Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fb77eb2b-58df-3827-bc2e-91f115a250a9.roa
File:                     fb77eb2b-58df-3827-bc2e-91f115a250a9.roa (raw, json)
Hash identifier:          f07+9/RqLg4CyGi9q5bc5sBtLH7SJ6+dfXtsVROKN0o=
Subject key identifier:   AF:DB:36:04:1F:B1:C0:E2:2F:46:04:93:2C:57:2D:3E:FC:1E:A5:99
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC2706AEA90BB63A68F4E3C60
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fb77eb2b-58df-3827-bc2e-91f115a250a9.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        147.124.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:6a:ea:90:bb:63:a6:8f:4e:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=1c2ca2ee-1c4d-4118-9bf4-6a2e20817b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:4c:fe:7f:e8:71:98:1f:5c:5a:0f:7b:da:
                    15:38:5d:d1:16:bc:d3:9f:57:8e:0c:78:d3:68:de:
                    b0:59:35:81:9a:62:86:fe:91:7c:b8:b2:ee:39:ca:
                    43:b1:05:c4:e8:9f:50:1f:9e:cb:91:48:73:b0:b3:
                    67:0d:54:77:1c:11:ca:a3:17:25:0e:29:49:67:cb:
                    85:ce:3d:34:41:a5:7b:f0:4e:32:c1:ce:cf:d7:0b:
                    26:cc:cc:d3:8e:74:02:e4:80:03:76:7d:b4:c2:d9:
                    df:a7:32:b2:25:96:fc:7e:b8:f5:03:e2:88:ab:ea:
                    d5:bb:a0:78:f2:78:3a:70:b4:76:96:26:45:e8:a9:
                    12:64:ad:a3:93:20:a1:31:7e:69:a4:48:19:03:37:
                    d7:72:18:24:26:05:57:d7:d6:96:93:d7:44:4d:1c:
                    98:0d:cf:a6:78:82:76:18:8b:f6:c3:24:e0:ba:05:
                    cd:ff:59:0c:7c:80:42:d2:9c:15:ee:e1:f0:9c:62:
                    17:87:81:52:75:16:57:92:d7:e4:d7:ca:28:29:0c:
                    b7:f1:91:5e:b0:99:e4:75:3c:c3:72:d3:5b:84:69:
                    e7:45:74:9a:35:10:9a:50:af:80:75:55:3c:a1:93:
                    45:d3:e6:5a:aa:bf:1a:29:a7:08:d9:80:32:99:d6:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:36:04:1F:B1:C0:E2:2F:46:04:93:2C:57:2D:3E:FC:1E:A5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fb77eb2b-58df-3827-bc2e-91f115a250a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:52:9f:da:a9:f0:dd:66:36:75:d2:0e:77:9b:c1:dd:d6:
         9d:04:fc:5c:c5:c5:44:78:2b:80:d4:d7:65:b8:dd:c5:29:4c:
         d8:24:b4:21:49:c9:d4:56:e3:25:f9:a6:8e:80:b6:93:39:b8:
         49:4a:eb:8a:1b:ae:21:7f:29:40:30:f7:73:18:ac:44:03:df:
         bd:7d:2c:f0:65:48:13:78:0c:5d:dc:cb:27:09:36:c1:66:42:
         73:2e:b6:ed:ce:e1:b5:15:86:8d:b4:d0:30:3c:1a:12:e1:6f:
         98:3e:a8:61:59:90:87:3d:83:26:b5:7a:58:ff:6e:27:79:aa:
         11:fc:31:68:14:0c:00:85:05:ba:b3:03:c7:44:b9:be:b1:58:
         93:b7:f8:f2:cb:c0:d3:ad:1f:b3:76:a7:ab:f5:86:e9:39:56:
         04:14:e8:c5:87:d8:4f:9e:73:35:ac:ed:1a:14:fb:dd:33:27:
         46:80:e4:56:c6:73:b4:f2:52:a6:6d:7a:98:75:8b:a8:34:6f:
         af:c0:13:8f:a8:91:47:d5:4e:d0:73:3b:d6:b5:c7:3e:13:f0:
         30:01:b6:dc:f0:eb:52:a4:69:4e:21:ca:27:a4:20:65:ed:57:
         b5:a4:5e:fa:96:67:7e:24:4b:2e:fc:0a:95:f3:7c:e6:20:38:
         ee:72:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:32:11 2025 by rpki-client