Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1e4a519e-0b1f-30dc-bc88-c150ded278e8.roa
File:                     1e4a519e-0b1f-30dc-bc88-c150ded278e8.roa (raw, json)
Hash identifier:          50TP4V6AZmc3WhxWMlUVPEYgWnPBqEJn/TZS1JhMrXk=
Subject key identifier:   3D:2E:30:4A:26:7E:37:B0:CC:E2:FA:4F:32:00:18:8D:6E:BA:16:92
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CA32C6EAFDA2C315547618880
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1e4a519e-0b1f-30dc-bc88-c150ded278e8.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        147.124.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:6e:af:da:2c:31:55:47:61:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=ef0696ff-d328-49b2-880f-86644ca8ec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:5e:08:ef:0b:e1:c7:77:8f:f0:ab:cc:6b:
                    4a:f6:9e:ba:15:fa:8f:3a:ec:fe:ce:12:d1:c6:09:
                    a1:3d:50:e3:ff:d2:ea:81:81:27:27:9a:6d:2c:01:
                    7c:c5:5c:88:69:f8:00:42:3e:3b:4d:0a:fd:5a:0e:
                    7d:8a:17:62:b1:7a:9c:ad:92:86:40:80:04:a8:19:
                    e6:c3:7b:04:5b:68:f1:5d:ab:c4:b2:12:88:38:fd:
                    a4:b5:6a:41:db:f9:89:3b:71:f3:01:97:94:29:6a:
                    0a:98:9f:a9:b6:61:ca:4b:6a:33:fb:fe:28:0d:be:
                    f7:0c:c6:02:ab:41:5d:89:5e:4a:2e:68:7e:57:7d:
                    4c:75:b8:ba:f4:bf:15:c8:ac:6e:ee:63:36:80:99:
                    98:a0:b2:08:d2:46:4a:0f:a7:b1:c8:ae:b2:25:9a:
                    93:a6:66:6d:26:ed:c9:c0:35:0a:5d:0f:d5:e7:7f:
                    02:37:06:49:ab:80:ec:8c:8b:74:c0:ac:2d:80:83:
                    60:b1:20:60:ad:d2:10:70:42:25:c1:ce:ea:d2:36:
                    9d:2a:fe:63:7c:27:d7:8a:8b:19:ed:c4:f1:2a:ec:
                    a5:db:0c:c6:b4:58:27:14:b0:03:81:8d:ca:2a:d6:
                    e2:14:f6:a3:63:6c:8f:0e:9d:df:81:2f:23:29:04:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2E:30:4A:26:7E:37:B0:CC:E2:FA:4F:32:00:18:8D:6E:BA:16:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1e4a519e-0b1f-30dc-bc88-c150ded278e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:c6:d6:fb:6f:0c:a9:98:40:32:79:8a:b4:24:df:8f:d6:
         81:c0:14:c0:ce:0c:b1:da:8a:80:54:9d:32:03:8d:a2:1a:8e:
         ba:d5:45:61:9d:5c:8b:52:d1:81:e3:14:f4:e0:65:9c:2e:3a:
         a6:69:c7:7c:3a:30:20:52:7a:3d:f6:24:0d:c3:4a:aa:49:ff:
         b2:46:be:da:0e:54:bd:3a:5b:a3:52:14:d6:a0:84:de:cf:b9:
         40:9e:82:b0:98:e8:64:74:c6:80:e2:e4:ca:2f:76:68:a8:5b:
         91:83:4e:52:e2:78:95:3d:c8:cb:f6:4c:57:af:fe:de:8d:7d:
         db:4a:b8:ad:aa:50:f4:2c:ac:4f:76:fb:12:e3:0b:f1:ec:ef:
         ad:db:58:cd:d2:e4:bc:ec:ba:99:61:1e:d5:fb:15:b3:8d:60:
         4a:19:48:a7:6b:31:96:1c:bb:3a:8a:5a:15:f6:66:dd:c3:dc:
         7a:37:f2:03:1c:f2:7f:40:c8:b2:af:17:6e:1f:8c:bc:d8:62:
         ff:00:85:8d:e7:87:2e:1e:18:6c:87:03:e8:f6:75:74:f9:15:
         cc:e3:4e:89:f4:72:58:3e:94:38:00:3c:f2:65:8f:0d:2c:3b:
         72:99:05:2b:43:15:d0:f3:df:43:87:8e:2f:58:50:bd:62:b1:
         34:93:ad:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLG6v2iwxVUdhiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZWYwNjk2ZmYtZDMyOC00OWIyLTg4MGYtODY2NDRjYThlYzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMpeCO8L4cd3j/CrzGtK9p66FfqPOuz+zhLR
xgmhPVDj/9LqgYEnJ5ptLAF8xVyIafgAQj47TQr9Wg59ihdisXqcrZKGQIAEqBnm
w3sEW2jxXavEshKIOP2ktWpB2/mJO3HzAZeUKWoKmJ+ptmHKS2oz+/4oDb73DMYC
q0FdiV5KLmh+V31Mdbi69L8VyKxu7mM2gJmYoLII0kZKD6exyK6yJZqTpmZtJu3J
wDUKXQ/V538CNwZJq4DsjIt0wKwtgINgsSBgrdIQcEIlwc7q0jadKv5jfCfXiosZ
7cTxKuyl2wzGtFgnFLADgY3KKtbiFPajY2yPDp3fgS8jKQTLmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0uMEomfjewzOL6TzIAGI1uuhaSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMWU0YTUxOWUtMGIxZi0z
MGRjLWJjODgtYzE1MGRlZDI3OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfrxtb7bwypmEAyeYq0JN+P1oHAFMDODLHaioBUnTIDjaIajrrVRWGd
XItS0YHjFPTgZZwuOqZpx3w6MCBSej32JA3DSqpJ/7JGvtoOVL06W6NSFNaghN7P
uUCegrCY6GR0xoDi5MovdmioW5GDTlLieJU9yMv2TFev/t6NfdtKuK2qUPQsrE92
+xLjC/Hs763bWM3S5LzsuplhHtX7FbONYEoZSKdrMZYcuzqKWhX2Zt3D3Ho38gMc
8n9AyLKvF24fjLzYYv8AhY3nhy4eGGyHA+j2dXT5FczjTon0clg+lDgAPPJljw0s
O3KZBStDFdDz30OHji9YUL1isTSTrRU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:20 2026 by rpki-client