Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa
File:                     8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa (raw, json)
Hash identifier:          xZninw8ofKNpNxAVzrVn+huwT3ZtcDo51Kdnlbq/MIg=
Subject key identifier:   26:8E:47:EA:5B:BA:29:9B:76:70:C9:27:F7:4D:78:E3:5E:65:E5:49
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584DE6E5D2F1AF73A8C7B46D9600
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     2615
IP address blocks:        147.1.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d2:f1:af:73:a8:c7:b4:6d:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=c44873fe-f6c9-434d-a847-2b9f71360835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:a9:a9:a3:af:51:d7:56:b4:80:ec:f8:2e:
                    89:c7:72:66:24:31:ea:93:fb:f1:11:c3:60:cd:19:
                    94:de:2f:f9:06:b1:ee:b7:42:ba:01:cc:dd:0d:4b:
                    ac:04:3c:4a:c6:c0:32:70:3a:ed:27:76:06:35:09:
                    24:fb:c6:d0:a3:14:f8:2a:84:9c:c3:52:59:c6:78:
                    bb:92:68:62:2e:95:59:97:87:e1:0d:82:19:e5:89:
                    c9:39:7e:dd:78:b8:47:6c:33:c2:e0:0d:8f:8a:fd:
                    5f:20:f2:72:a1:04:d6:2c:01:e0:df:46:96:19:50:
                    a5:f0:39:b7:92:53:4d:64:bb:9a:b0:e5:c0:51:53:
                    20:0e:69:2a:f2:d6:78:a4:6b:3b:f7:b7:55:b0:dc:
                    0f:e1:f9:6a:df:a9:6f:df:6d:2c:a8:c1:80:34:c6:
                    21:44:d4:cd:e2:88:ef:43:dd:cb:6f:08:5d:3e:eb:
                    9a:06:ff:ef:11:09:05:66:18:11:1d:ec:c9:a1:cd:
                    8d:42:5f:bd:6f:7a:4d:a1:74:a0:22:dc:11:45:3c:
                    f2:76:c5:42:3f:9c:d9:32:64:b1:20:cc:ba:58:b4:
                    d9:af:dc:c3:d0:86:7b:7e:e6:fd:e6:4f:c3:bf:c4:
                    e3:bb:f1:3a:d8:48:0b:e3:e3:e9:57:ca:a3:91:89:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8E:47:EA:5B:BA:29:9B:76:70:C9:27:F7:4D:78:E3:5E:65:E5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:99:24:cd:79:e5:c7:dd:32:9a:e7:0d:a9:7a:42:2d:1a:
         c8:6d:51:93:7f:cf:ce:a2:85:1d:1f:75:2a:ce:b3:06:91:20:
         53:3b:a9:67:ce:5d:5f:92:67:32:aa:7f:a3:5e:41:19:dd:fb:
         9b:e3:02:34:d1:a9:3a:9c:cd:f8:b1:62:f5:b4:41:dc:fe:98:
         d4:df:04:6e:4a:48:25:ec:b1:e6:70:b3:52:6c:14:0d:8e:2e:
         3a:3e:0a:ed:5e:6a:0e:ec:17:45:e2:7e:70:26:02:64:9c:29:
         be:58:0e:f8:12:26:fa:b6:09:a2:5c:34:8a:fd:5e:cd:9d:a9:
         10:2c:72:7e:f7:16:b9:8d:ce:32:e2:7e:c3:ce:d1:65:fe:de:
         53:d0:5d:89:3d:07:6c:ff:e9:70:95:88:94:21:69:8e:73:52:
         e8:40:77:3b:f6:0b:f1:e5:74:fd:34:c2:1c:88:c6:a9:1b:13:
         c7:39:13:9d:f1:fc:fc:35:b0:90:a4:29:5f:06:5f:0f:93:b0:
         f7:87:27:b5:b9:42:66:9a:1e:15:42:e1:88:27:49:4d:c5:26:
         29:5f:f1:0c:5a:3b:82:2f:2d:b0:c0:7c:18:1b:77:6a:a2:da:
         54:de:63:36:92:e6:ea:eb:b6:27:d2:c0:d2:ef:20:fa:d7:75:
         6e:3e:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 05:44:37 2026 by rpki-client