Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa
File:                     2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa (raw, json)
Hash identifier:          abKg40+fQiCRK4/zIBWc1Iz7z9EkNuQo2xSJuCD2kDw=
Subject key identifier:   09:69:51:9C:21:87:EE:36:CE:A9:1F:43:A4:A6:A0:E9:CE:6E:CD:32
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584E428F1EAE9B18E372592B6680
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     2615
IP address blocks:        147.1.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:1e:ae:9b:18:e3:72:59:2b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=b18bec44-b635-413f-b4df-f4c5696d9d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:cd:c6:bc:87:17:52:70:a4:1e:0b:a3:df:
                    f4:1f:4c:d2:77:b9:85:04:0d:d8:76:46:5e:49:42:
                    8f:4e:a6:07:1a:6a:78:6a:30:1b:0a:7f:af:ed:8c:
                    d4:12:f5:b3:39:41:1d:47:fc:bb:cf:91:39:60:38:
                    55:62:1f:db:9d:a8:62:1d:90:ee:e6:42:0e:31:84:
                    e7:12:7e:7d:a9:3f:33:a7:c2:23:c2:c9:9f:b2:53:
                    86:39:47:bd:5c:ca:32:a1:87:28:db:dd:3a:7d:0f:
                    30:ac:cc:7b:c3:e5:c4:20:72:26:27:af:e6:bb:81:
                    f3:2d:5b:5c:3c:f2:90:bf:ee:7d:57:d7:70:c9:c4:
                    f5:55:38:9f:40:a7:b8:73:49:57:7a:e0:cf:d3:dc:
                    77:0c:94:68:b2:cd:9e:80:15:e4:c1:34:c8:3e:1b:
                    a4:c0:df:81:49:da:40:78:9c:14:17:0b:85:19:78:
                    1f:fb:d7:c1:35:28:7d:9c:fa:28:32:47:66:3f:a9:
                    a1:00:f8:04:f2:45:73:73:3a:60:25:ea:7c:2e:c7:
                    47:7d:8e:cd:da:4d:20:db:05:bc:94:74:55:70:da:
                    e4:47:f1:ed:fc:6a:fd:04:bc:a0:dc:a0:c9:d4:72:
                    7e:8d:7d:be:9c:cf:22:4d:e1:22:77:0d:db:e4:c8:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:69:51:9C:21:87:EE:36:CE:A9:1F:43:A4:A6:A0:E9:CE:6E:CD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:25:22:45:4d:d6:5b:03:fc:8e:28:61:e0:7d:67:a0:07:
         53:03:62:ee:38:13:87:ba:31:df:22:91:86:63:50:9e:e6:94:
         15:bd:50:20:a5:e8:f3:f5:a0:4d:d9:66:05:7d:27:18:09:11:
         5d:ad:6a:66:6c:65:e8:05:df:1a:d1:d2:f8:50:d8:af:1c:24:
         1c:1d:77:21:02:22:e0:fc:28:28:d3:e4:09:91:d8:40:83:ff:
         16:76:bd:98:b0:30:a7:21:6b:3e:27:56:86:04:4f:60:e0:58:
         e6:20:22:d1:f8:62:80:fe:f6:08:a9:92:8b:04:87:98:db:3b:
         67:b2:31:b3:fc:f8:c3:ad:79:3e:6f:ae:7a:dc:ba:99:08:bc:
         d1:0b:ba:32:34:be:b5:7f:3e:c5:d1:97:06:3a:7b:e5:50:98:
         62:16:07:6e:2a:51:39:dc:7e:3e:30:c2:28:9a:a5:b8:ea:d0:
         12:50:2b:7f:be:85:6b:18:f6:ee:51:c7:82:5d:93:9e:e3:a0:
         ab:e0:c2:d3:1c:2c:b1:d2:f3:88:65:57:81:75:ce:fd:b8:85:
         43:5a:9f:cd:72:39:1e:0d:5b:a2:80:bd:a8:c6:7b:23:db:7f:
         37:c1:fc:3a:63:b5:12:5e:7c:77:d4:b1:bb:92:43:5f:29:2f:
         42:ee:4f:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Cjx6umxjjclkrZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk
YjE4YmVjNDQtYjYzNS00MTNmLWI0ZGYtZjRjNTY5NmQ5ZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumPNxryHF1JwpB4Lo9/0H0zSd7mFBA3YdkZe
SUKPTqYHGmp4ajAbCn+v7YzUEvWzOUEdR/y7z5E5YDhVYh/bnahiHZDu5kIOMYTn
En59qT8zp8IjwsmfslOGOUe9XMoyoYco2906fQ8wrMx7w+XEIHImJ6/mu4HzLVtc
PPKQv+59V9dwycT1VTifQKe4c0lXeuDP09x3DJRoss2egBXkwTTIPhukwN+BSdpA
eJwUFwuFGXgf+9fBNSh9nPooMkdmP6mhAPgE8kVzczpgJep8LsdHfY7N2k0g2wW8
lHRVcNrkR/Ht/Gr9BLyg3KDJ1HJ+jX2+nM8iTeEidw3b5MjWUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlpUZwhh+42zqkfQ6SmoOnObs0yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmExMDAwY2ItM2MxZi0z
MmMwLThkNGUtYWQzYmRkZjM4YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkwE0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4DJSJFTdZbA/yOKGHgfWegB1MDYu44E4e6Md8ikYZjUJ7mlBW9UCCl
6PP1oE3ZZgV9JxgJEV2tamZsZegF3xrR0vhQ2K8cJBwddyECIuD8KCjT5AmR2ECD
/xZ2vZiwMKchaz4nVoYET2DgWOYgItH4YoD+9gipkosEh5jbO2eyMbP8+MOteT5v
rnrcupkIvNELujI0vrV/PsXRlwY6e+VQmGIWB24qUTncfj4wwiiapbjq0BJQK3++
hWsY9u5Rx4Jdk57joKvgwtMcLLHS84hlV4F1zv24hUNan81yOR4NW6KAvajGeyPb
fzfB/DpjtRJefHfUsbuSQ18pL0LuT6o=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:02:41 2026 by rpki-client