Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa
File:                     517d4d16-8ae0-3416-b488-37d337e7455b.roa (raw, json)
Hash identifier:          aPCXhsRusdu1IZ4Uvtq5WvQ9vISXSCZYMhIwdSFDKKI=
Subject key identifier:   29:C5:86:AD:C4:30:9A:16:4C:48:8D:39:3E:64:D0:F8:A1:D1:79:5B
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584DB7703C300724C45E46602200
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     2615
IP address blocks:        147.1.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3c:30:07:24:c4:5e:46:60:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=50e92b6d-fdd9-432c-ab81-bcb314256c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:a1:39:e2:af:d2:b3:6d:c8:d3:3c:f2:c0:
                    64:29:a1:d1:88:f2:d9:d0:d0:9a:e6:9c:a9:07:88:
                    b2:cf:f8:a6:31:10:36:b9:9d:21:db:65:3f:97:33:
                    37:05:37:15:88:55:ce:ad:50:55:2f:b5:6e:4c:30:
                    17:8a:93:b0:bd:20:dd:73:38:23:3c:32:68:a2:c8:
                    0f:06:e8:df:76:f4:60:ee:5e:91:f1:3b:e8:68:a9:
                    8f:1f:d0:ac:65:70:3f:54:68:a0:bc:a1:86:47:5c:
                    80:1f:84:f1:c8:af:a7:3c:ed:c4:b5:d8:a6:62:b7:
                    e3:8d:f3:82:42:7d:cc:17:c1:04:97:7b:b1:9c:5c:
                    aa:56:06:ab:b0:7d:40:e5:87:af:1b:45:cd:25:ed:
                    0e:2e:78:96:d0:d2:84:3f:14:69:4f:15:80:7a:41:
                    a1:89:cd:58:b5:c9:59:ff:7f:44:47:38:64:a1:ec:
                    97:61:5a:f0:ac:96:7c:6a:4d:ab:29:7a:19:77:26:
                    9b:3a:ee:de:9b:06:3b:02:fd:84:53:55:09:c9:f1:
                    11:1c:e1:50:6f:ed:11:6e:dd:d4:0d:f3:1d:b9:4f:
                    ab:2e:20:75:2b:83:8d:cb:35:c3:11:cc:2f:54:d4:
                    0d:1a:f7:d7:41:ee:d0:b1:50:cb:52:6e:ca:24:ca:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C5:86:AD:C4:30:9A:16:4C:48:8D:39:3E:64:D0:F8:A1:D1:79:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:07:c0:39:d3:eb:01:57:7d:66:a8:e0:ff:eb:5f:4a:9c:
         96:fb:6c:50:db:ba:9b:89:23:7a:35:ae:e2:db:42:d5:fd:18:
         e4:ca:cb:17:13:90:6f:69:9b:1e:33:16:a1:06:14:e4:98:19:
         dd:89:0b:84:f5:26:17:06:2a:6a:87:ab:30:93:73:b9:76:1d:
         5a:10:11:85:bb:c7:c4:57:85:a6:f0:73:71:6e:b3:53:48:6a:
         e9:b7:54:ff:81:54:23:24:89:36:bb:8d:f2:56:cd:b6:06:83:
         1b:0a:a3:0d:dc:c7:5e:cb:e6:49:30:ff:b3:d5:9c:27:fc:8a:
         c4:f6:22:6e:f0:18:70:e7:c2:62:8c:80:c0:ce:da:12:6d:33:
         7b:be:3c:1f:79:e9:47:54:d9:25:4b:7d:8c:86:6e:74:d7:e4:
         9e:a3:0d:42:b7:2c:61:f0:59:9d:ee:0b:e6:62:8d:2b:da:55:
         f2:5d:4c:c2:dd:c5:5b:d0:50:47:83:86:50:9a:0e:d8:93:83:
         04:0c:97:17:69:d5:4e:7b:47:d8:8e:2c:af:c8:d5:ab:28:b6:
         a3:4b:e9:b8:92:71:cf:2b:26:6c:2f:2d:1f:4f:be:49:1e:69:
         bf:df:0a:b9:fc:92:8c:8d:4a:55:7e:6b:63:3b:5f:0e:74:46:
         7b:ea:58:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDwwByTEXkZgIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
NTBlOTJiNmQtZmRkOS00MzJjLWFiODEtYmNiMzE0MjU2YzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltGhOeKv0rNtyNM88sBkKaHRiPLZ0NCa5pyp
B4iyz/imMRA2uZ0h22U/lzM3BTcViFXOrVBVL7VuTDAXipOwvSDdczgjPDJoosgP
BujfdvRg7l6R8TvoaKmPH9CsZXA/VGigvKGGR1yAH4TxyK+nPO3EtdimYrfjjfOC
Qn3MF8EEl3uxnFyqVgarsH1A5YevG0XNJe0OLniW0NKEPxRpTxWAekGhic1YtclZ
/39ERzhkoeyXYVrwrJZ8ak2rKXoZdyabOu7emwY7Av2EU1UJyfERHOFQb+0Rbt3U
DfMduU+rLiB1K4ONyzXDEcwvVNQNGvfXQe7QsVDLUm7KJMoDcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnFhq3EMJoWTEiNOT5k0Pih0XlbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTE3ZDRkMTYtOGFlMC0z
NDE2LWI0ODgtMzdkMzM3ZTc0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtcB8A50+sBV31mqOD/619KnJb7bFDbupuJI3o1ruLbQtX9GOTKyxcT
kG9pmx4zFqEGFOSYGd2JC4T1JhcGKmqHqzCTc7l2HVoQEYW7x8RXhabwc3Fus1NI
aum3VP+BVCMkiTa7jfJWzbYGgxsKow3cx17L5kkw/7PVnCf8isT2Im7wGHDnwmKM
gMDO2hJtM3u+PB956UdU2SVLfYyGbnTX5J6jDUK3LGHwWZ3uC+ZijSvaVfJdTMLd
xVvQUEeDhlCaDtiTgwQMlxdp1U57R9iOLK/I1asotqNL6biScc8rJmwvLR9Pvkke
ab/fCrn8koyNSlV+a2M7Xw50RnvqWPg=
-----END CERTIFICATE-----
Generated at Wed May 13 05:00:15 2026 by rpki-client