Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa
File:                     3481342c-99ba-38c4-ae6f-c28269df698b.roa (raw, json)
Hash identifier:          hKD6KUeoXORf1GLqFunUWir5mQ7sIumNFDldPCUqrdo=
Subject key identifier:   9C:24:20:4C:DE:ED:BB:8F:F2:70:E5:EB:F5:67:C3:9D:AC:F8:4B:8A
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584B477C9C8B27084E276E11F260
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     2615
IP address blocks:        147.1.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:9c:8b:27:08:4e:27:6e:11:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=47f16656-4df1-41a3-a69b-0852eb14e3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:f1:04:a7:27:75:ae:7c:e8:07:ec:16:16:
                    49:93:f5:07:6c:e9:18:f7:29:d8:8a:ea:39:d3:bc:
                    c9:b9:46:59:25:c6:2c:2e:98:f0:66:7e:fe:1b:81:
                    b2:9a:8c:57:f8:6c:5f:65:67:01:c1:f8:67:2f:02:
                    df:cd:89:ec:f3:88:bf:21:1d:ba:ff:e3:9a:79:f7:
                    81:2c:28:10:b5:38:ca:b0:ae:46:d6:e1:b0:66:d7:
                    18:5d:48:bb:8a:60:b2:ee:06:4e:4c:e5:0a:27:20:
                    17:71:d8:d7:21:28:16:76:94:f6:20:76:50:27:ab:
                    e0:3b:44:72:23:45:0b:8d:8a:82:c8:c2:19:e3:a7:
                    75:2b:48:e6:84:74:5f:f9:06:ce:32:f8:d2:44:13:
                    73:46:7d:f3:6f:c1:74:9e:f8:a1:5e:a3:ff:f8:97:
                    12:77:0e:5c:c4:68:89:af:c1:8b:59:c9:fd:45:13:
                    fb:b0:b8:9d:42:47:78:ff:ae:e7:2b:94:c1:2f:34:
                    a1:c1:41:70:71:39:f8:df:f3:6a:1f:c4:3f:6c:5a:
                    bb:80:5b:a5:08:76:b9:6d:a8:3b:74:80:46:9b:ff:
                    6e:63:41:d6:80:de:f5:ca:b6:ae:ed:7a:46:bc:f6:
                    aa:b7:a2:83:d2:7a:a5:36:a0:03:ba:e5:e7:51:b7:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:20:4C:DE:ED:BB:8F:F2:70:E5:EB:F5:67:C3:9D:AC:F8:4B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b9:da:be:d6:86:7c:37:0d:9c:bc:47:4b:49:90:61:28:95:
         3a:79:0d:35:c5:b9:11:56:de:82:27:58:cb:12:d7:a0:de:aa:
         99:88:70:d6:8a:74:4a:bc:5f:94:df:d5:99:24:99:a3:5b:3f:
         23:7b:d5:e2:0c:00:d0:70:ec:cd:63:bd:12:e1:8a:ae:ba:34:
         3d:06:00:ed:65:09:3f:ca:26:3a:0b:37:8c:a5:05:da:d1:d7:
         ee:57:22:ff:70:d9:e2:fd:4d:0b:72:2b:3b:ec:80:a1:7a:4a:
         f6:d3:0c:7c:1c:d2:a6:bd:a6:65:9d:06:92:11:a0:ac:b3:49:
         aa:2b:2e:84:ec:56:b7:11:75:99:08:46:05:8e:80:13:ff:41:
         86:31:6e:13:81:3f:85:8f:99:3c:b4:c2:59:0a:7c:32:c0:d0:
         29:06:1b:e9:d4:bb:6b:47:05:b1:26:62:08:16:65:14:d1:ab:
         46:4a:dc:9f:ce:70:d8:3f:de:65:9f:fa:92:1b:d2:dd:9d:26:
         10:4e:25:f2:0b:62:35:0b:3a:6c:28:1d:31:0a:be:c1:a3:46:
         83:ff:1c:e2:cf:39:d4:0e:ad:5f:a9:c2:67:2c:75:03:e8:fd:
         45:e7:91:52:91:82:9d:07:35:e0:a2:16:b5:d7:3b:4c:f9:6e:
         ff:51:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:12:58 2025 by rpki-client