Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa
File:                     774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa (raw, json)
Hash identifier:          xZr/pbwvhCLmQ6TXuPeBqWcVzUBPOa3mbaoeez57jpo=
Subject key identifier:   68:23:65:A0:E1:5A:85:90:A6:AB:F2:5F:22:0F:85:01:60:12:27:60
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584B153C26127058F0562BAC9100
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     2615
IP address blocks:        147.1.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:26:12:70:58:f0:56:2b:ac:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=d4f32e6a-4059-43c3-a516-41af139e3939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:80:33:08:f5:e6:25:ff:86:63:53:56:d3:
                    6a:a2:4c:59:17:80:75:45:af:44:bf:a2:83:78:db:
                    19:1a:9e:e2:19:df:90:da:e4:89:a2:dc:98:04:46:
                    01:e9:1a:8e:75:cb:79:73:24:49:fe:b0:11:c7:ba:
                    e3:1e:36:e1:f8:20:45:28:10:2e:81:70:39:27:31:
                    58:6c:8c:c7:86:5f:bf:87:d1:1c:23:5b:38:63:12:
                    67:13:62:b5:b4:d8:4c:e7:6d:81:15:51:d5:57:de:
                    23:69:52:cf:c0:b4:08:5c:74:34:88:d2:b6:80:10:
                    ad:8e:0a:7f:06:36:22:ff:d3:f8:90:9c:bb:09:3b:
                    cb:2f:7a:94:b5:9b:94:6a:8d:bf:b1:d1:a5:ed:d8:
                    22:17:f2:27:d3:16:e9:0f:4c:82:4e:7d:62:bb:d1:
                    fc:ab:6e:42:6b:8d:ae:9d:5f:41:8d:f7:77:b7:28:
                    92:fa:df:96:cd:78:ef:b6:e3:f4:97:59:76:ed:23:
                    13:fc:90:0f:5f:43:34:c9:af:6e:2a:22:35:43:b0:
                    5a:5a:78:1d:a8:d6:ed:ae:9f:0d:84:58:4d:a2:5c:
                    81:08:1a:ed:79:24:3b:c9:77:19:74:a4:f0:c7:dc:
                    80:f3:fd:54:4d:ad:d2:b2:d7:10:01:53:36:49:fd:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:23:65:A0:E1:5A:85:90:A6:AB:F2:5F:22:0F:85:01:60:12:27:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:23:83:ad:5f:9b:5e:47:69:64:31:c4:84:c7:e7:5d:0a:79:
         21:14:7d:79:26:e6:23:73:e1:56:ed:9e:29:7a:04:e8:23:82:
         30:15:2d:26:88:1d:50:4e:e1:26:40:b4:ba:36:99:7e:e2:07:
         53:4a:db:69:08:c8:59:c1:2a:8f:b8:be:74:89:3c:c4:3a:cb:
         83:4d:cd:e9:d2:04:d1:93:21:03:35:44:97:ed:6b:76:f7:b9:
         4d:bb:3f:ed:00:07:ab:4a:76:6e:8a:1b:46:94:65:4f:7c:60:
         06:fc:07:e9:26:6f:53:3c:26:85:55:d9:22:6d:51:1a:c1:49:
         05:68:28:d3:f5:00:3b:3b:00:27:1d:eb:bc:17:c7:2d:73:55:
         22:21:a3:40:82:8c:e0:b1:42:96:34:9f:d4:48:e5:18:f8:54:
         3c:56:43:3c:8b:c7:23:e8:67:bd:84:b1:d9:c3:22:ac:81:cd:
         e0:f4:ce:6c:e6:c7:b5:5a:0e:cd:f2:c6:6a:45:05:50:cb:7e:
         0e:a8:22:9b:11:58:e8:28:c7:ee:ca:d6:5f:67:5a:87:62:71:
         58:b2:67:c4:f6:8f:ef:a6:9f:e7:bd:97:b6:2e:56:ed:c9:f5:
         65:fe:ba:e0:28:38:1e:a3:22:45:d7:f3:40:2a:f3:08:fd:2f:
         48:68:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:08:07 2025 by rpki-client