Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa
File:                     2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa (raw, json)
Hash identifier:          pXRxGPSfsdixkuuHsa/Via+xqYsY0B93jPiJwkuxgqI=
Subject key identifier:   8F:80:02:2B:A8:A2:22:13:FB:1B:75:34:BE:6F:0F:0C:23:D8:13:96
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584D300A427A8D6F51E5910D76E0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     2615
IP address blocks:        147.1.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:42:7a:8d:6f:51:e5:91:0d:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=020b6647-9b36-4a0f-8b3c-f7508f28ac74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:4b:5a:0c:83:f4:1e:b0:20:cf:93:ec:41:
                    b5:71:f8:82:39:c3:de:28:7c:cc:4e:fd:59:8e:f4:
                    c6:cf:58:c2:a0:d6:ac:f9:c4:db:15:6f:f9:c6:70:
                    4a:ce:d2:fd:05:78:7a:b3:6a:ce:ee:66:3e:25:a4:
                    f5:4f:3b:ab:fe:e0:46:df:e7:06:fd:ba:9c:1d:9f:
                    7e:ff:e4:63:ba:26:c9:ea:8a:13:45:36:30:83:55:
                    2a:f1:08:25:e9:04:50:d5:24:4a:85:6d:14:55:b3:
                    93:0b:a1:f4:84:3c:65:b6:9c:63:1c:f1:f8:82:85:
                    33:79:2d:a2:05:62:52:72:1d:c7:82:35:6a:fc:1e:
                    d8:e1:48:6f:c6:29:a8:e9:c4:ca:4a:14:cf:6b:2c:
                    24:59:ff:e3:23:5e:f8:23:ec:1c:e0:60:7c:99:54:
                    52:c4:4b:8b:5d:6c:21:51:74:d2:0e:2b:e3:ae:2c:
                    2e:1d:d6:c7:6e:6d:0d:f2:6c:d7:ce:83:7d:4e:15:
                    82:84:fe:99:14:a7:b0:9b:f4:4b:d1:31:e6:19:4c:
                    36:60:0a:ae:63:1c:10:22:83:45:76:3f:50:13:4a:
                    c1:a6:35:60:b1:90:c9:a0:86:56:51:ae:3d:93:30:
                    c8:ef:bc:0f:b2:84:b4:97:bd:8d:75:2b:be:1e:63:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:80:02:2B:A8:A2:22:13:FB:1B:75:34:BE:6F:0F:0C:23:D8:13:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:66:4f:f7:4f:4f:5e:3e:a6:c1:73:1c:b6:95:b8:ab:b5:
         c9:b8:31:b0:4e:1e:04:e6:1a:eb:11:28:20:6d:7f:22:42:0b:
         e1:91:d9:a5:42:f7:a1:91:79:ea:f0:c0:8e:41:15:fa:ac:e1:
         d7:de:6d:7d:6e:a8:23:8f:bd:d0:35:c3:82:bc:0c:0d:08:e4:
         31:85:c0:bf:c8:23:01:d0:b6:4a:b1:84:b7:7a:c2:1f:ea:2d:
         7a:07:f7:ee:df:c7:34:cd:f1:af:92:39:d8:93:8c:89:7a:b7:
         70:df:88:23:ff:bc:ac:e3:1b:3f:5a:90:f2:40:c1:34:f0:ab:
         52:15:eb:6d:3e:cf:85:1e:f9:15:24:6c:01:d9:85:30:55:8e:
         2f:84:a4:78:dd:7d:f5:6c:fa:30:69:e5:ac:70:ab:5e:57:8f:
         31:e8:3c:c5:a7:b5:e5:0b:ed:44:08:63:60:ed:bb:43:3d:19:
         59:de:da:83:0a:0e:1e:19:13:9b:25:36:62:5f:03:08:24:24:
         bc:08:29:fd:07:d6:96:6a:88:d7:12:6d:1a:c2:45:ed:92:d8:
         6b:81:20:da:a6:d1:ea:85:11:a7:ff:8e:ba:ca:28:c4:3d:2b:
         83:55:d4:04:65:38:0b:1b:77:88:c6:22:97:0b:9b:93:7c:05:
         07:fe:41:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkJ6jW9R5ZENduAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
MDIwYjY2NDctOWIzNi00YTBmLThiM2MtZjc1MDhmMjhhYzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xFLWgyD9B6wIM+T7EG1cfiCOcPeKHzMTv1Z
jvTGz1jCoNas+cTbFW/5xnBKztL9BXh6s2rO7mY+JaT1Tzur/uBG3+cG/bqcHZ9+
/+RjuibJ6ooTRTYwg1Uq8Qgl6QRQ1SRKhW0UVbOTC6H0hDxltpxjHPH4goUzeS2i
BWJSch3HgjVq/B7Y4Uhvximo6cTKShTPaywkWf/jI174I+wc4GB8mVRSxEuLXWwh
UXTSDivjriwuHdbHbm0N8mzXzoN9ThWChP6ZFKewm/RL0THmGUw2YAquYxwQIoNF
dj9QE0rBpjVgsZDJoIZWUa49kzDI77wPsoS0l72NdSu+HmOXIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+AAiuooiIT+xt1NL5vDwwj2BOWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmNkM2M3NzItMTEyYy0z
MjIyLWFlOGUtN2FmMDRiZjFkNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADp9Zk/3T09ePqbBcxy2lbirtcm4MbBOHgTmGusRKCBtfyJCC+GR2aVC
96GReerwwI5BFfqs4dfebX1uqCOPvdA1w4K8DA0I5DGFwL/IIwHQtkqxhLd6wh/q
LXoH9+7fxzTN8a+SOdiTjIl6t3DfiCP/vKzjGz9akPJAwTTwq1IV620+z4Ue+RUk
bAHZhTBVji+EpHjdffVs+jBp5axwq15XjzHoPMWnteUL7UQIY2Dtu0M9GVne2oMK
Dh4ZE5slNmJfAwgkJLwIKf0H1pZqiNcSbRrCRe2S2GuBINqm0eqFEaf/jrrKKMQ9
K4NV1ARlOAsbd4jGIpcLm5N8BQf+QZY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:43 2026 by rpki-client