Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa
File:                     22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa (raw, json)
Hash identifier:          y13Wk+SMEnQW45Y8SThDdF/9FtPstkcyS3qpv8ESldc=
Subject key identifier:   5A:88:AB:AE:AC:1D:59:AB:D3:7F:B7:67:61:05:42:7E:FD:E3:D7:D5
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584B6E91FEE0F75CC67CD57C9BC0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     2615
IP address blocks:        147.1.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fe:e0:f7:5c:c6:7c:d5:7c:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=b08da26e-ae79-42b4-ad6e-f81e30a432d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:39:74:b8:03:d3:14:ec:51:11:96:f2:5d:
                    2e:34:42:52:64:89:5c:dc:cd:b8:ed:61:bf:49:ae:
                    f0:84:ff:1f:9b:30:b8:4d:ef:ba:f0:cb:cc:cd:f4:
                    e7:60:ae:4f:33:b8:b7:2a:51:85:4d:25:f0:49:04:
                    6d:30:db:26:a1:83:5f:d4:76:5a:33:94:80:13:dc:
                    a7:98:b8:dd:9d:ad:a9:e7:65:f0:ec:3f:05:87:3f:
                    96:b9:cf:f8:f4:88:c6:c2:0f:da:43:3c:0f:8f:8c:
                    6a:08:85:1a:12:ef:41:37:5d:10:c8:d1:d5:e9:95:
                    0d:28:62:ef:c4:60:5e:3c:e9:c2:57:8c:dc:e9:9d:
                    be:ae:e1:0c:29:c0:9c:05:b1:6a:fe:f6:65:e5:ae:
                    96:b9:f5:b7:f8:5e:a6:00:fc:10:99:4a:36:0f:4f:
                    5a:b0:ea:24:d3:ce:c4:fa:10:8b:8c:e4:96:e1:b3:
                    ee:9e:c5:64:05:8f:20:1d:99:39:e4:f9:33:18:0f:
                    b2:96:8b:f8:a3:08:56:26:89:0b:fc:30:bb:9e:bf:
                    de:14:4f:d7:03:dd:c0:09:56:8d:1e:3c:b4:e4:e5:
                    18:91:0d:81:fe:c7:2d:19:62:04:e9:0a:a3:fa:a2:
                    05:7a:dd:12:6a:c9:b2:a4:0e:15:5c:99:42:19:81:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:88:AB:AE:AC:1D:59:AB:D3:7F:B7:67:61:05:42:7E:FD:E3:D7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:49:db:a6:7e:24:76:51:91:70:25:c6:3e:09:d7:69:1b:22:
         b1:d3:95:c4:e5:e1:f9:fc:8f:29:fb:58:8e:91:bb:6c:b5:bc:
         b8:2e:c3:77:d8:ad:79:44:b3:e3:3b:63:24:d4:0a:d3:00:3e:
         28:3e:81:6c:c7:79:ca:46:f9:cb:82:75:6d:07:8c:6b:f5:97:
         3b:2f:41:95:b3:0d:e1:62:0c:38:4d:76:02:16:ff:3c:48:61:
         b2:31:f4:65:a9:52:c3:1d:37:f3:76:94:f3:4e:be:b8:c2:9e:
         6e:30:bb:34:e6:41:77:1e:a2:88:05:b9:ce:e5:99:da:6c:5e:
         e2:bb:b9:6b:e4:ef:39:92:6b:7b:43:82:2f:d0:75:67:71:3f:
         7e:b4:2c:c3:d6:e6:be:77:4c:6f:32:b6:d7:42:05:55:7b:56:
         ae:9d:a7:b6:86:34:6a:db:8d:f1:be:ca:3e:2a:61:24:ec:1d:
         83:d5:f3:b4:fd:d7:ad:61:74:3c:23:92:af:0e:2b:27:75:6f:
         4f:32:2a:32:66:4f:1d:76:a8:98:23:84:be:f4:c6:a1:fb:31:
         9b:79:d7:3b:e4:0e:8d:99:02:63:a1:c5:02:31:8d:17:1f:11:
         09:bf:28:e4:ad:62:7c:3f:7d:c5:02:c7:5f:a9:e1:fb:78:be:
         36:16:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:06:51 2025 by rpki-client