Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1b443c3e-fa8d-3a21-8829-ba5782311ec6.roa
File:                     1b443c3e-fa8d-3a21-8829-ba5782311ec6.roa (raw, json)
Hash identifier:          1MU25sMfp6LeBQUxTIAvZ53Tsr+Knkk4H/cIKE8dRx8=
Subject key identifier:   B5:F8:02:36:D9:D3:03:85:B2:7D:B4:6E:F7:97:F1:74:84:80:F8:ED
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CA32C6EE12AE202AEA7600E00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1b443c3e-fa8d-3a21-8829-ba5782311ec6.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        147.124.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:6e:e1:2a:e2:02:ae:a7:60:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=a6d82eee-3afd-4f94-82e3-b516d4a4fa92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:ac:93:93:f3:f0:ac:07:08:2a:af:ff:bb:
                    74:bb:cc:b5:11:1b:9f:02:2a:dc:d3:5b:ad:c5:da:
                    e0:76:bd:cb:c8:fa:f1:26:77:d0:9e:c7:23:92:80:
                    84:da:dc:a6:80:17:80:a2:08:72:25:50:ad:8b:c4:
                    69:a7:8d:3a:b1:e1:ec:30:18:b5:4a:72:0b:71:07:
                    49:91:64:38:87:ee:4d:de:ae:62:54:92:37:85:10:
                    fa:aa:6d:e2:80:dd:35:23:cd:b0:f4:e4:e4:1b:e1:
                    c8:1a:1b:8f:cc:fe:c4:d3:07:b4:b5:19:68:ae:5e:
                    fc:c7:f9:92:87:bb:fa:d7:a4:2b:1a:4d:9f:7d:0a:
                    14:80:39:27:ef:4f:34:97:57:2e:bb:20:22:d0:00:
                    7f:b7:59:a2:d1:cf:d8:d2:56:50:be:e7:d1:78:49:
                    17:d7:21:d6:5c:4b:c2:c7:e6:ff:05:39:4a:95:4a:
                    85:ac:40:e1:66:7a:d1:b6:3f:fa:a6:49:45:ac:29:
                    29:e3:9a:42:e3:53:7c:1c:5a:e6:8c:4c:d0:bd:3c:
                    4e:c2:00:4b:d1:76:ea:8f:8c:98:77:49:5c:1a:9c:
                    e1:df:f8:fd:2d:05:f0:bf:f6:2d:bd:49:4e:9e:b2:
                    58:cf:a1:ca:9e:6f:1d:c4:69:df:3f:63:7c:26:11:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F8:02:36:D9:D3:03:85:B2:7D:B4:6E:F7:97:F1:74:84:80:F8:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1b443c3e-fa8d-3a21-8829-ba5782311ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e8:0d:e0:77:44:8f:69:45:59:0c:e6:d7:3d:84:94:25:c7:
         83:d7:1e:8d:fa:00:89:69:0d:b9:25:4a:ea:61:9e:a5:92:51:
         a4:53:7e:1a:06:ef:59:fe:f3:3c:36:ce:0f:28:4d:c2:59:ff:
         5e:0c:76:e1:1b:d7:4f:70:0a:fc:16:fc:da:9b:6e:6d:03:2b:
         67:17:c1:c8:73:41:e9:36:53:f6:29:8c:5a:85:bc:48:7d:09:
         d4:b7:ec:84:f1:15:2f:ca:18:a2:03:20:08:75:2c:eb:b2:54:
         1c:1e:7b:e0:e5:9c:6e:e2:57:0d:68:1b:6b:19:d3:2d:29:52:
         f4:6f:02:85:c2:90:fa:e5:96:e4:ed:a8:97:ab:26:7e:e6:36:
         d0:ab:fc:24:39:38:fd:10:6f:eb:73:24:e9:7b:f0:58:35:53:
         fe:68:01:64:f2:5e:bf:a5:d5:05:fa:13:64:4e:35:ba:35:5f:
         33:86:7f:fe:08:57:d7:d9:f7:da:6f:84:d1:9a:c7:ea:bc:65:
         a7:13:28:9d:71:36:2c:a6:3f:d8:c9:f8:46:18:66:a7:7e:e2:
         38:2d:84:94:87:93:99:1c:2d:8c:83:92:cb:92:df:84:57:6e:
         89:32:64:36:a1:b5:3f:67:11:6b:82:a3:f4:74:79:b6:b6:c0:
         0f:dc:dc:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLG7hKuICrqdgDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YTZkODJlZWUtM2FmZC00Zjk0LTgyZTMtYjUxNmQ0YTRmYTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOesk5Pz8KwHCCqv/7t0u8y1ERufAirc01ut
xdrgdr3LyPrxJnfQnscjkoCE2tymgBeAoghyJVCti8Rpp406seHsMBi1SnILcQdJ
kWQ4h+5N3q5iVJI3hRD6qm3igN01I82w9OTkG+HIGhuPzP7E0we0tRlorl78x/mS
h7v616QrGk2ffQoUgDkn7080l1cuuyAi0AB/t1mi0c/Y0lZQvufReEkX1yHWXEvC
x+b/BTlKlUqFrEDhZnrRtj/6pklFrCkp45pC41N8HFrmjEzQvTxOwgBL0Xbqj4yY
d0lcGpzh3/j9LQXwv/YtvUlOnrJYz6HKnm8dxGnfP2N8JhGWjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLX4AjbZ0wOFsn20bveX8XSEgPjtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMWI0NDNjM2UtZmE4ZC0z
YTIxLTg4MjktYmE1NzgyMzExZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKboDeB3RI9pRVkM5tc9hJQlx4PXHo36AIlpDbklSuphnqWSUaRTfhoG
71n+8zw2zg8oTcJZ/14MduEb109wCvwW/Nqbbm0DK2cXwchzQek2U/YpjFqFvEh9
CdS37ITxFS/KGKIDIAh1LOuyVBwee+DlnG7iVw1oG2sZ0y0pUvRvAoXCkPrlluTt
qJerJn7mNtCr/CQ5OP0Qb+tzJOl78Fg1U/5oAWTyXr+l1QX6E2RONbo1XzOGf/4I
V9fZ99pvhNGax+q8ZacTKJ1xNiymP9jJ+EYYZqd+4jgthJSHk5kcLYyDksuS34RX
bokyZDahtT9nEWuCo/R0eba2wA/c3EM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:07 2026 by rpki-client