Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/13f5ace7-6388-396e-ae40-2632011e93e0.roa
File:                     13f5ace7-6388-396e-ae40-2632011e93e0.roa (raw, json)
Hash identifier:          QoZfGkHwP/eSer//f762L9Da+IXWp8eZDik1Y1U1XJw=
Subject key identifier:   5A:4C:6B:00:A1:EB:BF:05:6A:79:9C:1B:4C:4C:5E:F9:59:BD:96:CD
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC2706ABA4FD7837DD2F065D8
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/13f5ace7-6388-396e-ae40-2632011e93e0.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        147.124.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:6a:ba:4f:d7:83:7d:d2:f0:65:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=ee07bce6-e302-4bdf-87a6-94184bf96035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:5d:39:1c:ea:07:d6:23:d2:e5:e0:78:39:
                    e4:09:97:2e:42:4b:6b:f5:da:58:16:76:58:fe:df:
                    8e:81:8a:b1:65:d9:92:46:c6:22:dc:68:95:66:70:
                    c1:b0:ff:51:61:dd:22:49:dd:3f:30:23:5f:73:22:
                    1e:b3:b5:0b:83:47:f6:9b:6e:31:28:4d:72:ea:2a:
                    18:fe:c3:e4:66:cc:6a:0f:7f:2d:5d:3b:6e:f5:51:
                    a9:88:15:e2:a8:11:45:2f:51:8b:2c:24:37:c4:c8:
                    f7:fa:1f:be:2f:3a:6d:72:85:80:f6:a1:1f:3d:17:
                    af:2a:9d:28:8d:18:cb:02:dc:08:67:fc:6e:8f:2e:
                    51:86:2a:2a:ec:29:cb:4c:b3:8f:3a:30:22:cc:01:
                    63:96:5a:01:9c:67:94:e0:a6:d9:1a:e7:79:bd:7e:
                    71:26:67:38:62:43:53:29:e9:37:51:ac:ad:0e:8b:
                    27:3e:0a:8a:c9:d1:b3:0a:74:4e:8a:4a:03:f8:e6:
                    21:ee:cd:fc:74:6d:74:2f:3f:e5:33:de:26:67:bf:
                    1e:4d:3e:af:df:7d:19:91:e6:03:f4:22:0b:3d:4e:
                    51:3e:33:26:75:1a:e7:8a:b9:07:69:3a:76:8f:8e:
                    fc:84:4b:4e:91:92:32:47:0b:d9:4e:d7:b7:83:60:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4C:6B:00:A1:EB:BF:05:6A:79:9C:1B:4C:4C:5E:F9:59:BD:96:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/13f5ace7-6388-396e-ae40-2632011e93e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:50:43:9c:96:9d:c0:e4:d3:76:27:36:36:ef:43:43:52:2a:
         78:3e:ef:3b:41:dd:4c:8f:32:21:ce:63:0d:80:f8:91:cf:82:
         c6:ed:37:a4:45:e6:6f:ed:e4:93:d7:08:6a:b8:f0:6e:60:61:
         01:a3:e0:3c:cd:84:7e:91:25:ea:85:cc:94:07:db:b8:1d:a6:
         51:5b:1a:5a:ed:f9:55:ab:c8:a5:69:72:d4:ff:ec:4d:e5:46:
         b6:d1:8d:be:d4:45:d8:bf:72:5a:be:15:76:fe:62:16:31:d2:
         18:3a:d9:6e:56:9f:72:2e:00:71:ca:44:db:06:79:95:f1:56:
         12:e2:93:da:63:45:58:bb:c9:ee:3b:79:51:c4:e1:c0:d8:a2:
         69:57:0d:ac:1d:12:c0:5b:4c:f4:2d:3b:6c:6d:8f:27:7e:a2:
         82:49:15:ef:ad:b1:2a:3a:cb:5b:94:23:cd:d0:29:30:c8:c7:
         e6:61:73:4e:a6:e4:a4:84:6e:53:23:b6:3f:83:11:dd:05:97:
         27:58:42:50:87:3e:2a:90:c4:a1:3b:4b:b0:59:b9:3e:78:dd:
         32:6a:a8:5c:53:f2:c9:04:ce:c3:3b:f3:93:57:b0:b9:c0:38:
         ae:66:fa:93:fa:d8:05:42:4b:76:de:6d:3d:9b:a6:ea:e4:cb:
         ec:8c:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:33:19 2025 by rpki-client