Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa
File:                     863b3edd-5665-31ac-9d3b-2dc8e704039b.roa (raw, json)
Hash identifier:          75UUd9u2XIEGR75TsALRqf6KZTyt73ipcUOQxxTxDW8=
Subject key identifier:   C4:5B:88:66:91:23:86:BD:AE:70:5F:EC:71:EE:E6:4A:89:CC:A4:F2
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CA32C6E76F1A92D85A0C4BC00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        147.124.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:6e:76:f1:a9:2d:85:a0:c4:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=95d8a165-c615-4be7-aaa6-e34c9ffa684c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:7d:83:f0:a6:dc:02:7f:b5:9f:64:67:f2:
                    96:40:fe:44:91:ed:a4:ad:a0:ee:2c:2b:42:95:e9:
                    85:a0:6c:74:70:d7:d8:ec:4c:43:0f:ff:d7:08:ef:
                    e5:9e:03:59:0d:30:21:60:cd:5a:1d:7a:15:59:b6:
                    bf:1c:4f:ec:47:c8:29:cc:58:8c:d1:56:c7:ed:73:
                    cb:c1:93:36:8d:0b:4b:90:95:b7:c2:99:7a:30:04:
                    dc:3d:a6:40:a9:e1:f2:77:5c:61:60:a2:3f:98:75:
                    1e:04:50:4d:27:45:e1:2e:bc:7d:8c:27:ee:7b:2d:
                    54:fc:97:7f:cf:99:4e:3f:84:39:ca:84:45:77:a3:
                    f2:59:12:40:97:17:9e:92:2d:de:e6:e5:a9:44:bc:
                    1e:cc:3c:50:de:99:01:68:d5:19:18:b7:d1:ee:df:
                    ed:40:bd:1f:0e:c3:b5:ae:f8:eb:0c:a6:e3:1c:0f:
                    2a:64:0d:36:0d:1f:da:05:e4:55:bd:31:ee:5e:ff:
                    4d:9d:3f:12:55:b3:07:71:23:fd:b2:00:0b:1a:db:
                    c8:50:3d:92:db:ee:c0:fd:d6:99:0e:b1:be:6d:9b:
                    54:df:a8:12:ef:13:5c:c0:44:f6:a6:53:7a:ba:85:
                    b0:94:b7:e0:e8:27:5c:89:19:c1:33:4c:f8:98:ca:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:88:66:91:23:86:BD:AE:70:5F:EC:71:EE:E6:4A:89:CC:A4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:5c:d0:95:56:99:f3:12:da:e0:2d:00:bc:87:f4:a0:31:
         b6:b2:1f:03:85:a1:57:bf:e9:5f:f8:99:6f:33:a3:4c:03:34:
         81:91:2a:93:c8:f6:36:b0:f4:65:4d:e8:84:8f:7d:60:1a:ad:
         78:9f:03:74:1e:d7:b4:6f:44:90:58:ab:d1:1d:29:8c:3e:57:
         5f:33:1a:e2:ec:24:95:a0:7b:be:96:70:d3:75:8a:14:bb:d5:
         97:9f:33:d7:a4:fa:56:34:48:d9:50:75:6a:0d:42:2b:25:07:
         28:ba:60:dc:ae:cf:a6:4d:54:8a:b7:cd:90:a7:03:e0:66:df:
         14:02:69:1f:57:e3:89:5f:9d:cd:e1:71:dd:eb:9e:c1:93:5e:
         05:9a:77:76:76:56:89:8d:6d:57:e9:24:48:c3:e3:0e:06:c6:
         0c:99:ea:de:72:6f:99:a3:14:02:99:93:85:fa:4f:46:cd:e1:
         26:bb:93:48:f7:d9:bf:e2:70:4b:20:fd:a9:b0:20:18:6b:20:
         f1:eb:b9:1a:8e:88:07:fb:f0:82:f9:cf:2a:84:bd:89:e8:07:
         d8:76:c3:5a:32:85:66:c6:d8:83:c9:3b:a7:68:12:6a:76:83:
         0c:f8:23:d4:00:6c:d5:c1:93:de:8c:99:63:97:d0:fc:c0:cb:
         97:e9:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:35 2026 by rpki-client