Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa
File:                     3481342c-99ba-38c4-ae6f-c28269df698b.roa (raw, json)
Hash identifier:          C/A13WNopx45Y64VfXTG/quAtuShghrskEgAfDCw6Ck=
Subject key identifier:   55:71:42:B6:D8:83:3C:48:2D:1E:BC:42:FC:40:96:70:98:D0:09:42
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584EA7920355EE420A3C53718E30
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2615
IP address blocks:        147.1.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:03:55:ee:42:0a:3c:53:71:8e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4a750451-f810-43a1-8dd9-8a7b66da4362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:db:dc:fd:0d:82:32:05:22:1c:25:5d:70:
                    0d:dd:54:9f:94:0f:57:dd:b6:ca:c1:5f:6b:7a:69:
                    f6:08:56:43:cd:e7:ef:b3:05:a4:a2:09:80:c2:57:
                    a1:c2:b0:c0:e3:94:0c:69:80:8c:41:36:05:98:d8:
                    dc:63:20:4f:f6:b9:07:bf:d6:81:f0:11:49:4c:b7:
                    c5:7b:ff:31:79:24:d5:cd:d5:7a:5e:45:d9:43:2f:
                    63:c2:91:90:91:10:c3:94:91:55:42:a2:98:9f:a1:
                    fc:04:fe:44:95:d7:ba:17:dc:95:b7:56:b2:38:ac:
                    c9:09:78:a1:7d:c2:26:43:07:d7:47:73:32:bf:ca:
                    88:40:9e:16:4a:b2:b1:f6:78:37:d7:61:2c:23:fb:
                    e9:d5:65:43:6d:ed:44:39:a9:14:af:f1:f4:0d:10:
                    d1:22:07:4a:b2:9a:dd:f4:f8:75:86:76:34:c9:1e:
                    40:f0:58:a6:88:46:d5:68:e5:2e:57:86:cf:98:0c:
                    c1:bd:b0:69:44:04:ab:ab:a4:e7:85:1d:e3:02:c1:
                    34:10:df:88:26:24:35:79:ec:37:68:06:34:3a:3b:
                    cd:36:d3:22:16:13:51:d5:25:37:4c:e3:b9:15:4c:
                    03:65:ad:94:15:51:6a:b5:74:cd:bc:44:d5:ed:89:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:71:42:B6:D8:83:3C:48:2D:1E:BC:42:FC:40:96:70:98:D0:09:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:52:b6:42:a8:de:1b:96:e2:01:c2:7c:03:43:c1:b9:a8:c5:
         55:b2:50:46:c3:37:56:04:46:da:2c:e1:50:56:1f:2e:ec:46:
         cb:2c:36:95:2b:e0:44:7c:18:95:59:f5:79:ef:f1:93:30:f0:
         04:77:c2:61:8f:62:21:1a:d6:c4:0b:e3:52:81:e1:7a:93:6a:
         68:7a:5f:15:d7:57:b7:f2:30:6d:8e:d5:30:c7:82:a9:e7:9b:
         70:bd:6d:e9:ff:60:7a:5d:ad:50:6c:1b:cb:84:81:53:f8:f4:
         38:6c:44:df:b7:a3:5b:36:fd:2b:4c:53:5e:f9:56:13:f9:f4:
         de:c5:c5:f3:f9:a9:6d:4d:0f:52:d5:f1:8a:27:7a:c9:8f:b3:
         eb:c4:8e:73:70:46:ec:a9:cf:cf:74:45:1e:da:26:5e:53:6c:
         92:07:31:a3:f0:2a:04:58:be:4b:f0:37:cb:64:04:74:32:55:
         dc:5d:d0:81:ee:e0:79:6b:c8:d0:ed:39:a5:c5:2b:8c:7a:28:
         88:79:f1:83:f4:15:4d:2a:42:be:df:fa:9e:24:0b:9b:c6:ed:
         e0:1c:62:77:48:f5:9a:5e:d4:49:6b:74:36:ec:c3:9a:e6:de:
         0d:14:12:7f:e2:61:ce:b7:e3:ec:8a:ac:fa:bb:ef:07:0d:c2:
         0c:9f:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 15:39:05 2026 by rpki-client