Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa
File:                     c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa (raw, json)
Hash identifier:          U/NwC8UO2abdH+XYuiJ4HApGUHkQRiiOA9vS+LPyH0U=
Subject key identifier:   91:7A:96:BA:5D:4B:B6:EC:E1:BD:9B:90:30:76:B8:18:03:6E:C6:02
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584E640F727D650C2A4B99211C40
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     26744
IP address blocks:        147.124.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:72:7d:65:0c:2a:4b:99:21:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ce37d688-402f-4d44-8703-0178edf0dd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:d1:7d:44:87:31:70:1b:9a:9d:89:48:fe:
                    29:1b:cb:f4:38:e9:f1:bb:6e:b4:eb:10:27:66:cb:
                    4d:2b:3a:a2:e3:00:64:bc:50:4f:50:19:84:37:2d:
                    bb:64:2c:2b:18:c1:fd:c2:0e:2f:65:08:f4:5a:43:
                    dd:b7:70:5e:14:19:ec:d2:c9:d3:2c:7f:15:e8:85:
                    cd:77:6b:82:61:c5:9c:60:e2:bb:a8:60:5f:36:ec:
                    59:74:85:c5:6a:67:fe:9f:2b:88:b5:c3:92:76:fd:
                    1a:d9:1a:4f:2a:ca:a9:51:69:ff:03:c7:39:6b:e2:
                    54:27:23:b1:37:99:ab:ee:08:59:82:61:42:5f:89:
                    53:55:06:cb:1a:95:5d:4d:bd:d5:a6:32:54:dd:44:
                    c9:49:d6:cb:e4:e9:01:b2:1d:8e:97:df:0c:6b:98:
                    1c:a3:97:ef:46:9f:c1:bb:7a:e6:1f:da:8d:c1:3c:
                    2d:ea:8c:78:70:ab:15:3a:5b:e4:46:8f:9b:50:57:
                    88:ee:22:4b:8f:f0:6c:15:03:fa:ce:8c:56:a6:45:
                    2e:2b:b6:a3:61:ad:f4:95:8d:00:29:dc:5c:f4:13:
                    f4:f3:22:a1:7e:f7:6f:6f:70:f0:45:08:73:7f:7a:
                    6a:7d:f8:ba:e9:9b:89:4c:26:4a:c5:6f:db:29:b3:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7A:96:BA:5D:4B:B6:EC:E1:BD:9B:90:30:76:B8:18:03:6E:C6:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:be:26:f7:68:2c:63:59:7b:d9:fa:40:57:1a:d7:27:54:fb:
         2e:06:bc:b1:04:f4:12:a7:66:99:f9:7f:ba:61:9d:52:23:39:
         d5:fd:c7:a8:e2:72:01:e1:d2:92:4c:7e:6c:39:dd:92:24:39:
         c2:3d:54:9b:a6:7c:6f:92:2e:f4:de:4e:36:41:77:3e:a6:95:
         f7:5c:01:8d:14:34:5e:58:fd:2d:86:c3:ef:8c:c2:d8:31:35:
         3c:61:04:dc:08:4d:06:88:c9:87:e3:13:49:22:8d:1a:60:24:
         e0:b5:bc:60:c5:79:34:21:4c:ae:2a:c1:36:5a:f8:d0:87:f1:
         06:44:26:08:d6:76:16:01:d8:75:0c:28:f8:6c:a4:c6:9e:e0:
         6d:b4:ba:06:3c:49:65:4e:14:b4:47:0b:14:1d:11:7c:fe:21:
         a5:7f:59:eb:65:70:0f:00:17:26:37:ce:87:07:b6:a0:07:e9:
         38:48:42:49:15:83:12:59:ba:5a:ba:b5:72:42:5c:8d:be:1f:
         07:2b:bd:de:52:bd:a4:6f:f0:61:ee:56:8e:93:11:d0:57:74:
         a0:19:57:63:f2:69:a5:cf:1c:ff:b7:f1:d3:bb:88:96:17:43:
         70:cc:5e:27:fa:a7:17:fb:cb:52:bd:2f:42:9a:c9:92:a0:bb:
         d9:46:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:12 2026 by rpki-client