Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa
File:                     9a01a09c-42e3-3cee-be99-cffa2e621539.roa (raw, json)
Hash identifier:          mrAIjf6jdHNAMn0tBwivPGWYCKj6qoFVorxBRtfVH7U=
Subject key identifier:   FA:74:1A:80:E8:39:37:F9:4C:E0:9F:8E:96:6F:DC:BD:2C:93:D8:1D
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AE196887CF7B1BD6151C7EA80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26744
IP address blocks:        147.124.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:88:7c:f7:b1:bd:61:51:c7:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=5aecbfff-ad54-451a-a9ba-eeac4c099a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:80:13:86:55:be:eb:5d:8a:dd:bf:b2:d4:
                    99:24:3b:ef:64:7a:07:fd:36:5f:14:42:57:03:ea:
                    cb:99:e6:87:6d:a2:80:ee:3f:8d:1a:5e:dc:43:b9:
                    0d:3a:22:79:f5:8f:9c:0a:35:39:0f:2f:7d:14:c2:
                    e1:cf:52:69:35:b9:86:fa:f5:35:13:f8:13:c4:75:
                    d2:e6:e8:eb:84:e0:31:60:52:77:be:54:13:48:60:
                    71:bb:61:ba:30:d9:80:0a:7b:35:9e:5f:27:1f:9b:
                    41:51:fd:8f:95:0a:f6:1b:41:62:a6:a8:c0:7d:28:
                    a0:cb:b8:36:60:6a:ec:04:a1:e0:58:c4:61:f2:ac:
                    ba:83:2b:9a:b3:5e:1e:b3:2c:cf:98:3c:da:a2:67:
                    a0:12:f8:f9:88:b0:cf:05:94:50:7c:98:cb:c5:f9:
                    da:2e:94:92:7c:c7:05:b0:13:81:ed:80:c3:8b:15:
                    b0:cb:56:af:ea:f4:2e:cb:1c:b5:c7:d4:5a:67:f1:
                    4a:d4:b4:1f:f6:5d:9b:08:26:12:ff:e1:eb:b5:43:
                    d1:0f:ce:b8:1f:8e:40:d0:ff:f3:82:83:6f:1b:7f:
                    ac:6c:2e:b4:3e:08:f2:5e:50:56:18:27:1e:ba:81:
                    df:5f:e7:2f:55:06:8a:2d:98:d3:83:50:95:43:4c:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:74:1A:80:E8:39:37:F9:4C:E0:9F:8E:96:6F:DC:BD:2C:93:D8:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:c5:0f:57:7a:6d:26:07:de:f7:48:f9:9b:87:3b:85:26:
         e6:f5:f6:fa:64:13:64:23:32:15:42:c2:fe:4f:5e:bd:12:e1:
         a6:a8:26:3e:6d:a6:5a:51:34:75:b8:22:16:4d:9a:df:04:49:
         24:5d:b6:08:59:1a:ae:f3:c2:98:53:00:2b:66:b3:13:0f:7e:
         7f:ea:d7:f0:12:40:a9:46:33:5f:1a:7f:0e:eb:97:cc:5f:86:
         ee:25:5d:90:03:b8:49:c2:6b:bd:36:47:cc:b8:1c:be:72:60:
         4f:62:81:93:b5:89:f6:f1:97:e1:b0:db:dc:d8:93:8e:9a:d7:
         c5:41:4a:e5:18:9a:cb:fe:c2:4c:dc:75:bf:3c:ff:66:6f:88:
         e9:3d:49:fb:48:db:1c:31:9f:69:b9:a1:ee:33:c0:9f:9c:ef:
         88:a1:0b:c9:d1:6a:0d:70:3b:52:f4:4d:1b:fb:db:15:26:67:
         ab:5f:0c:d2:f3:cc:ff:5b:0d:93:42:39:cb:aa:f3:d9:f6:b1:
         48:30:9d:83:c6:e6:29:8a:7e:2d:99:79:2d:17:fd:61:c8:8d:
         a8:8b:a1:a8:db:fa:2e:d0:f9:59:90:90:bd:6c:d6:87:d5:73:
         c9:d9:d1:f5:e4:93:33:f6:92:90:96:73:63:54:0f:f1:a2:cd:
         40:61:5d:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhloh897G9YVHH6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NWFlY2JmZmYtYWQ1NC00NTFhLWE5YmEtZWVhYzRjMDk5YTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEWAE4ZVvutdit2/stSZJDvvZHoH/TZfFEJX
A+rLmeaHbaKA7j+NGl7cQ7kNOiJ59Y+cCjU5Dy99FMLhz1JpNbmG+vU1E/gTxHXS
5ujrhOAxYFJ3vlQTSGBxu2G6MNmACns1nl8nH5tBUf2PlQr2G0FipqjAfSigy7g2
YGrsBKHgWMRh8qy6gyuas14esyzPmDzaomegEvj5iLDPBZRQfJjLxfnaLpSSfMcF
sBOB7YDDixWwy1av6vQuyxy1x9RaZ/FK1LQf9l2bCCYS/+HrtUPRD864H45A0P/z
goNvG3+sbC60PgjyXlBWGCceuoHfX+cvVQaKLZjTg1CVQ0wtrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPp0GoDoOTf5TOCfjpZv3L0sk9gdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvOWEwMWEwOWMtNDJlMy0z
Y2VlLWJlOTktY2ZmYTJlNjIxNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3z6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0FxQ9Xem0mB973SPmbhzuFJub19vpkE2QjMhVCwv5PXr0S4aaoJj5t
plpRNHW4IhZNmt8ESSRdtghZGq7zwphTACtmsxMPfn/q1/ASQKlGM18afw7rl8xf
hu4lXZADuEnCa702R8y4HL5yYE9igZO1ifbxl+Gw29zYk46a18VBSuUYmsv+wkzc
db88/2ZviOk9SftI2xwxn2m5oe4zwJ+c74ihC8nRag1wO1L0TRv72xUmZ6tfDNLz
zP9bDZNCOcuq89n2sUgwnYPG5imKfi2ZeS0X/WHIjaiLoajb+i7Q+VmQkL1s1ofV
c8nZ0fXkkzP2kpCWc2NUD/GizUBhXVY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:56:00 2025 by rpki-client