Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa
File:                     e50b675a-f0df-35b7-bdd9-68271d2f787a.roa (raw, json)
Hash identifier:          z5xkh32gSj6VVvW4hpC5qufQYcc/aseQAuvobfhFGzU=
Subject key identifier:   70:CB:12:AC:95:9C:ED:28:E1:FE:9B:DA:4F:8B:65:7D:3B:56:CF:59
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584D300A36E42E0D0E25EE1FBC40
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     2615
IP address blocks:        147.1.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:36:e4:2e:0d:0e:25:ee:1f:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=bf88c2c8-f210-41cb-9162-da9ff6387e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:34:46:18:45:d3:63:e1:0f:71:81:06:bd:
                    b6:e5:9e:23:4e:c8:be:90:88:1f:0d:f0:1e:91:e5:
                    b8:dc:ea:66:98:20:79:10:3f:c2:85:f2:1d:7c:bc:
                    59:11:4c:d3:54:e9:33:da:06:84:0e:69:3b:0b:45:
                    36:94:1a:9e:ff:62:62:c0:dc:6c:d9:53:66:ca:c5:
                    da:36:92:e2:e6:ca:09:46:0f:de:a8:12:ff:f2:bb:
                    a0:f7:25:28:e5:0c:4f:db:93:fb:22:05:5a:e9:2b:
                    af:9f:44:4f:bc:0f:cc:ac:56:ba:41:20:1a:6b:79:
                    d5:ee:05:a3:02:0d:23:db:50:00:a8:b3:e5:0b:5e:
                    3b:c4:d5:b1:20:fe:c1:ff:89:6c:29:0d:bf:06:c4:
                    30:12:f0:5f:82:ff:6a:05:4b:bd:4e:0e:71:90:bb:
                    a7:27:70:8c:36:cc:23:d4:29:1c:b7:fb:89:81:65:
                    c3:14:73:08:52:22:78:9a:d3:7c:e7:6d:4d:4b:48:
                    59:c5:77:37:2c:db:4c:fb:67:6a:77:00:e5:6e:a4:
                    14:dc:5d:15:bf:16:34:5d:be:6a:df:9e:e8:2e:5e:
                    ab:3c:8f:d8:e1:02:1d:88:54:cc:a7:7e:48:58:05:
                    fe:c2:17:da:f6:8c:74:3f:6a:37:70:d5:e6:84:a9:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CB:12:AC:95:9C:ED:28:E1:FE:9B:DA:4F:8B:65:7D:3B:56:CF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:78:3e:dc:61:59:d8:ca:ed:4b:55:2d:73:c7:94:0f:ba:
         f1:d1:3a:23:0a:5d:d9:8b:18:5b:e2:0e:04:d6:f2:1b:08:eb:
         f2:a8:4e:a4:e2:ed:86:0c:bc:3a:87:41:f1:c3:a7:18:d9:f3:
         84:5e:5b:eb:b5:44:9d:f0:ec:06:bc:76:d7:54:8d:a7:84:05:
         56:f5:7c:fd:06:6c:b3:bd:4f:3b:a3:63:0f:b0:b3:05:cb:50:
         22:7e:d2:8b:8f:b6:ab:88:df:89:bd:96:63:8e:26:6e:fe:a5:
         a2:5d:8b:13:d4:fd:6e:3a:1a:70:43:bf:99:c2:2d:80:d8:af:
         b5:c5:f8:79:a8:94:6c:1c:4b:57:7b:e5:16:9b:c0:03:b6:5e:
         46:a7:b3:7c:9c:0c:ba:d7:c0:8f:e9:dd:1d:08:3a:17:aa:59:
         1d:55:95:c4:f1:7a:a1:4b:26:bf:95:68:cd:2e:33:de:99:cb:
         1b:d1:bf:4a:a5:c5:c2:5a:90:69:d4:8c:03:5d:05:12:c9:b9:
         8b:f7:d9:4a:0e:d9:8b:b6:03:8b:7f:ca:77:8d:ec:9c:60:74:
         b6:ef:fa:13:c4:3c:b1:da:81:6d:3f:1d:9c:a6:e2:51:bb:85:
         1d:26:d6:9e:a7:1b:8d:80:e1:ae:91:d1:ff:a3:bf:0a:08:d2:
         c1:4e:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:10 2026 by rpki-client