Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/664029c9-3c18-35fc-9cf1-cf7c8240ec39.roa
File:                     664029c9-3c18-35fc-9cf1-cf7c8240ec39.roa (raw, json)
Hash identifier:          If+23WOb+xN3Z5sHkKAsZh+mTEti88z+SZnE1ZDrGEU=
Subject key identifier:   9B:FE:38:ED:0B:9A:99:B8:CB:87:71:49:E8:ED:5C:80:01:BB:52:B2
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584EB2B1A797BB44227CCB5AF600
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/664029c9-3c18-35fc-9cf1-cf7c8240ec39.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     2615
IP address blocks:        147.1.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a7:97:bb:44:22:7c:cb:5a:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=ee2675f5-341b-4d39-84b1-420bd1b1c280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:89:ad:08:9f:4d:3a:dd:60:c7:7d:78:e3:
                    83:8e:2e:27:f3:5a:20:4f:9a:45:36:3c:40:75:a9:
                    e6:f0:76:fd:33:70:7d:bb:a8:a3:95:d0:20:f4:a0:
                    b0:0d:fa:c7:14:1a:c2:24:51:bb:ce:00:97:91:c3:
                    22:74:bc:d1:37:89:a1:54:e4:d9:41:73:1c:74:b5:
                    2d:f6:3d:07:58:ca:a6:a3:35:d3:5a:f4:ee:50:4c:
                    c3:24:8d:3a:a2:57:71:f5:bc:bd:76:f0:3d:e8:f4:
                    c6:93:62:f8:87:78:00:f9:3f:31:69:0e:08:4f:46:
                    c7:ff:44:0e:7f:70:71:2f:07:14:b5:f6:df:c7:4b:
                    5e:ae:3e:9e:35:a3:25:c5:0e:0b:f5:f5:33:4b:70:
                    75:7f:46:7d:ba:45:ea:e2:73:35:85:99:42:39:02:
                    9d:f5:17:14:47:cd:99:d6:f3:11:dc:17:47:f7:31:
                    2a:97:6d:1b:1c:5c:c4:33:17:f8:d8:c8:78:7f:47:
                    9e:e0:85:78:2f:78:4f:f7:6f:56:ed:84:a6:4f:c0:
                    33:19:55:10:b6:3d:2a:89:e8:d0:70:be:ed:f4:d9:
                    bb:3f:5c:7f:fb:8f:16:f0:b0:d7:cc:27:35:68:57:
                    05:8b:5a:df:5f:ce:5a:0e:db:ba:06:2e:eb:35:d3:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FE:38:ED:0B:9A:99:B8:CB:87:71:49:E8:ED:5C:80:01:BB:52:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/664029c9-3c18-35fc-9cf1-cf7c8240ec39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:45:55:2a:55:7e:4a:78:93:0a:46:5f:c8:3a:54:7f:4d:79:
         4e:36:81:e5:8f:f2:69:7f:7a:b0:61:20:a6:c8:5e:1b:0c:7f:
         02:16:fc:d2:3c:03:71:07:4d:04:da:64:81:eb:98:53:13:4f:
         ab:19:5b:11:d2:d9:86:0d:1d:d5:bf:66:bf:d9:3a:18:f3:10:
         78:54:ba:d0:ba:dd:a4:81:1f:e7:b0:91:d7:89:22:97:87:d9:
         a2:f4:81:dc:8b:74:08:18:c2:c9:4b:fe:cc:e4:e9:58:6d:ae:
         dd:ee:d2:ac:92:00:81:1e:20:30:fc:df:2f:73:a4:d0:cb:5b:
         ed:99:d0:88:e8:8d:a9:db:2c:4b:46:ed:20:18:20:24:26:f2:
         e6:b3:86:95:c9:9b:7b:f5:2e:8e:9e:e6:52:7f:ef:ce:ce:06:
         cc:91:ea:ef:31:e8:26:91:15:35:10:48:f9:3b:72:51:69:e0:
         d0:7f:90:a8:12:87:b6:ac:2e:df:8d:36:ae:82:c0:97:45:21:
         c3:62:6b:59:29:6b:d8:71:04:e9:8d:c4:1a:e3:8f:bf:e2:db:
         b5:09:cd:a3:24:75:ae:b6:42:fc:0d:38:f3:7a:10:e5:bb:78:
         9b:14:76:f8:a0:50:e7:dc:ec:5c:a9:12:4e:87:d4:33:73:fc:
         5d:eb:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:15:59 2026 by rpki-client