Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/969ccd84-0877-3f7d-8221-1da4e25df587.roa
File:                     969ccd84-0877-3f7d-8221-1da4e25df587.roa (raw, json)
Hash identifier:          7c0MDNEVnnBfhSaFqdrJv7C0lJMmpolYv1aIdlHZsEc=
Subject key identifier:   C9:D3:59:6D:A2:57:56:9E:E1:D3:77:05:DD:B8:6B:ED:49:19:25:F6
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F0672426E0C6FA2FF9AD26380
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/969ccd84-0877-3f7d-8221-1da4e25df587.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        147.124.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:42:6e:0c:6f:a2:ff:9a:d2:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=fb88ca16-2673-422b-aeac-950987d551e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:85:e8:07:80:b5:28:92:f6:db:c9:23:9f:
                    da:2b:b6:75:22:70:3a:69:a6:c3:53:fe:82:68:6e:
                    ab:5d:2f:f5:ae:2d:3d:3c:0e:ee:07:03:59:71:77:
                    a4:49:c0:bc:fc:90:20:41:75:b8:5a:4d:e0:ca:21:
                    e9:6c:b8:fa:6c:54:c2:63:ff:1f:a3:64:ea:8a:d4:
                    0b:4e:c0:dd:95:a3:49:a3:54:85:98:9c:6f:66:6d:
                    9c:3b:d8:57:46:96:61:e5:42:3b:0f:d0:70:ab:1f:
                    3b:1f:d9:a6:47:37:96:bf:cb:32:d3:34:84:49:62:
                    59:97:8d:49:73:23:27:a9:bf:4e:c4:5f:41:96:a1:
                    9c:01:91:02:5d:e9:55:a6:14:db:97:00:59:f8:d3:
                    a7:f2:58:21:88:a6:53:07:d6:c6:dd:af:37:27:4a:
                    cd:0f:7c:e8:85:c2:5b:10:60:7f:e0:c6:f4:e9:c5:
                    bc:e2:13:44:10:ea:43:d4:53:86:7f:8f:8e:be:cf:
                    7f:b0:39:db:29:a3:4e:70:f6:bf:03:9b:3a:21:f3:
                    c8:d6:22:0f:29:8e:4a:bf:aa:3a:77:52:59:95:dc:
                    31:fe:77:71:f2:48:cb:4f:af:49:3b:52:0f:ce:3e:
                    0f:84:b9:41:d7:e0:5d:97:27:67:6b:46:0c:2d:d8:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D3:59:6D:A2:57:56:9E:E1:D3:77:05:DD:B8:6B:ED:49:19:25:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/969ccd84-0877-3f7d-8221-1da4e25df587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:f8:5d:03:0b:fd:33:4e:10:70:e5:a7:08:aa:bf:af:ef:
         d8:46:d2:49:67:dc:4b:c7:84:1a:58:52:86:6c:00:d7:13:e1:
         5b:ed:91:bb:80:90:49:9b:3a:a6:cb:41:4f:ea:25:e3:b6:84:
         e8:38:48:d3:3b:94:67:fa:74:f0:aa:87:a6:3f:f4:47:71:16:
         ff:68:76:da:f8:4c:20:bb:02:52:74:25:62:44:91:0b:14:6c:
         30:97:b3:b5:6d:2c:9f:f5:2b:77:80:aa:be:0f:bf:dc:11:99:
         8a:69:70:f7:d7:5a:c1:68:07:b3:35:4a:36:b2:a3:ad:d1:9b:
         97:67:5d:f2:d7:3b:a7:1c:d7:ea:50:de:76:7f:b5:1b:5a:34:
         8b:ed:c9:d4:8c:e2:c2:ee:4b:57:32:7e:e6:ae:6f:39:a9:fc:
         02:c7:2e:92:92:7f:92:57:a8:b4:ce:62:de:40:2e:7f:cf:d6:
         fb:8a:f4:cd:de:a0:bf:c3:9a:57:b4:e2:90:19:10:35:93:c3:
         47:75:40:ad:ad:c0:bf:c6:c9:1d:0a:fa:15:e5:fc:af:c1:31:
         2d:a5:7b:56:7b:c1:43:c7:38:46:51:64:9f:9c:5b:0a:ef:e6:
         61:74:06:1f:96:53:ef:d1:13:65:9a:e0:59:a9:3e:da:ae:b2:
         0e:2a:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:17:11 2026 by rpki-client