Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa
File:                     15cbeea1-441a-3e43-aaac-8a33f07a4058.roa (raw, json)
Hash identifier:          g3a462WZxvKIRG4RwEFXoLSwMxUwWJ57rjMlMA0Tsnc=
Subject key identifier:   DF:A3:15:5F:13:C8:C0:13:43:E0:03:17:27:4E:17:F3:C6:65:1B:88
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584D32D4D785822B16B6751E00A0
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     11620
IP address blocks:        147.124.32.0/21 maxlen: 24
                          147.124.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d7:85:82:2b:16:b6:75:1e:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=3ddec318-ae19-4845-baf9-a1dd631e28c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:74:ad:98:30:96:2d:d6:7d:e5:d8:2b:56:
                    79:74:75:07:16:af:ff:37:13:0c:98:99:34:c7:84:
                    f4:ea:30:27:97:fd:df:94:4a:0f:95:bf:84:98:4a:
                    7d:78:4c:99:9f:d1:af:d6:b6:ba:2e:8a:36:97:2d:
                    44:85:5b:36:d3:ac:ad:79:8f:62:65:ac:a0:ff:c5:
                    ae:36:43:20:82:d7:66:63:7f:e9:d7:b8:51:22:72:
                    de:c9:b6:04:3f:ba:71:2a:ad:4c:b8:5b:25:97:1e:
                    63:55:ca:b9:59:ce:97:72:96:82:a9:1e:a6:ed:21:
                    23:d8:3e:2b:45:eb:dc:fa:ac:88:69:9c:69:cf:84:
                    d7:dd:b2:96:ba:11:17:7d:bf:f4:0d:43:05:ff:ac:
                    51:30:70:ac:a8:30:88:b9:2d:5f:fa:c8:b1:34:81:
                    d6:d9:fb:75:5d:14:8d:44:7d:4b:4f:bf:5b:4d:14:
                    41:c4:10:ef:92:92:b0:20:4b:d0:9c:23:b8:11:ed:
                    ab:11:11:7b:be:e4:5b:e7:05:75:a7:40:21:fd:11:
                    b9:4d:d7:4a:86:00:c9:79:94:05:43:23:46:75:64:
                    42:e5:d5:dc:09:fa:77:f4:75:63:46:9f:77:80:77:
                    c0:b8:f2:b9:32:83:13:61:bd:42:d6:45:cf:bc:14:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A3:15:5F:13:C8:C0:13:43:E0:03:17:27:4E:17:F3:C6:65:1B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:e5:e8:21:2b:e1:d6:ed:24:1f:1a:18:2c:92:3f:6b:d5:
         54:f3:c4:d6:b8:7a:e0:86:c6:2f:b0:fa:6e:91:5f:68:56:d9:
         18:58:55:84:16:df:8c:97:fa:74:01:b2:3c:11:6a:54:4e:5a:
         87:2c:f4:df:d5:aa:42:a4:48:cd:8e:ce:cf:a0:d6:48:21:94:
         22:3a:a7:e8:88:46:61:1a:0a:fc:22:64:15:cc:8d:22:7b:9e:
         eb:eb:c7:03:aa:fb:14:4c:b3:2f:5f:bc:97:b0:6f:a5:f8:a7:
         f3:f4:fb:98:61:cd:23:95:00:f7:00:80:5c:58:6c:14:60:a3:
         fd:d8:ef:f7:72:08:91:a4:d6:c6:5a:6b:35:be:42:72:64:32:
         f3:29:02:a9:0c:1a:85:0f:31:f3:69:2b:c3:b9:9f:20:a4:fb:
         16:68:d0:d7:70:5a:43:92:42:e1:86:3f:50:51:a7:e9:c1:4b:
         5a:b0:c1:02:86:13:f1:2a:62:50:31:fa:0b:c2:5c:c0:30:a3:
         d0:07:3f:88:ba:6c:43:ee:49:5b:3c:dc:9e:d2:1d:52:27:c3:
         20:15:39:a1:e7:b1:b8:bf:22:be:ce:66:2b:7d:07:21:65:06:
         31:f5:61:99:b0:a9:9a:91:93:bf:31:cd:61:ec:a1:35:98:3a:
         ca:37:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:18 2026 by rpki-client