Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ceba630f-b791-3d1c-8bf3-b39506de3604.roa
File:                     ceba630f-b791-3d1c-8bf3-b39506de3604.roa (raw, json)
Hash identifier:          cEW9kfFNRvMUUonmzPFfpUX92Y74+eTDcTINckvuPeY=
Subject key identifier:   1D:CB:B2:4A:11:09:80:F9:FE:01:BC:17:58:4D:26:8E:91:E6:EB:7B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584E6F3A4703A1618AD4A5C6B380
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ceba630f-b791-3d1c-8bf3-b39506de3604.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     26744
IP address blocks:        147.124.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:47:03:a1:61:8a:d4:a5:c6:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=40032e6c-ece2-4edb-a341-7a2d7052bfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:dc:b7:89:23:87:28:d7:f3:8f:ee:10:9d:
                    70:f9:cf:1e:45:1e:32:b1:97:e2:7a:fc:6f:91:27:
                    29:4a:56:1b:a5:03:ea:ee:8e:0c:b9:22:de:87:a9:
                    f3:95:22:79:c7:5d:94:37:df:cb:98:bf:a0:97:c4:
                    eb:25:f4:49:dc:d6:bb:a4:19:70:4b:e9:c3:e5:c0:
                    87:35:bc:db:b3:df:f1:c6:95:57:1b:62:dc:60:9f:
                    c5:0f:66:c6:37:43:21:15:f4:a2:51:c4:08:3a:dd:
                    fc:01:97:c4:ff:c7:fd:99:6d:45:97:84:8b:59:6e:
                    d0:43:22:45:81:b5:de:89:8f:20:f7:7e:ab:06:3e:
                    d7:9f:87:a3:48:a3:d9:48:6e:0a:e8:8b:4d:ec:4a:
                    3a:7c:f1:d5:ea:37:92:37:b6:98:18:e8:40:2f:73:
                    02:85:b8:08:e6:56:8a:4f:15:0e:b4:69:f2:e5:99:
                    0e:cb:7f:75:9d:02:c2:90:29:ea:a6:b3:98:0f:16:
                    2a:e7:ea:18:5d:c1:f7:09:86:c8:d8:76:9c:30:7d:
                    76:73:99:7e:89:ba:af:5d:c8:d3:d0:70:24:fa:17:
                    60:ce:5e:f6:06:b6:42:61:fb:5d:70:27:bc:9a:7b:
                    1e:1c:2f:e2:8b:dc:ba:a2:68:39:a3:34:3d:c7:18:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CB:B2:4A:11:09:80:F9:FE:01:BC:17:58:4D:26:8E:91:E6:EB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ceba630f-b791-3d1c-8bf3-b39506de3604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:e3:97:cc:8c:bc:25:19:79:87:a1:f6:d9:f5:fb:4a:5f:6a:
         09:b4:27:75:34:8a:04:34:70:4f:e6:da:c5:83:d4:42:47:b9:
         43:4a:56:b9:e9:e9:4f:c5:d6:e0:57:bc:4b:fa:00:35:11:a9:
         ab:c0:f2:8e:84:fd:b9:18:33:61:bc:df:46:b8:d4:03:96:b9:
         72:97:41:82:4c:31:1a:2e:4c:53:27:2a:30:c4:16:f0:4b:46:
         b0:d6:df:61:96:3c:17:29:06:8b:d7:ef:67:43:0b:e6:1d:ad:
         11:65:a1:b8:57:15:bf:34:93:27:45:6c:c6:2b:30:2b:58:cf:
         9e:66:0c:bd:e7:37:d3:b2:03:d2:ad:ad:55:bf:c9:2c:54:cf:
         fb:f7:b6:24:d1:30:bb:49:64:d0:b4:22:da:21:0a:87:87:a5:
         96:f8:bb:c5:99:0e:be:a6:99:4c:ea:ac:32:86:ac:84:0f:43:
         36:c3:ca:1c:96:07:20:8f:f2:3c:bd:bf:47:38:4b:42:b7:08:
         5b:2d:fd:94:5e:a6:58:88:4b:07:52:39:cf:14:ae:89:21:91:
         38:ad:da:dd:da:99:02:e4:53:cc:f8:e9:9f:70:09:d6:e6:5c:
         05:35:6a:3e:03:6e:6a:fb:d6:dd:fb:1c:83:7f:76:5d:f1:b1:
         d7:c7:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:40 2026 by rpki-client