Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/46fc8482-5f49-3dc9-b98e-4051876bf3b5.roa
File:                     46fc8482-5f49-3dc9-b98e-4051876bf3b5.roa (raw, json)
Hash identifier:          QBphS125otaLDccTnZ1lmpmxNK1mZ/FNWF+pctBpiQs=
Subject key identifier:   16:0A:66:DB:BB:D0:A2:17:DD:DD:A6:AA:18:62:4A:EC:9D:D0:29:5F
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D83CAAEA2390F36C00828FD00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/46fc8482-5f49-3dc9-b98e-4051876bf3b5.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     26744
IP address blocks:        147.124.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ae:a2:39:0f:36:c0:08:28:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=071f72c9-d861-4c35-8303-10134e791261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:8d:58:1a:d4:ef:e5:e5:4a:95:27:81:e2:
                    f2:75:bf:b5:4a:08:74:7d:76:79:b7:81:aa:36:29:
                    7a:4e:e2:8a:b0:ba:40:ae:8c:ff:1f:e0:18:c6:3e:
                    7b:62:4b:78:e5:5c:ce:8c:2b:fe:c5:b5:37:5b:1d:
                    18:dd:c8:9c:78:60:df:83:96:6a:d4:b1:02:a5:ab:
                    5e:aa:20:2a:39:f2:90:b8:fd:ae:b7:15:5d:24:6e:
                    c5:42:05:d9:56:a9:32:38:ad:71:18:b5:41:7d:26:
                    7a:e0:18:52:66:88:76:63:bf:c5:ca:56:4f:55:5c:
                    16:96:53:a2:c3:05:a8:f1:d6:14:b3:ff:0c:05:ef:
                    e9:94:b8:58:c8:d2:4c:71:3e:d8:c1:b6:ae:80:dd:
                    09:5e:e9:eb:8e:e6:8c:e5:eb:3b:ce:27:cc:f0:5f:
                    d6:79:f1:6e:f9:f2:54:71:47:b5:19:c3:fb:1c:ad:
                    8e:cc:cb:16:ba:07:87:26:e6:4b:c4:86:94:7e:b6:
                    10:85:bd:48:40:c5:21:52:8a:58:51:68:60:24:f4:
                    9a:36:a7:e6:c2:95:36:63:b1:28:6e:b9:e4:9c:04:
                    ba:0e:ca:e1:51:1f:be:2a:b5:8c:dc:48:5a:94:73:
                    02:98:19:cd:46:87:24:de:eb:10:93:bd:ed:f1:aa:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:66:DB:BB:D0:A2:17:DD:DD:A6:AA:18:62:4A:EC:9D:D0:29:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/46fc8482-5f49-3dc9-b98e-4051876bf3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:23:06:84:5d:22:89:16:24:c0:82:af:9a:76:64:2f:d4:1d:
         2d:40:da:18:2c:76:31:a6:b5:2f:e4:ec:fd:7b:e7:9c:81:39:
         65:07:9f:73:2b:44:26:c2:b5:11:36:ab:c0:6c:6c:cc:ae:b4:
         4e:e8:d4:4f:e4:f6:b6:56:39:a5:d3:84:f0:98:9a:eb:69:06:
         80:cd:bf:66:fa:28:de:48:70:8a:ac:31:e3:29:22:fc:11:05:
         c4:be:bd:49:ac:4b:68:8b:5c:5b:c4:43:99:2f:cd:c0:86:ca:
         11:c9:9b:8d:9c:70:06:b7:03:a0:74:9e:15:df:b3:d8:08:ea:
         33:66:68:62:94:be:87:6b:b8:6e:71:93:bb:e9:b9:17:f2:0e:
         63:74:3c:8a:bc:45:79:23:a8:b6:f9:e5:5f:59:6b:3c:80:99:
         c1:4f:f6:65:72:b7:cb:95:80:2b:05:f6:3c:09:51:3a:9b:ad:
         a7:44:bb:69:54:3a:6f:01:d7:47:71:1f:90:46:23:35:60:18:
         02:d4:d9:4b:1e:ac:09:8b:fd:1d:0b:de:7e:f7:6e:de:53:3b:
         1c:88:29:03:89:ee:41:3e:62:73:d0:78:5c:dc:53:e3:30:93:
         0a:af:cd:07:2b:2c:34:94:50:c5:cd:ca:9b:65:04:88:ab:fa:
         2e:4f:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:27 2026 by rpki-client