Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fb77eb2b-58df-3827-bc2e-91f115a250a9.roa
File:                     fb77eb2b-58df-3827-bc2e-91f115a250a9.roa (raw, json)
Hash identifier:          /+14zOKdecX9P//QwqEBRaCO/SnX9ECNbKlPTC1ltkU=
Subject key identifier:   6C:A0:8F:43:15:CD:B9:3B:36:EB:2C:6F:00:36:FF:09:E9:42:A5:7E
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D83CAAF175406AF5B8D9414C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fb77eb2b-58df-3827-bc2e-91f115a250a9.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     26744
IP address blocks:        147.124.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:af:17:54:06:af:5b:8d:94:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=c282dd7d-7a59-4049-a137-5b1e1e9b0fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:54:b3:4e:0b:b5:e5:94:4e:a2:e7:f9:cd:
                    3f:e0:ce:c4:83:37:7e:f6:1e:d4:6d:e7:1d:46:27:
                    5a:74:40:76:32:7c:8b:34:a2:27:f6:2e:52:c6:a9:
                    98:d4:71:fe:a2:92:53:d5:e0:f7:3e:f2:08:85:9a:
                    eb:ba:68:25:25:5a:86:4a:25:98:19:66:26:16:e9:
                    05:b3:9e:04:06:36:12:41:c3:1c:01:e2:5b:2e:0b:
                    b4:dd:e4:6f:d4:ed:11:55:56:61:f4:11:14:56:b7:
                    9a:d1:6b:25:be:bb:a8:f9:0f:76:a0:dd:08:4d:60:
                    a6:7d:51:76:64:46:6a:3b:9b:2f:02:b4:1e:9d:33:
                    c5:c1:93:fd:d5:5b:fa:d3:f2:75:35:1b:d1:45:29:
                    fb:49:48:16:4b:36:e5:07:b0:51:a4:36:ff:64:8d:
                    53:a9:9f:7b:e1:0b:dc:6c:bd:3d:34:24:f1:f1:42:
                    34:ca:37:8a:93:66:f2:8d:8d:ab:bd:8b:09:25:51:
                    b4:5e:71:99:47:28:13:f4:a6:b7:25:6d:64:d1:c3:
                    ac:b9:27:d5:f3:80:56:75:26:12:cc:ee:05:f5:77:
                    2d:6d:36:d0:55:68:c6:f7:49:04:c9:5c:3f:5e:ed:
                    c3:f8:81:5e:bd:c2:08:e9:e2:40:e0:b0:29:bb:94:
                    b1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A0:8F:43:15:CD:B9:3B:36:EB:2C:6F:00:36:FF:09:E9:42:A5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fb77eb2b-58df-3827-bc2e-91f115a250a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:6a:7d:bf:52:e7:fd:d1:d1:a6:59:60:ab:c8:e5:ce:be:
         55:69:88:55:47:b4:e3:53:ac:f4:a4:de:83:ca:90:9d:ef:f5:
         ae:c1:90:0b:68:97:4f:9b:ce:d3:d8:5a:56:90:11:de:b1:2a:
         9a:7e:f2:50:23:37:97:a6:3f:2a:0e:f9:4d:b5:9c:f3:d8:d6:
         37:ab:e0:11:57:a1:46:f2:5f:43:79:ea:74:0d:75:95:ee:25:
         4e:51:1d:1e:fe:43:d8:50:7d:56:51:88:77:06:7b:33:59:3f:
         73:da:21:27:6d:68:b9:14:96:89:05:46:1a:57:a0:ca:b4:99:
         10:56:30:b2:41:79:76:71:29:ee:fe:ea:44:7f:2a:5a:a7:87:
         af:21:3a:ad:74:3b:41:5a:03:9c:7e:01:43:c5:33:17:e1:e6:
         df:c8:57:67:9e:23:2e:29:ea:b8:e4:fb:c9:8a:86:18:e1:c5:
         d6:78:1b:c4:8b:36:65:7b:fb:eb:77:cf:a4:bf:b5:aa:d8:d2:
         b5:96:8c:94:ed:d7:c2:05:30:b3:53:03:a2:12:17:2b:78:45:
         1c:8e:de:ab:43:cb:fd:0a:72:6f:78:58:35:bf:63:24:d7:59:
         be:91:ac:03:c6:dd:da:79:3d:bf:c8:9a:d0:bd:85:7b:bb:6f:
         e4:03:a2:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyq8XVAavW42UFMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YzI4MmRkN2QtN2E1OS00MDQ5LWExMzctNWIxZTFlOWIwZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+hUs04LteWUTqLn+c0/4M7Egzd+9h7Ubecd
RidadEB2MnyLNKIn9i5SxqmY1HH+opJT1eD3PvIIhZrrumglJVqGSiWYGWYmFukF
s54EBjYSQcMcAeJbLgu03eRv1O0RVVZh9BEUVrea0Wslvruo+Q92oN0ITWCmfVF2
ZEZqO5svArQenTPFwZP91Vv60/J1NRvRRSn7SUgWSzblB7BRpDb/ZI1TqZ974Qvc
bL09NCTx8UI0yjeKk2byjY2rvYsJJVG0XnGZRygT9Ka3JW1k0cOsuSfV84BWdSYS
zO4F9XctbTbQVWjG90kEyVw/Xu3D+IFevcII6eJA4LApu5SxqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGygj0MVzbk7NussbwA2/wnpQqV+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZmI3N2ViMmItNThkZi0z
ODI3LWJjMmUtOTFmMTE1YTI1MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk3zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR9an2/Uuf90dGmWWCryOXOvlVpiFVHtONTrPSk3oPKkJ3v9a7BkAto
l0+bztPYWlaQEd6xKpp+8lAjN5emPyoO+U21nPPY1jer4BFXoUbyX0N56nQNdZXu
JU5RHR7+Q9hQfVZRiHcGezNZP3PaISdtaLkUlokFRhpXoMq0mRBWMLJBeXZxKe7+
6kR/Klqnh68hOq10O0FaA5x+AUPFMxfh5t/IV2eeIy4p6rjk+8mKhhjhxdZ4G8SL
NmV7++t3z6S/tarY0rWWjJTt18IFMLNTA6ISFyt4RRyO3qtDy/0Kcm94WDW/YyTX
Wb6RrAPG3dp5Pb/ImtC9hXu7b+QDolQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:54:12 2026 by rpki-client