Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4170fa91-7975-3fb0-bda8-676027e475ef.roa
File:                     4170fa91-7975-3fb0-bda8-676027e475ef.roa (raw, json)
Hash identifier:          b/7aLuPqeO7igRfIDXGi6H3uyh1QNMl/e/4w+DKtd7k=
Subject key identifier:   9D:AA:B7:72:AE:7F:4A:0D:93:A4:AA:F0:96:67:B7:C4:FD:D9:64:EB
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F06724293FA886D43BD720A00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4170fa91-7975-3fb0-bda8-676027e475ef.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        147.124.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:42:93:fa:88:6d:43:bd:72:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=073ef7bd-9b16-4fbc-a15b-24dee95b284e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:e0:47:6f:9a:0a:9a:e2:f7:42:90:0c:93:
                    03:c7:f5:5f:41:15:9d:1e:4d:f5:91:ab:51:f1:15:
                    95:62:bb:1a:5e:a9:70:c1:ab:c9:e1:52:8c:ca:c0:
                    64:eb:4d:68:e0:24:ae:97:c3:79:14:36:22:a7:ce:
                    5e:85:30:66:09:7c:29:99:15:ee:61:b7:3a:5f:86:
                    44:58:ad:77:58:a8:52:61:d3:55:40:db:3a:12:6c:
                    79:41:8d:71:b5:07:0d:de:0f:b6:e8:0c:da:35:e7:
                    a5:d2:ac:9c:f5:cf:19:11:6d:c4:62:ca:4c:d5:dc:
                    e9:07:63:2c:49:4e:25:9d:cd:c3:2f:74:4c:5e:c9:
                    48:e4:c0:b5:ff:88:18:5d:ae:10:05:d2:81:3b:a6:
                    d2:9c:d1:31:18:cd:c3:f8:55:2f:f7:b5:25:e1:10:
                    79:bd:48:84:e2:8c:c9:6b:ee:d1:6e:e8:fd:5b:99:
                    6e:22:9e:99:79:fe:d6:8b:a4:d7:70:7d:f2:ce:33:
                    8e:69:44:35:6b:a4:8f:3b:71:5b:c6:46:05:8b:a7:
                    0d:72:b9:ea:2d:e2:4b:0d:f4:f5:92:e0:3e:37:17:
                    38:b6:6f:52:22:76:f6:9b:4f:89:96:8a:5e:52:7e:
                    95:d0:e1:d8:eb:9f:39:c9:9c:b2:59:55:0c:12:d6:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AA:B7:72:AE:7F:4A:0D:93:A4:AA:F0:96:67:B7:C4:FD:D9:64:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4170fa91-7975-3fb0-bda8-676027e475ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:a4:86:2a:44:a6:9b:42:b9:3e:94:97:9d:13:89:57:dd:c5:
         bd:f1:e6:c6:e0:34:77:34:a4:ac:65:27:76:9d:00:cd:9a:fb:
         e9:80:ea:f1:ff:4b:23:c0:9e:ab:1d:ee:ff:a3:ea:10:a4:9b:
         7e:52:41:c7:26:89:76:0e:b4:c9:ea:ef:93:76:4a:c3:2f:16:
         e9:9f:c5:85:68:88:4d:88:fd:5a:26:de:ad:f6:57:3d:38:41:
         6e:55:f5:4a:55:7c:2d:96:9f:f5:1f:bb:0f:16:58:b4:6d:57:
         af:fc:52:67:54:63:cb:fc:a9:1c:71:16:10:a0:45:cb:97:40:
         54:a1:c9:e1:7a:c7:40:91:cd:60:0f:47:f5:c7:84:c2:67:fc:
         74:24:ae:be:ba:bc:9e:72:09:0f:da:7c:30:8a:54:fe:63:9c:
         bd:64:8a:1f:7f:87:19:02:d5:c9:cb:a4:ad:e4:68:45:a6:87:
         62:ab:91:8e:02:56:7c:80:e3:ce:95:d2:cb:e9:a7:03:4d:d8:
         52:8d:20:83:c1:13:18:11:5a:a8:13:a4:28:f5:00:b4:c5:33:
         67:b2:40:09:61:07:30:23:b3:74:ed:a6:5a:88:a6:18:f2:e3:
         d3:6f:73:17:43:94:c8:6c:e2:c6:a0:94:ef:0b:bc:23:f2:2e:
         80:87:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:26:35 2026 by rpki-client