Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e5b15ed6-db63-376b-ac1a-910bd0916314.roa
File:                     e5b15ed6-db63-376b-ac1a-910bd0916314.roa (raw, json)
Hash identifier:          SyfFxtJnrQvjNoRvix/j21mUemN0mdXda7KgQ7ja1FY=
Subject key identifier:   2E:4E:4F:61:F5:DE:C7:CF:71:3D:57:6A:FD:8D:25:EE:00:3B:A1:F9
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584F3A17DA724FC0009D5A170940
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e5b15ed6-db63-376b-ac1a-910bd0916314.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     2615
IP address blocks:        147.1.124.0/23 maxlen: 23
                          147.1.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:da:72:4f:c0:00:9d:5a:17:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=45a93649-f382-4052-a614-872a304ce593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:b3:41:7b:3b:ff:b7:c1:f2:93:3f:97:da:
                    e0:58:49:58:16:ec:b5:31:13:d5:33:97:5e:74:50:
                    b6:4e:0a:e6:a9:e8:78:23:8d:e1:4d:57:4c:f4:8d:
                    f2:f9:6c:ab:31:48:71:29:9c:dd:4d:10:a0:dc:6b:
                    55:92:ed:69:aa:2c:9b:83:11:3e:22:a4:9d:e3:18:
                    84:91:48:b9:54:a7:62:50:c6:14:e4:99:09:21:f0:
                    94:0e:f4:b2:bc:61:41:ba:a2:e5:5c:4f:2b:84:8c:
                    63:96:25:72:b2:44:55:03:4e:60:17:49:83:be:ce:
                    75:a1:86:37:ec:1a:74:a4:3f:f4:f5:55:80:e4:0e:
                    6e:1f:8b:94:1a:ea:69:33:09:18:85:b4:10:f5:0d:
                    b5:fb:f0:0d:49:aa:c5:d1:8a:f9:5a:4b:da:15:f1:
                    58:6b:a3:ef:82:34:20:5f:ae:93:1b:80:71:d6:81:
                    3d:9d:90:05:7e:82:77:18:ef:67:ba:16:78:64:8d:
                    cf:7b:55:c2:63:0e:6b:c3:07:c2:84:74:b9:92:bb:
                    fe:2b:63:64:05:6d:11:0b:c4:cb:a8:90:92:c3:e6:
                    a8:1f:51:09:fe:bb:80:f7:84:f9:43:a8:57:f7:5e:
                    94:76:5a:7c:7e:d6:a8:05:9d:9a:1c:c5:5e:a0:47:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:4F:61:F5:DE:C7:CF:71:3D:57:6A:FD:8D:25:EE:00:3B:A1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e5b15ed6-db63-376b-ac1a-910bd0916314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:b4:5d:e2:17:a6:d4:78:35:2f:fa:ea:14:92:75:78:9b:
         dd:91:83:98:0b:e3:e5:00:3a:1e:8c:29:62:5a:2c:db:94:24:
         db:fa:e7:31:ae:7e:a3:a0:4c:55:d3:fc:77:cc:ea:84:71:1b:
         ae:49:6d:a8:97:22:78:eb:42:68:69:c1:01:a5:c3:aa:d8:81:
         cc:4e:d3:d9:79:5b:aa:65:51:7b:73:9d:07:f1:fd:38:c4:c4:
         07:21:bf:a0:da:6e:f6:e0:82:b8:cf:09:30:b5:3e:74:72:10:
         54:0d:87:e8:45:dc:d8:e9:5e:31:78:a9:62:1b:a0:3a:70:97:
         1c:5f:d7:ed:c4:4c:9e:16:f7:bb:19:0a:fc:0a:ac:ef:8a:70:
         fb:29:b4:f4:5d:b5:08:82:39:6a:b8:a6:1a:54:e0:54:d7:54:
         94:d4:a4:de:98:58:a8:36:4c:3b:94:e7:4b:c2:e4:c7:b2:a7:
         61:9d:19:5d:1b:90:15:fd:f7:b8:31:d9:b5:b8:13:29:83:f3:
         1c:6c:da:3d:97:c2:9b:8d:73:5b:23:d9:a0:63:70:ee:1a:1f:
         bf:c8:81:fe:bf:1f:13:b6:cc:1e:0b:64:35:9c:b7:be:d6:31:
         1c:03:a3:a2:e9:2e:2e:24:17:3b:56:b9:f6:ee:6f:52:c1:53:
         bb:ce:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:10:39 2026 by rpki-client