Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa
File:                     863b3edd-5665-31ac-9d3b-2dc8e704039b.roa (raw, json)
Hash identifier:          UwizA5iYNM5zNOPIkZhJG0E+v8nGJ9xWOSOtk+SdJ5c=
Subject key identifier:   6E:5F:32:FE:D0:3F:9A:DC:01:14:91:20:BD:06:45:1F:21:8B:89:FA
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A00DAC4D5F676F0359BE7ED40
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     26744
IP address blocks:        147.124.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c4:d5:f6:76:f0:35:9b:e7:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=211af9e3-d25e-42f0-b22d-4769e8b286de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:94:18:25:4c:55:29:80:a5:4d:67:48:a6:
                    e7:68:ad:e8:90:ff:cb:a1:d1:59:6b:8f:a2:ad:de:
                    fc:3d:19:28:65:2c:02:c3:c0:8d:2b:e2:b6:ea:e6:
                    d6:0d:f5:cd:6c:65:ff:54:d8:ca:c6:43:76:33:c2:
                    42:b2:8d:86:f4:66:bf:6e:05:c3:20:8f:5f:d3:68:
                    e1:7d:a0:1d:4c:ef:dd:42:e0:be:ff:ba:d9:a8:e9:
                    8d:26:73:8c:7e:3b:85:e4:ce:64:8a:d3:07:66:33:
                    9a:b0:98:c8:f6:1a:2b:05:9d:35:93:aa:32:97:0a:
                    1e:96:73:d0:27:4e:fa:aa:29:17:1d:29:47:5e:7c:
                    29:39:54:a8:4e:86:a1:19:51:ed:ec:fe:ef:80:f3:
                    2b:1d:69:16:8b:4b:90:04:9f:4e:cf:a1:91:a3:c2:
                    70:cd:81:01:2a:a7:8f:34:db:f7:fd:bc:45:0f:f6:
                    07:4a:07:ad:dc:4d:12:46:e8:be:28:c4:9e:6b:40:
                    81:85:76:96:83:0c:b4:5c:0e:f3:fa:7d:fa:a8:a2:
                    27:58:12:68:e0:b0:a3:ec:f5:3f:5c:5e:58:0b:5e:
                    bf:91:f6:0b:c0:3f:25:20:79:e2:fb:cb:51:54:a5:
                    0a:4c:72:39:03:20:22:34:0d:01:23:31:c9:a2:01:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5F:32:FE:D0:3F:9A:DC:01:14:91:20:BD:06:45:1F:21:8B:89:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ab:7d:ae:c6:5e:f5:15:93:a7:61:e6:eb:29:ee:9a:6c:06:
         e2:7e:4b:73:36:06:82:93:97:7e:2b:87:12:03:bc:e7:24:45:
         a9:85:c0:4c:c9:05:48:a3:57:f3:85:be:29:fd:5d:1c:b9:61:
         f8:73:d2:aa:21:c9:53:52:aa:2c:d9:b1:4a:98:ea:4c:80:18:
         69:6c:23:60:56:44:bf:dd:af:3c:33:6e:55:a2:b8:7a:3d:7a:
         05:d6:ec:f2:bb:9f:f9:80:c1:a6:b9:d4:73:59:80:b6:4b:34:
         f3:29:72:ff:5c:eb:35:57:b2:53:98:fe:66:35:ba:ee:cd:b7:
         b8:7e:b3:95:9d:69:18:f9:6e:9e:97:5b:40:b2:28:1e:d5:16:
         74:45:9b:a0:ed:7a:b1:be:d4:69:2e:90:c5:94:94:08:31:f5:
         5f:0b:80:f0:39:23:84:e5:da:df:b9:d1:93:70:d2:ba:9b:1a:
         e3:d3:b8:df:2b:60:b0:09:ce:64:5e:dc:fb:1d:06:ef:1b:56:
         86:19:1f:7a:67:00:d6:4f:3c:3d:99:b0:4a:9b:2f:26:61:80:
         40:d3:d7:99:e5:92:e5:21:b4:1f:1f:82:07:1c:5d:9c:d8:f9:
         06:68:4f:00:e3:b7:8d:58:5f:8c:82:58:5c:80:23:99:54:c7:
         b2:61:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:36:07 2025 by rpki-client