Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
File:                     2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json)
Hash identifier:          r7o2GvqTYvj2elIO3MDvqlLHVHvMH5emtgGJnmrtueU=
Subject key identifier:   D4:34:09:12:0A:84:90:1A:E5:CD:12:EB:BB:92:B4:CB:77:8A:11:26
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584E2D9EFF13ED73458CF021AA80
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     2615
IP address blocks:        147.1.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9e:ff:13:ed:73:45:8c:f0:21:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=b3f41a16-7767-40bc-9b88-f04bb340aa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:00:77:e8:e1:9c:b6:92:82:2a:96:e8:d7:9a:
                    0c:32:db:aa:1f:2c:30:78:2f:cf:5a:45:3f:b0:ac:
                    aa:6e:d5:b3:0c:5f:c1:97:1f:0f:5e:c7:10:ad:a9:
                    9f:83:72:18:cf:4b:3a:97:20:a2:35:bc:48:48:a5:
                    52:05:88:16:31:d2:f2:cd:81:d1:71:c4:b9:fe:88:
                    f5:2a:6e:8c:de:bd:bd:eb:70:db:58:ea:d2:87:4d:
                    ad:01:66:09:38:f7:29:ec:5d:b2:bb:b7:04:f9:bd:
                    4c:4a:19:a2:4e:99:39:e1:af:28:0e:27:98:28:fb:
                    8e:84:e3:a4:aa:93:f4:cd:07:b7:11:3a:14:99:22:
                    e3:61:eb:63:88:fc:e0:da:41:20:2e:89:01:12:2a:
                    0e:20:df:e3:b1:23:6f:cb:ec:61:87:07:08:a1:6e:
                    72:20:69:49:db:1e:15:23:83:43:10:84:93:9f:4a:
                    d7:18:e4:29:6b:22:f7:89:1d:b7:ae:f1:88:5b:44:
                    3c:82:e9:77:a8:60:62:b6:ce:18:17:23:60:30:9f:
                    01:61:c2:50:37:22:a5:3a:99:eb:b2:81:fe:6f:44:
                    a8:53:99:61:a6:db:06:0b:7c:d7:73:13:bd:49:a6:
                    a8:53:71:4f:25:f6:00:78:b3:c3:c1:3d:29:74:83:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:34:09:12:0A:84:90:1A:E5:CD:12:EB:BB:92:B4:CB:77:8A:11:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0b:88:e9:27:14:a8:01:66:04:6b:71:14:dd:f9:b5:8d:18:
         f0:d6:60:f4:dc:f5:6b:55:31:83:d3:a7:aa:46:ea:8e:a0:d7:
         db:99:c0:d4:db:d3:f2:7c:05:3a:bf:24:00:06:f4:4e:64:95:
         75:0b:a5:d3:fa:00:57:6f:f3:f8:31:ee:37:89:9a:13:ff:03:
         fe:b1:36:a3:73:12:d7:55:42:12:b1:69:76:38:6c:16:76:9a:
         84:62:6b:63:70:d1:85:66:15:db:91:01:d9:85:d5:ed:1e:8b:
         6e:52:84:bb:19:f5:f6:c4:70:e6:3b:4b:08:1e:0f:d7:a0:76:
         23:b2:58:14:87:7a:d6:2f:ae:06:54:a3:48:c8:34:42:ee:ce:
         d2:ca:50:48:5c:e8:68:70:74:17:d6:7e:1e:21:61:77:f4:86:
         92:35:3b:b5:68:b1:fc:5d:c4:02:f5:0e:4a:ba:d9:1d:df:43:
         5e:c8:09:78:73:42:5d:47:bf:76:3e:94:d3:5a:08:2e:40:a3:
         60:16:f8:cf:cd:2f:40:ad:57:d0:2c:7b:c4:b4:10:32:85:bc:
         3e:1f:9c:86:10:eb:13:9b:f0:13:49:f4:22:3c:39:f3:7c:a7:
         93:90:93:b4:72:aa:25:44:e4:46:ca:a9:13:f9:e6:f1:b9:1f:
         74:87:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:06:01 2026 by rpki-client