Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa
File:                     596fd63d-5bef-3d40-8843-dbfa4121de60.roa (raw, json)
Hash identifier:          2KvorrAPNmEZXPjmwoN4TWbcQ3Znx38YAhL0eRlUQQg=
Subject key identifier:   57:D7:F0:84:64:69:51:5C:1B:56:AB:FE:0E:53:B2:56:42:03:3B:3D
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584B6E91FF1D258F437301AD4EC0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     2615
IP address blocks:        147.1.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:ff:1d:25:8f:43:73:01:ad:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=e3ea5b62-14c7-4cee-bce5-fc157f187a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:92:52:83:ad:09:27:89:11:bc:83:6b:72:
                    35:74:38:fc:7f:0a:97:56:43:e4:65:7b:3c:79:26:
                    86:10:c0:a4:01:11:3d:25:09:b8:5b:fd:e0:0f:18:
                    5f:f1:92:49:c7:7f:ad:77:f9:87:41:90:2d:6a:8c:
                    73:e5:00:e9:5f:c9:2e:7a:f1:b8:d2:b1:1d:59:4f:
                    a1:99:04:be:63:2e:6e:94:a9:91:58:4d:80:09:1c:
                    dd:ea:0c:31:69:45:14:50:9a:94:21:af:7b:9b:f4:
                    b8:9b:d8:4b:2d:0e:20:aa:d7:b6:d3:08:b1:1d:a5:
                    69:07:a3:26:a5:0c:13:06:0d:ec:79:4d:5f:16:1a:
                    59:ee:cc:a6:d1:da:95:cb:e0:fa:7e:a9:20:50:8d:
                    e1:37:ee:99:07:f4:ae:40:64:b6:fd:4c:37:95:06:
                    27:2e:90:20:89:80:f9:d7:5d:a3:7e:e5:bc:a1:51:
                    b2:de:76:94:ab:f3:ea:c0:d9:c0:bb:c9:5b:f0:ec:
                    4a:38:c3:db:fc:b8:73:c2:e3:39:04:5f:a0:de:11:
                    c0:be:e5:e7:70:7a:dc:60:24:07:c8:13:0a:30:9d:
                    78:d1:21:1e:ba:db:47:89:52:10:00:a2:05:45:45:
                    b2:69:e5:ea:56:fa:32:17:d1:7b:2c:ee:75:9e:d4:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D7:F0:84:64:69:51:5C:1B:56:AB:FE:0E:53:B2:56:42:03:3B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:f5:fa:d6:87:9b:b6:3f:b6:db:40:bc:41:02:f2:24:b5:
         37:55:d3:95:2f:77:f4:6f:50:39:48:27:e6:d9:c4:06:d4:9e:
         99:c5:57:a9:58:01:c0:29:4b:6b:ba:37:56:11:77:3c:f1:c4:
         d4:dd:94:f3:8c:7c:91:1c:ab:92:e1:15:bb:41:96:28:7a:fb:
         06:9e:ad:31:07:94:24:06:ad:4f:3b:b1:66:30:df:89:95:13:
         85:06:cd:9d:62:c9:91:2d:4d:d3:65:0e:1a:54:a9:fa:0b:bc:
         40:c2:a7:5c:61:51:38:c5:07:d8:d0:9b:e9:5b:fb:6f:90:23:
         0c:83:e0:ed:56:c9:f1:83:79:83:7a:71:78:ec:65:02:20:08:
         09:65:81:a5:17:64:a4:bf:4b:f4:5e:dd:14:52:13:57:ea:e8:
         cf:48:59:43:9c:25:ac:86:31:85:d1:9e:06:81:e0:53:a0:b7:
         e6:7b:e3:08:b0:38:df:24:f5:0d:0e:2e:b3:39:a4:c0:49:f6:
         9c:b4:3e:5c:18:78:f9:06:67:fa:38:2e:a1:4d:2d:40:51:5a:
         15:52:b3:13:ae:27:5c:2d:07:3d:bf:a4:2e:9d:ca:7a:b9:9a:
         75:fa:91:f1:99:18:99:81:01:ad:60:91:31:de:52:9c:4a:15:
         a1:79:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:11:32 2025 by rpki-client