Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa
File:                     476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa (raw, json)
Hash identifier:          hyrvSZxun9xx1zq5g6vaiWY05lFXDb5PA3aUOPhAHCI=
Subject key identifier:   3C:91:6C:06:A3:EF:47:08:56:68:3F:15:A6:DD:0B:8F:B2:85:66:C3
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CAE57286FB9C287D84B5215C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     26744
IP address blocks:        147.124.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:28:6f:b9:c2:87:d8:4b:52:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=568abe9e-38f2-43c9-a8f8-5be71558893a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:2d:25:18:79:9c:ee:f0:26:e5:eb:06:b4:
                    3b:fc:6b:24:45:48:96:e5:c5:ba:6e:0b:31:0e:1e:
                    73:27:46:47:e1:77:1a:69:83:04:fa:95:cf:04:ac:
                    57:ba:fd:0b:36:07:c9:f8:af:9c:14:24:19:c4:3b:
                    9f:05:4c:2a:83:e4:ec:e7:09:78:94:de:87:73:9f:
                    b9:bb:40:85:03:3e:73:42:ed:29:86:87:4b:91:c1:
                    1f:86:93:ae:19:06:a6:a7:a4:51:52:69:4e:59:90:
                    b4:a5:ee:a0:ef:f7:98:f7:b1:f9:53:76:b6:ba:4f:
                    33:b0:c5:50:cd:6d:32:18:fd:46:8f:9e:c9:2a:d5:
                    0c:6b:25:ba:a0:5a:f2:3e:b5:a8:af:48:41:ed:7a:
                    e0:38:50:a7:b2:04:04:39:33:41:53:f0:46:b5:f0:
                    5e:fd:c5:72:93:a6:e4:29:1e:bf:5b:59:bc:8b:c0:
                    b4:12:04:60:c0:b7:6f:19:d5:a3:c2:3d:c5:50:7c:
                    3e:90:21:bf:2b:1a:87:82:d0:a1:b7:a6:51:e3:3e:
                    71:08:b7:33:bd:36:0f:08:80:f8:af:f2:bc:ba:80:
                    6a:21:df:ff:11:7b:ec:b6:85:97:6e:1b:04:5a:ad:
                    1a:83:cb:b9:cc:6a:6d:52:04:c3:46:69:c9:8a:9b:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:91:6C:06:A3:EF:47:08:56:68:3F:15:A6:DD:0B:8F:B2:85:66:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:bd:ee:e7:f2:0d:54:b7:b7:10:e9:19:4e:b1:9f:98:1c:
         14:df:a7:1e:5e:df:bf:54:51:28:e9:1b:f0:45:a9:fa:69:73:
         07:8f:e9:9b:10:e0:1a:0e:0f:3d:e5:cc:4b:18:9e:f1:23:66:
         39:7a:43:25:f4:25:35:a4:c3:4f:4c:4e:47:b8:81:4e:de:04:
         7b:fa:d0:21:3a:6c:bf:0a:37:3e:4b:f3:97:16:22:9f:38:42:
         9e:3a:8e:c5:11:96:2a:66:9f:56:22:35:0e:30:ad:78:4c:40:
         e9:af:96:e0:cd:39:99:b0:69:77:2c:5d:8a:cb:aa:78:91:0d:
         59:3b:e2:d4:1e:fa:c3:ca:e3:1d:4a:21:05:60:83:04:8b:0a:
         85:ae:92:6e:b7:c9:ff:ad:ba:20:a8:69:b4:ec:bd:77:45:8d:
         7f:a0:a8:c1:15:02:d8:46:69:e3:e1:da:10:5d:52:e3:8c:45:
         db:46:77:4e:3f:b4:e6:19:ff:e7:a5:3e:b6:99:ce:51:c5:39:
         b6:dc:9c:ef:f7:6e:c2:48:8d:f0:ce:3a:94:13:fe:df:b5:b6:
         cf:3d:1c:08:e0:c3:a6:56:6d:65:ff:b3:83:56:61:c2:05:2b:
         ee:e4:1e:26:b7:33:fa:9a:98:2f:01:73:f7:b0:23:5c:ad:d6:
         79:9b:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:27 2026 by rpki-client