Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/5781ffeb-465f-33d5-b6e7-a336b91e2157.roa
File:                     5781ffeb-465f-33d5-b6e7-a336b91e2157.roa (raw, json)
Hash identifier:          28srAAskGkU4vhPMSYxS1Dqu4/ANtB8AdHriVLpw+50=
Subject key identifier:   61:72:09:67:C7:F2:99:3A:BD:8A:40:1C:18:05:26:BA:CF:1B:7D:97
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584A3480155D7663FB458E87ADC0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/5781ffeb-465f-33d5-b6e7-a336b91e2157.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     2615
IP address blocks:        147.1.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:15:5d:76:63:fb:45:8e:87:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=25626d5e-9058-433b-8063-c5c4afe28a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:99:4e:30:78:0c:59:56:ab:04:c5:12:5e:
                    6e:e0:20:60:04:62:87:70:c1:0d:e7:83:9b:09:e9:
                    ad:7e:ab:40:d9:85:59:e3:c9:21:a3:07:d1:6d:25:
                    37:27:66:47:86:10:57:0a:36:58:dd:e0:2f:a0:01:
                    bb:70:0f:fc:48:19:40:cf:3e:62:30:64:1e:fd:36:
                    5a:b6:9a:12:a9:99:bd:5b:54:e7:ba:7d:65:a6:15:
                    1d:b5:c4:a9:13:15:68:53:cc:21:06:d0:91:e6:29:
                    4d:2b:45:36:f8:23:38:3e:07:54:22:6d:c6:29:ed:
                    b4:03:69:b8:cd:d7:97:a5:56:1c:77:8f:0e:23:b0:
                    09:da:b2:ee:94:16:00:d0:bb:b0:82:db:69:cc:cb:
                    cc:a5:51:b6:f5:85:e5:74:31:d8:1f:44:85:d7:30:
                    3b:b6:06:02:c5:cc:72:e6:f8:30:d5:d8:0a:33:32:
                    3a:55:2b:56:ee:32:66:15:f6:54:3c:59:27:be:68:
                    c3:45:5b:d2:a3:ab:e8:76:21:c0:8c:a4:e3:14:b8:
                    a3:99:4c:dc:0b:e4:c1:d2:1e:b4:16:48:b6:b1:ab:
                    df:39:85:42:2e:08:d0:73:c3:fe:47:1a:46:36:2a:
                    74:4e:69:6e:33:77:fb:28:bc:2b:14:77:d0:7b:01:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:72:09:67:C7:F2:99:3A:BD:8A:40:1C:18:05:26:BA:CF:1B:7D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/5781ffeb-465f-33d5-b6e7-a336b91e2157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:9a:15:19:8b:3e:db:72:e8:9f:5a:d2:ab:ff:30:1e:94:
         60:09:45:77:c4:05:6a:15:ae:15:f7:f0:e7:30:20:ca:83:a4:
         d9:e8:a6:85:4a:ef:45:83:b4:bc:3c:6c:19:05:b6:b5:81:95:
         2f:02:cb:22:d7:3c:3c:e1:96:6e:54:db:cc:9c:ae:49:5e:81:
         33:2f:d4:73:b4:1a:d2:d5:c1:ee:68:24:5b:8b:38:2d:0b:25:
         d8:31:c4:67:44:f0:d9:44:ec:e0:1d:0c:f8:b5:06:53:f3:ea:
         13:59:74:d6:cd:fb:92:5c:a0:f8:13:bd:fb:79:dd:3c:50:58:
         c4:bf:9e:48:24:f1:af:45:4a:68:df:2d:43:ba:87:0c:9f:0c:
         3f:c6:5e:02:5f:aa:fe:3f:42:68:aa:62:fa:62:a9:2f:85:5b:
         60:be:5c:ba:0d:64:26:fe:12:f2:1d:34:ad:d5:2e:4b:f5:e0:
         23:04:1c:4f:df:56:e8:8c:99:c5:9e:46:3a:61:c1:ed:53:7f:
         29:db:23:9d:79:75:66:0a:ba:9f:85:47:54:67:a2:bc:be:59:
         63:17:86:c3:ec:95:6c:82:9f:ec:ce:bb:04:42:50:1d:a2:de:
         f5:03:a5:37:fc:ad:f8:ad:14:d8:b7:83:74:a9:36:98:9d:53:
         84:8a:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:42:10 2025 by rpki-client