Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4b30c105-62c0-379d-a807-bfe8de95ad8c.roa
File:                     4b30c105-62c0-379d-a807-bfe8de95ad8c.roa (raw, json)
Hash identifier:          1l25MJimk6NckooqQyfHf1hcM0kEadBZZTFYq3WuadE=
Subject key identifier:   96:42:99:8B:48:8C:19:9D:DB:D7:E2:9F:76:22:FA:2A:AA:59:CE:8B
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584F549D59D952F7DC691A1F2B40
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4b30c105-62c0-379d-a807-bfe8de95ad8c.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     2615
IP address blocks:        147.1.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:59:d9:52:f7:dc:69:1a:1f:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=7fc65f40-cb6a-4d7b-9a21-1ca9cd8d93a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:25:90:60:a9:92:99:f2:28:16:c7:a6:40:
                    f4:51:e6:f3:15:34:11:3c:c0:16:c7:74:84:30:21:
                    b2:8d:e2:e2:45:99:da:95:2f:e1:65:95:9c:51:20:
                    64:72:64:5e:dd:e7:78:da:16:7f:ba:fc:29:24:4d:
                    40:e6:49:00:84:76:be:bc:e5:94:1b:a3:fa:dc:02:
                    3a:86:ce:5e:d8:93:e8:b1:05:09:d0:dd:e0:68:77:
                    1c:e9:14:cd:a2:71:3c:65:ac:65:60:07:07:66:40:
                    a0:2e:51:0e:d0:f1:38:93:a2:b4:70:a8:1a:d9:a2:
                    a8:bd:aa:ba:1b:fb:d9:a0:5b:8a:8d:6c:be:2c:5a:
                    33:30:1a:12:03:6d:f6:ec:51:73:a4:32:54:80:ad:
                    54:cc:d1:76:17:2c:e6:1a:d8:a8:71:2b:22:8d:f2:
                    5b:62:72:0c:80:f6:79:26:97:bb:66:13:a2:c3:4e:
                    5c:51:13:1e:bd:70:77:f8:52:f7:16:2c:56:65:a8:
                    2d:65:7f:91:4f:ce:26:74:9b:c4:b4:f4:04:ac:53:
                    37:e4:0b:ed:f3:16:02:88:b4:ba:6b:f1:aa:46:08:
                    a8:82:df:17:6c:07:c0:64:e7:12:31:79:b2:66:f4:
                    3e:73:bf:07:bd:12:5c:e0:13:b7:a2:b7:19:b2:a3:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:99:8B:48:8C:19:9D:DB:D7:E2:9F:76:22:FA:2A:AA:59:CE:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4b30c105-62c0-379d-a807-bfe8de95ad8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:79:4c:fe:8f:7e:07:8d:46:e0:d1:f5:77:7b:73:dc:85:1c:
         ef:ff:7e:f6:41:f7:2f:94:61:b8:dc:a7:7d:11:69:2e:5c:bd:
         19:3c:d0:72:f8:5f:10:80:e0:a6:1e:c4:10:5b:be:b9:7d:b5:
         98:29:a6:83:8f:ea:b3:d8:a1:67:5b:be:cd:42:92:d0:40:9d:
         90:aa:e2:7b:7b:4a:6f:20:fb:69:4a:4d:54:84:a3:59:6d:07:
         74:8b:38:e9:e9:d3:30:8a:2a:24:0c:24:01:93:83:1c:71:52:
         94:1d:85:31:a4:14:7e:ca:e4:93:e8:31:42:d3:82:63:22:50:
         9b:53:49:3d:99:7a:57:26:57:dc:1b:4a:58:95:17:6f:2a:eb:
         70:ae:c5:a8:03:e5:13:76:56:5b:5c:91:3e:1c:3c:9a:03:26:
         cd:45:09:2d:38:f1:ba:1a:53:db:e2:dc:4b:22:8a:d8:7a:35:
         4b:4e:64:c7:79:a9:2f:50:10:58:2d:34:ab:b8:34:1d:f1:37:
         11:7c:b6:ad:dc:92:97:39:22:80:7f:0e:d9:72:e7:6c:e4:71:
         4d:f0:28:28:9a:bf:23:d8:85:ca:12:08:e3:cd:eb:a3:00:16:
         e9:d3:2f:6b:ed:01:19:e7:04:fe:32:ed:81:7f:2c:ec:bf:83:
         a4:56:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:26:20 2026 by rpki-client