Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa
File:                     be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa (raw, json)
Hash identifier:          l6jHdWr6lZoyiirmeAGyUv9KpjstIo6nMItHgX75TyY=
Subject key identifier:   69:16:06:9B:72:81:5D:52:96:98:D3:D0:3C:38:EE:B5:F5:07:BD:1F
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F119D07ABECBE1E6B2458F680
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     393740
IP address blocks:        147.124.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:07:ab:ec:be:1e:6b:24:58:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=d3c28863-4212-4e6d-a990-5bf82de1e0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:fc:dc:41:0a:48:b8:69:ef:01:58:42:1d:
                    0a:30:90:12:9d:0a:3d:b7:99:d0:31:ca:e2:17:b5:
                    13:09:2e:0c:46:4c:68:f4:23:74:6b:a3:4a:68:d8:
                    1f:2b:ac:82:1f:9c:85:27:29:9a:b6:76:0f:f0:5f:
                    42:30:a9:0a:01:51:74:98:40:9c:9d:6d:de:04:2c:
                    11:b4:67:19:76:8f:01:eb:16:6d:78:c3:a9:ef:71:
                    2d:f5:1d:fb:9a:a8:22:50:7b:6a:1f:4a:5d:34:59:
                    6a:26:4f:10:a3:1f:f9:a7:b0:73:fc:4b:7f:f2:3d:
                    19:96:7a:e9:af:22:9b:b7:ad:6b:d5:b3:12:91:4a:
                    f4:58:6a:e0:dc:00:79:34:e6:fc:26:20:b8:dc:42:
                    b3:bc:a9:21:64:3a:1a:f0:1b:59:7a:fa:10:b4:8e:
                    78:43:88:9e:fc:42:cb:1c:80:09:dc:f6:e6:32:46:
                    20:00:d0:c9:e1:40:5f:ad:c6:86:78:13:df:60:8a:
                    58:09:fd:06:cb:4e:00:b1:1d:3b:73:54:b9:ea:71:
                    da:92:f2:0d:23:e6:12:17:56:c3:95:7f:02:10:58:
                    c9:23:78:28:dc:59:7e:94:98:89:d9:0a:53:79:38:
                    90:0b:45:b8:7b:3e:cc:e5:27:8c:3c:48:95:c4:56:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:06:9B:72:81:5D:52:96:98:D3:D0:3C:38:EE:B5:F5:07:BD:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:a2:ce:de:2d:d6:9c:b6:af:20:4c:9a:f4:d8:05:0a:67:
         92:96:fe:4f:85:71:d3:2a:f3:03:64:6c:9b:6d:f2:14:a3:83:
         08:33:53:b7:d3:03:24:e1:2a:80:e5:ea:d0:05:58:14:ca:5d:
         a3:df:fd:c9:41:ad:e7:c8:fd:af:e2:14:66:2e:aa:85:b4:63:
         83:ee:19:7c:51:0d:04:ca:36:9e:05:1c:bc:68:10:2f:5a:01:
         35:62:28:58:29:44:ef:dc:de:d2:d9:9f:09:6c:54:90:45:74:
         a9:24:0b:eb:18:b3:f1:c6:fb:ce:ee:2d:de:5a:36:8e:6f:e4:
         4f:6d:68:e4:6f:43:8f:e8:f1:52:28:ad:0a:13:c8:7b:4b:88:
         1f:a7:50:80:31:db:6c:77:65:20:64:44:5b:c1:fb:0a:9e:5f:
         8e:01:ea:54:f6:d9:cf:9b:d6:7c:15:dc:63:f0:20:40:62:09:
         65:e7:61:f0:d4:23:59:2e:f0:48:0b:c9:07:64:6c:80:56:86:
         e2:89:66:06:31:fa:4b:1f:5c:20:db:39:66:ea:25:34:88:00:
         07:a6:89:46:95:c4:d4:01:dc:fe:29:08:18:51:21:18:5e:3a:
         94:17:b6:8d:da:31:88:c4:03:c4:b9:8f:76:4b:60:30:87:e2:
         52:24:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:55:59 2026 by rpki-client