Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa
File:                     517d4d16-8ae0-3416-b488-37d337e7455b.roa (raw, json)
Hash identifier:          kxmexcn1qfJTNZDR+XzfO5zMn4xjdiOKPzVfGOILRhc=
Subject key identifier:   30:D3:5D:09:25:1C:A1:9C:3A:8F:29:AE:41:93:DC:4B:E8:B3:E5:B1
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584E97B50EB76502DF1E61708180
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     2615
IP address blocks:        147.1.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0e:b7:65:02:df:1e:61:70:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=bb0a766a-e846-4208-bc2a-95a47f353c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c3:cc:fc:3b:22:8a:df:2b:60:0c:28:66:56:
                    0d:14:69:2b:9f:a7:31:84:81:a5:53:e0:0d:57:43:
                    40:ad:ff:49:86:1f:f6:5f:56:91:93:22:42:21:c7:
                    28:9b:e9:66:f3:15:86:5b:88:68:39:44:f4:79:59:
                    88:cd:88:8b:a0:d4:52:c3:a8:1e:37:f3:6d:33:67:
                    a4:16:8e:37:59:aa:85:c2:7a:6f:ac:6a:01:b2:bc:
                    d3:03:45:5e:3e:b2:00:b5:44:8a:bd:08:8e:2b:bb:
                    d2:3e:46:02:bb:90:5a:0d:38:ae:03:e8:97:ba:45:
                    2a:fa:91:d1:87:e8:a4:b4:b5:5e:8c:d6:f2:67:58:
                    38:62:19:2c:5e:f2:d4:33:8f:50:64:98:dd:0a:9c:
                    ab:df:f0:9e:23:25:6b:a8:f6:3d:65:f9:34:36:18:
                    90:cb:4d:1d:1a:10:79:f2:ed:e5:36:6d:11:b5:38:
                    b6:35:33:f8:d5:13:d4:f9:45:66:cb:ea:e7:d6:34:
                    5a:80:c7:c5:0b:69:19:b1:d3:ca:fc:b1:13:b9:1f:
                    12:f6:0c:4a:c6:d7:04:52:3b:33:b7:c6:ff:54:59:
                    73:a0:f6:2a:95:eb:25:b1:be:6e:a6:33:62:8a:57:
                    24:10:55:a1:46:94:40:ed:f4:73:28:90:14:77:03:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D3:5D:09:25:1C:A1:9C:3A:8F:29:AE:41:93:DC:4B:E8:B3:E5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:92:c1:c7:73:65:11:13:2d:0d:5c:c6:42:f9:d4:6c:8c:1a:
         e3:e7:ba:02:03:e3:b8:3a:6c:e3:7a:af:3d:fd:a5:07:ab:7d:
         66:91:8d:b7:42:32:2e:65:7d:f2:ee:da:36:12:cb:49:35:15:
         e6:2c:ca:a7:ce:8b:27:9a:c0:88:09:fb:fe:de:d7:f2:0e:9f:
         87:6a:86:46:31:46:c4:98:30:eb:51:26:bf:1d:97:e1:9b:92:
         87:6e:6d:f6:b8:00:23:1e:9d:27:90:b2:01:c7:0e:3b:ed:62:
         94:f0:04:d3:01:02:35:e3:22:41:c9:a1:c5:6b:04:61:8a:1d:
         30:ce:ee:63:d9:8b:e2:c8:0d:18:81:e7:82:e3:03:30:89:fd:
         63:ee:15:a4:f9:44:43:f3:80:d4:f5:96:df:c7:8f:57:33:7a:
         87:f1:22:c7:5e:ac:8d:60:80:63:d2:f5:41:80:9b:e1:0c:7d:
         e4:13:8c:87:14:dc:19:8d:8d:ed:04:f7:71:fb:75:62:98:8e:
         18:de:f0:04:da:ab:2b:68:02:62:50:34:00:6d:20:e8:e3:5e:
         7b:3c:0a:27:08:8a:00:9b:a2:5e:37:82:56:6f:8d:ec:be:51:
         b1:7e:32:a0:6d:0e:d7:c9:6d:72:47:cd:7e:2c:65:d7:8a:0f:
         d5:45:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:32 2026 by rpki-client