Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8f788383-a6df-3429-8454-674628326c33.roa
File:                     8f788383-a6df-3429-8454-674628326c33.roa (raw, json)
Hash identifier:          QGgunvYCNp0jJJNt3Uk0MbyPk/R9CTlnH2fI2kC+fmk=
Subject key identifier:   53:FB:FF:ED:65:51:1A:3C:F5:46:32:3B:1A:8D:CB:88:19:1F:AE:5F
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D83CAADC7CAA25ADA8E355900
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8f788383-a6df-3429-8454-674628326c33.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     26744
IP address blocks:        147.124.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ad:c7:ca:a2:5a:da:8e:35:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=af012f3d-cecf-47b8-b123-5e62f1a7c553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:50:8e:6f:c3:91:86:be:b5:8c:c7:43:eb:
                    dd:60:22:f3:a8:26:5a:6f:d7:bf:2d:55:02:1f:a8:
                    7a:e5:14:e4:0c:66:92:e3:e0:72:ff:2b:5c:aa:8d:
                    17:64:37:5b:5e:8a:79:c7:d3:76:18:34:ef:16:25:
                    93:6e:05:82:9b:da:61:6f:4d:84:ab:80:1e:aa:db:
                    1b:47:c8:a1:eb:a3:5b:b2:8b:b3:43:5e:2f:a2:e2:
                    03:47:a5:5a:c8:f8:2d:7e:8f:5d:db:49:b8:7f:61:
                    5c:0b:7f:20:d2:42:96:0b:93:6b:5e:d3:3b:71:75:
                    1d:e6:b4:65:e8:2f:48:31:86:11:87:22:c8:90:1e:
                    89:d8:c8:be:77:58:47:16:a7:54:a0:d0:fa:2f:a8:
                    a3:30:fb:20:26:ab:42:aa:0f:57:aa:92:23:ce:4a:
                    c6:2b:57:de:aa:c1:a6:26:bc:8b:f0:71:30:29:43:
                    90:56:52:e9:23:b7:01:43:58:91:88:be:fc:8c:d3:
                    6f:d7:bc:7e:03:d4:34:82:20:52:4f:b1:a2:1b:35:
                    96:0f:1e:88:4b:c2:a8:5f:25:dd:e1:10:1d:c6:cc:
                    2a:3d:1f:68:cd:5b:a6:10:ed:94:99:fa:0a:8c:1f:
                    24:c3:81:89:8c:ea:e9:82:46:aa:8b:93:a4:05:0a:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:FF:ED:65:51:1A:3C:F5:46:32:3B:1A:8D:CB:88:19:1F:AE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8f788383-a6df-3429-8454-674628326c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:bc:3e:13:6b:f7:7a:c2:6c:26:58:ee:82:f1:1a:0c:99:
         0c:81:f0:0c:7e:c0:fc:6c:b4:28:b7:82:ff:52:3d:62:10:c0:
         3e:98:80:85:38:15:45:ed:46:8a:97:fc:33:f5:a1:bf:ca:38:
         ff:41:95:88:ee:a1:83:b6:5a:4c:06:e8:67:2a:2e:c3:e4:65:
         26:11:78:5f:4f:53:a8:46:66:49:10:f5:07:ca:57:53:fa:7f:
         f8:ce:52:60:9b:70:e0:f2:37:a5:e8:45:e7:06:01:dc:8c:d1:
         88:61:cb:92:80:3d:96:2b:db:db:b3:f9:55:28:f8:65:8a:e4:
         ce:ec:a9:a4:03:d1:25:46:b4:eb:93:06:4d:54:d2:c5:a4:10:
         88:49:59:74:34:bb:c5:c3:dd:04:de:19:cf:2d:02:36:01:12:
         a1:b5:cd:8a:59:21:1a:64:a4:08:f8:a8:a0:54:aa:5f:fa:7b:
         6a:72:b5:5f:f0:15:bf:f8:cb:b2:5b:64:b0:fa:00:51:01:99:
         c9:81:33:57:74:71:4b:8f:a6:54:97:bb:74:57:72:94:59:f2:
         26:d4:70:35:e2:7b:45:33:a0:11:3d:01:1c:e8:2b:fa:e8:d1:
         1b:39:74:4b:be:a7:c8:99:2b:13:a9:b4:be:44:bf:b9:57:9c:
         44:b5:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:58 2026 by rpki-client