Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa
File:                     a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa (raw, json)
Hash identifier:          hlMMkwcWTVSYop1lPxZ+WNb8HgDlQiF3txegoQz3wkg=
Subject key identifier:   34:CC:CF:1B:97:A5:93:3A:89:88:2E:8E:AE:25:F9:69:B5:E4:1C:00
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC2706AA98E5C8B8B62603A00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        147.124.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:6a:a9:8e:5c:8b:8b:62:60:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=043755f7-1e72-4dec-8b1a-0907e843cc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:79:aa:26:d3:61:7e:a0:08:0f:5e:91:3b:
                    40:db:46:d8:64:88:f3:2e:60:19:90:02:c7:91:d4:
                    a7:65:91:85:ff:87:1a:8c:3c:7a:59:36:a3:8f:e2:
                    f4:b2:94:f3:1c:45:1c:15:54:99:0b:76:39:e3:fd:
                    c5:a7:cf:3c:84:cf:28:3e:bc:ee:0b:f7:92:a1:e3:
                    85:0e:6a:c1:50:ae:bb:6d:ae:e5:d7:ff:b7:44:f5:
                    a3:ca:b4:1d:57:a9:2f:76:bb:b8:38:56:70:cd:ce:
                    86:40:b3:ef:09:ca:67:21:f1:43:7f:34:da:0c:1c:
                    dc:c9:ee:7f:55:89:d8:05:e6:7e:b5:24:d6:89:4d:
                    05:bf:51:b4:95:a7:4e:c9:d9:09:37:c5:31:d9:7b:
                    0c:3b:fd:69:22:11:b5:14:c0:6c:d2:a9:2c:36:52:
                    ae:7a:e1:58:9c:f6:b9:6b:94:a0:bf:07:80:3b:8d:
                    60:f1:f0:ab:8a:c3:2f:7f:f0:2b:a0:9b:36:98:79:
                    7a:7b:57:25:2f:ad:0f:a9:5e:87:e6:f1:56:11:55:
                    99:df:31:a3:d3:dc:81:8d:1d:69:cb:3f:ca:d0:53:
                    8e:50:3e:08:ae:90:f5:ed:bb:e9:77:72:d7:ff:4a:
                    6f:df:e2:a1:a3:8f:af:ac:03:89:66:73:73:1c:d0:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CC:CF:1B:97:A5:93:3A:89:88:2E:8E:AE:25:F9:69:B5:E4:1C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:05:5b:f8:41:e1:d3:20:02:c0:64:75:6a:a5:81:01:1a:ab:
         f0:4e:79:d6:b1:09:a3:c6:cf:fa:07:b4:9c:51:be:d8:be:54:
         a8:f9:97:1b:9e:37:ee:85:46:18:55:57:f6:75:d6:8e:46:ba:
         20:b7:36:1c:ee:88:75:5f:32:12:67:d7:a0:62:ba:32:e8:06:
         fc:5c:09:22:59:06:ae:f7:2f:7e:2e:0d:ec:3d:49:8e:87:62:
         95:c1:33:38:d7:b9:33:ca:64:8d:d3:58:c1:db:96:4c:90:ef:
         a7:67:4f:20:97:6e:81:a4:95:69:43:84:90:90:8b:4a:d7:dd:
         7f:b7:78:7c:0d:52:df:28:8d:e2:99:45:41:7c:d4:a7:21:b4:
         2a:45:5a:00:57:75:7c:d6:f5:c2:7a:ef:1a:6c:af:cc:9a:1a:
         71:50:eb:82:0a:55:52:96:70:60:5c:8f:aa:70:1e:b5:5a:8b:
         3a:ee:a7:9a:b9:7b:e8:03:44:75:15:1f:3e:3a:60:0e:f9:c1:
         05:3a:2a:42:f9:cb:b0:82:18:be:1d:1a:81:15:9d:a1:0a:77:
         f2:21:48:ec:1d:65:36:80:e3:8e:04:11:d2:2f:db:26:cd:f6:
         fc:06:0a:7e:9f:18:31:1d:73:f6:e3:a0:08:1a:f6:6e:76:1f:
         2e:10:fa:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcGqpjlyLi2JgOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk
MDQzNzU1ZjctMWU3Mi00ZGVjLThiMWEtMDkwN2U4NDNjYzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7F5qibTYX6gCA9ekTtA20bYZIjzLmAZkALH
kdSnZZGF/4cajDx6WTajj+L0spTzHEUcFVSZC3Y54/3Fp888hM8oPrzuC/eSoeOF
DmrBUK67ba7l1/+3RPWjyrQdV6kvdru4OFZwzc6GQLPvCcpnIfFDfzTaDBzcye5/
VYnYBeZ+tSTWiU0Fv1G0ladOydkJN8Ux2XsMO/1pIhG1FMBs0qksNlKueuFYnPa5
a5SgvweAO41g8fCrisMvf/AroJs2mHl6e1clL60PqV6H5vFWEVWZ3zGj09yBjR1p
yz/K0FOOUD4IrpD17bvpd3LX/0pv3+Kho4+vrAOJZnNzHNDSOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTMzxuXpZM6iYgujq4l+Wm15BwAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYTdhNzAzMWUtMDA4YS0z
NGQ5LWE0YTAtZWNlNWU3ZTZkYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYFW/hB4dMgAsBkdWqlgQEaq/BOedaxCaPGz/oHtJxRvti+VKj5lxue
N+6FRhhVV/Z11o5GuiC3NhzuiHVfMhJn16BiujLoBvxcCSJZBq73L34uDew9SY6H
YpXBMzjXuTPKZI3TWMHblkyQ76dnTyCXboGklWlDhJCQi0rX3X+3eHwNUt8ojeKZ
RUF81KchtCpFWgBXdXzW9cJ67xpsr8yaGnFQ64IKVVKWcGBcj6pwHrVaizrup5q5
e+gDRHUVHz46YA75wQU6KkL5y7CCGL4dGoEVnaEKd/IhSOwdZTaA444EEdIv2ybN
9vwGCn6fGDEdc/bjoAga9m52Hy4Q+p4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:36 2025 by rpki-client