Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa
File:                     0cb111af-a543-3309-ae6c-921150fde1ac.roa (raw, json)
Hash identifier:          T3VwXDBpNqGP7AfkaOxEmZtHx8K7Iv0s6FuQVDX81II=
Subject key identifier:   74:C2:7A:50:11:B3:DA:63:EA:FF:82:07:07:CD:84:40:26:73:1D:F8
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F4328584DDA55CDA9FB1ED7A6FEEA1260
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        216.147.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:cd:a9:fb:1e:d7:a6:fe:ea:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=ecba6e95-c7bc-4d0d-a0de-61d4bf307b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4d:e0:af:9e:49:42:38:be:e8:2c:12:66:55:
                    8a:3b:61:21:63:01:f5:89:df:c0:f1:e2:6f:53:cc:
                    f1:1f:bf:b6:ca:a0:d3:bb:b5:32:1c:df:42:38:82:
                    3c:82:5d:3a:08:71:7f:8b:9a:fe:f5:66:ca:be:1a:
                    3d:17:29:57:93:d7:b3:0b:f8:4d:74:c6:9d:35:77:
                    d0:93:64:db:78:9a:a0:c7:3a:34:c9:7a:67:59:94:
                    b2:e4:d5:bb:97:3c:19:06:a5:40:5c:cd:45:e1:5b:
                    b3:30:23:87:8b:d4:d7:4e:5e:ee:da:51:df:b9:b5:
                    ec:0a:be:d9:7d:d1:30:a3:d0:00:29:e1:27:f0:d0:
                    1c:b5:77:f2:f0:c9:d2:63:ef:40:c2:37:84:54:35:
                    9b:76:46:e1:3b:1a:c5:63:3b:09:48:3e:ce:41:ec:
                    85:0c:45:7e:00:d8:93:92:59:95:06:e8:69:39:06:
                    c7:46:86:00:09:eb:f9:1c:b7:0b:e8:21:b2:2d:11:
                    12:82:78:3e:e5:8b:07:4f:14:c2:e8:03:64:d8:ca:
                    f3:fa:99:f3:65:fb:af:ad:b4:28:39:d0:0e:61:ce:
                    fa:4c:11:1b:f7:c7:9d:f3:a8:2e:ce:c2:30:db:f3:
                    fb:aa:b5:05:bd:c5:31:e9:b0:3c:dc:fe:07:42:83:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C2:7A:50:11:B3:DA:63:EA:FF:82:07:07:CD:84:40:26:73:1D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:1d:68:5a:b5:33:04:04:ef:cd:8e:c7:00:8f:6b:d3:7b:
         ba:64:a8:58:fb:60:4b:ed:18:66:8c:ca:63:b5:b9:35:db:4d:
         6c:81:de:67:31:d9:d2:0a:79:d3:4d:7f:6a:9e:8d:5a:6e:4c:
         47:5c:4b:c2:c9:a6:e8:fc:4c:f5:27:45:db:a1:f5:79:c1:c0:
         f8:86:50:77:ad:c8:d2:53:ff:22:ef:80:bd:d1:f3:32:61:b3:
         42:74:ed:16:87:7e:a1:4c:01:ea:12:3a:0f:95:3e:7b:95:68:
         6a:cf:c6:8b:53:b2:61:e0:dc:81:ce:6a:c1:77:96:38:1e:43:
         24:2f:2c:e4:3f:f4:db:66:86:84:4b:2e:b9:c2:9a:de:b9:4e:
         2e:da:b1:59:b9:92:48:eb:39:10:9d:7c:cb:4a:d8:c8:96:88:
         f8:0a:3c:a9:11:66:cc:b5:00:3a:ce:e0:49:97:49:63:75:53:
         17:7f:37:91:a5:01:90:c8:1e:d5:21:fa:6c:1f:8d:13:2c:64:
         6f:de:f2:a0:ff:e8:48:49:fa:76:f3:99:41:c9:7e:fb:67:1f:
         2b:5f:50:ce:1d:dd:4a:9a:81:2d:b9:ef:78:d3:e6:f9:27:4e:
         7b:54:c7:40:51:26:8f:1e:09:aa:8a:8b:e9:25:ab:7a:aa:19:
         25:70:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:21:52 2026 by rpki-client