Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/7e5dcca5-e907-3b14-856c-3aa40aece24d.roa
File:                     7e5dcca5-e907-3b14-856c-3aa40aece24d.roa (raw, json)
Hash identifier:          xWcVUdLEUrW4y7SYYsXDJb+Qy4e6zA/4bjoDOx2kTNs=
Subject key identifier:   F4:EB:EC:08:92:40:28:EF:AF:D2:7A:83:50:2B:13:FD:D2:76:00:E9
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584D300A183A8AEAA42EFBBFBA40
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/7e5dcca5-e907-3b14-856c-3aa40aece24d.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     2615
IP address blocks:        147.1.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:18:3a:8a:ea:a4:2e:fb:bf:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=879a9d86-20e6-4619-b5ec-4ec85c288dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:e8:18:4a:01:a9:58:bd:4f:f0:29:92:07:
                    57:6e:e6:44:31:9a:f6:5c:64:d4:17:1d:9d:55:40:
                    ca:36:bd:1c:2e:11:68:36:a5:0e:be:04:e9:e0:5f:
                    bf:9e:df:01:99:d8:3a:48:91:a1:85:fc:15:c9:2b:
                    f2:58:ea:90:29:36:0d:c2:a6:87:6b:d7:f5:2c:71:
                    c0:64:78:13:39:5d:1e:ad:b3:94:3f:d5:62:93:fe:
                    8f:bf:57:63:27:1d:bd:51:0d:ac:05:ed:72:fa:f8:
                    16:ff:84:d0:08:22:5e:cb:4e:c2:1d:6f:85:00:a5:
                    33:04:e2:29:92:19:dc:d4:f3:3b:66:48:80:36:0c:
                    1c:d4:0f:0e:62:84:b6:16:7d:82:78:0f:65:a0:ad:
                    e8:4f:7f:46:04:a8:9d:df:ec:cb:09:e4:a2:da:48:
                    e6:ae:06:fd:00:90:f1:19:52:54:50:51:80:90:d1:
                    34:41:1d:83:98:9f:34:d5:f5:e1:06:a7:02:c8:a4:
                    43:d5:dd:d8:20:7c:ae:5e:2e:03:fb:c3:81:45:60:
                    cd:2d:27:45:7e:1c:ce:ad:f3:d6:31:16:38:bf:26:
                    2d:f7:d7:de:7a:03:d8:72:ff:f0:d5:b3:53:d5:fa:
                    f0:4a:41:b5:e5:78:2f:f9:b1:9a:79:45:1b:c7:58:
                    4e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EB:EC:08:92:40:28:EF:AF:D2:7A:83:50:2B:13:FD:D2:76:00:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/7e5dcca5-e907-3b14-856c-3aa40aece24d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:e1:9c:6c:ea:a9:df:93:b0:f8:3c:53:0c:40:1d:bc:fa:
         b2:0b:3e:d5:20:e3:8d:bd:c6:be:df:48:a7:c8:b8:4d:e3:98:
         7c:d6:f6:65:98:8d:98:72:cd:82:02:58:63:2a:73:5e:30:3c:
         25:b0:6c:a9:57:70:94:42:64:18:4f:ce:7d:e3:bf:95:d6:4d:
         7e:2e:86:2c:4f:e0:4b:c8:7a:ea:fe:63:cb:a1:32:f3:ea:b6:
         1e:d7:36:ff:ff:a1:38:74:97:21:7b:8f:35:2b:2b:cc:09:f4:
         b1:df:5d:89:b5:be:0c:4a:f1:3b:22:a8:89:e2:f4:e0:e9:57:
         fe:fd:f8:be:1f:b7:b7:0c:f3:33:5f:16:0e:f1:0b:b7:62:93:
         8f:dd:f9:d2:eb:c3:85:ff:74:db:c6:9f:4d:88:a0:92:5b:63:
         97:d2:ac:2d:c7:f8:3d:8f:11:f2:34:7f:ed:12:88:72:bb:b6:
         c2:82:13:dd:c8:59:f5:c7:c3:5c:eb:c6:a5:93:dc:8a:3d:d2:
         f2:ce:47:4e:21:17:82:48:94:6f:8c:23:28:f2:9e:31:53:0d:
         59:22:79:ae:a7:7f:57:59:71:64:22:83:02:19:cc:e7:74:4b:
         e6:53:bd:a5:95:65:1e:59:dc:58:6b:74:da:f2:97:34:72:fe:
         a1:27:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:49 2026 by rpki-client