCTanDzYxh2xhDQYn/Upv6MZxDtMacfNFO0wP/t3iQk4zBSULUy9nhGz4/5
qq0ZidTPZmHQyuHTiFRJJVyg8KhrlrmoFJTppSrMSm321iL6OvhYQytj7p1Yzyzt
Q9WWoO2ePDMOfzf15TzctZvUszaFkbln/KN4PKksZJ6NmWGJvNdrVnCBvArrdj/k
kXTzpur1kynGK+mOsChl9+yMFJmVGjBqqiIsPu4MlSXT15fTGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrFcv/QFaTJ7gAr/Z9WYN6B+GI4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNGZhYTBiYjgtODI1ZC0z
MTM0LWEyNDMtMDYzNTg4N2U1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBZscR4vFhhY3l+2i26/9C/n2A4KX4tkK7sXX0aJYk2wDquUYQ5j/Fn
JJrTDoitfL15qMlezYt2GNdZR0JGnIhWbOWyJXB+/f2aR78x+Scuc/bV5biWSDdi
grfF3Qmlv3gA2hufRFD9u5XfFnMsONRpMd9pukLQ89RhO4kKcqGwoGgxcUWcjB0M
viKMoTGGYSKc90Fzam8tLQeGjrAoAaWbhfo1Cbg92Gim72Dweq05vWfFqYoZZknQ
OXy5WiZoiZ2F+MeJTCdsJ37p4YXAy6Upm6lCTFJ34hEJIrX0rVAviHoPThlIUEXb
CiqI/Qf+Ne5h/bofo5jtojB9KRwCFG8=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:40:27 2026 by rpki-client