Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/58141b2a-2561-325a-875c-c108bbc54667.roa
File:                     58141b2a-2561-325a-875c-c108bbc54667.roa (raw, json)
Hash identifier:          Bd0qezYLlY3+xcGI5TkkLiKhjOy73IWTGIdZituuUU8=
Subject key identifier:   A1:C6:2F:93:01:16:B9:05:AF:7C:A7:01:E7:72:C9:7D:17:0A:C0:90
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CAE5728808582ED222A9C21E0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/58141b2a-2561-325a-875c-c108bbc54667.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     26744
IP address blocks:        147.124.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:28:80:85:82:ed:22:2a:9c:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=42935071-7cfe-44f5-b3cc-7ce3964d3ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:35:79:c4:c2:f5:a8:5a:a3:67:9d:1a:1d:
                    58:a2:a7:83:a6:d3:97:2b:47:4e:40:7b:3a:89:88:
                    cc:65:a5:86:4e:22:2a:ee:76:46:dc:61:c4:09:b0:
                    67:db:75:8c:52:17:ee:17:fe:de:ce:ae:44:34:8d:
                    71:8e:98:73:bb:04:a1:32:a9:8a:84:8d:73:4f:b4:
                    19:8c:8c:5b:4e:88:36:55:a8:ba:7a:b0:b8:3e:90:
                    72:af:69:38:29:4d:47:7f:0b:35:37:11:24:0f:7f:
                    7a:77:bb:79:3d:0f:87:cb:2c:b3:cb:88:37:e8:4d:
                    b4:73:e9:3d:91:1c:9e:c6:89:81:8e:d6:fd:c6:06:
                    c9:6b:cf:e2:c7:11:8c:2c:18:1a:a9:3a:db:74:bd:
                    99:3f:57:d4:76:d1:b3:5e:54:da:2b:bb:f1:6d:43:
                    1b:0e:15:13:18:4a:cb:3b:f7:07:48:c9:d0:5a:0f:
                    a8:90:bb:f4:78:3a:95:5d:c1:25:b8:4c:11:fe:7b:
                    ea:d4:ca:8e:88:56:67:36:b5:4b:19:23:42:e8:1d:
                    71:de:7a:ca:b4:20:9e:29:8c:ad:48:81:97:5e:70:
                    d9:20:2c:73:38:7b:13:35:cc:2e:59:cb:11:52:55:
                    c4:27:78:40:b6:8f:82:fe:ca:b2:f6:67:f4:59:e9:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:2F:93:01:16:B9:05:AF:7C:A7:01:E7:72:C9:7D:17:0A:C0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/58141b2a-2561-325a-875c-c108bbc54667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:2e:f6:5a:77:00:22:d5:ec:1d:bc:e9:09:52:7d:71:24:
         e8:1a:25:ea:c6:e6:62:8e:01:88:05:42:e8:25:63:dd:e3:6f:
         c2:ec:5a:a4:5d:24:d8:0a:e2:f4:96:7e:bc:bb:95:d9:41:7d:
         28:07:cc:3c:e5:69:6a:45:43:47:d3:ed:ae:77:1d:6a:10:13:
         63:21:f5:cf:0a:ae:51:aa:7f:d6:14:4b:72:f0:fb:03:78:5a:
         29:e2:ff:f4:25:56:b9:ce:cb:b3:36:7a:6a:87:72:31:cb:ff:
         c6:b3:fa:8c:a5:c0:b1:ab:bd:f8:1a:2b:4c:39:40:02:60:b5:
         8a:87:72:3b:7b:fc:98:60:6d:84:a4:06:9e:dc:76:32:a0:3a:
         8a:bb:31:d2:45:d0:9f:d1:94:bb:0d:37:71:8b:2f:4d:a5:11:
         f3:5a:bc:6d:8d:ec:4e:4a:b3:28:5b:7e:cf:14:bc:e1:d0:99:
         90:3b:73:49:ce:4b:9e:3f:46:22:49:31:70:ca:ad:f4:1b:de:
         3f:d1:71:1f:ae:89:bb:09:db:fd:5b:2d:cf:9b:37:8d:8b:be:
         30:bf:99:e9:48:cd:ea:f4:29:6b:18:68:ed:c7:a4:97:35:fe:
         1a:41:35:87:d4:05:7a:04:9b:50:93:f8:af:52:c8:28:a9:da:
         55:c9:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:57 2026 by rpki-client