Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa
File:                     a4b48984-e8b6-30e9-a280-748e863bc46c.roa (raw, json)
Hash identifier:          uK09Z2sVqHYWL6Vtjyyj4yd6HDPl3csA+HcnG52VE/4=
Subject key identifier:   25:67:A0:45:05:FC:0A:68:97:2B:BC:7B:A2:47:86:F9:12:DD:59:42
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584F498AA1CA0EE872B193F50880
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2615
IP address blocks:        147.1.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:a1:ca:0e:e8:72:b1:93:f5:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cdf6c39c-5e27-4394-88ce-536af6f65f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:da:f7:5f:68:01:f6:36:e4:07:fe:3a:d1:
                    82:3e:8a:e6:08:8a:bf:a6:df:11:d4:74:a0:bd:42:
                    c0:69:a6:60:0e:ac:52:f6:bb:91:f7:6c:f4:e7:a4:
                    50:aa:8e:d9:30:8a:f6:5a:59:1e:80:78:cf:4d:37:
                    2b:5c:a4:9f:91:b0:b0:fe:66:e8:2f:d9:74:2d:e7:
                    38:47:06:a2:7d:d9:e6:ec:1c:69:d3:5b:4a:e5:80:
                    67:fb:ee:bf:fe:45:67:76:68:42:ca:44:7b:a1:fb:
                    fe:fa:12:5a:db:c7:83:09:3c:f8:a3:70:53:08:f8:
                    97:10:ed:1e:fa:78:e2:4d:ea:a0:00:83:c9:98:da:
                    33:c6:1d:27:1c:b7:71:2c:aa:83:fa:8a:86:64:8d:
                    df:a0:61:ec:85:5b:5e:6e:e3:19:d4:85:e8:69:1f:
                    d0:32:38:53:f1:cd:11:75:d7:66:d5:d7:48:91:44:
                    9e:82:66:f6:7e:ee:b7:1b:70:b4:c3:29:6e:22:8a:
                    18:d3:79:5a:91:93:72:44:ec:ea:d2:18:c9:5a:17:
                    9c:1c:be:30:c2:6d:be:f8:9f:fa:2f:7b:dd:05:11:
                    9b:b8:8a:a4:e4:b8:17:8a:3e:d8:07:74:e1:a8:c8:
                    23:f5:38:7b:3e:1b:26:37:de:8f:c1:b8:14:b3:1c:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:67:A0:45:05:FC:0A:68:97:2B:BC:7B:A2:47:86:F9:12:DD:59:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:fd:42:55:cc:47:46:c8:ab:49:93:32:06:dc:9d:86:e6:df:
         e5:d3:f0:11:f5:0d:1e:b0:1f:94:61:1c:45:59:8f:66:3e:8b:
         e5:2e:49:fb:eb:80:ba:c2:3c:06:44:7a:38:6e:0b:91:82:ea:
         07:bc:59:77:13:98:05:01:c7:7c:bd:89:01:ef:52:fd:9a:ef:
         44:aa:c8:20:b5:79:20:f0:db:34:37:d5:c5:13:78:2c:fd:72:
         96:9c:d5:90:a6:38:32:0a:7d:14:e0:9d:9a:83:53:7d:56:7c:
         3e:25:47:4e:a6:4b:57:e2:fc:eb:97:32:7b:31:f2:ba:cf:10:
         e3:02:34:24:31:e7:3d:99:54:af:8d:d9:16:b1:6f:67:1c:6f:
         4c:56:e8:5b:a2:c8:aa:79:72:1a:e8:f9:44:a5:d0:c0:5a:41:
         ca:4b:84:9a:82:f3:7b:c7:39:06:87:41:4c:2a:f4:75:48:40:
         8c:45:f7:7c:a8:20:8f:04:9d:50:12:57:99:af:f0:c8:87:c7:
         49:2a:6a:bc:3a:db:55:77:77:65:54:c6:da:99:41:c0:eb:c0:
         07:8d:c2:8a:5e:2f:81:db:83:f6:31:81:d9:3f:79:bb:2e:ad:
         fd:3c:ef:e4:4e:8c:8d:ba:be:19:05:a0:e4:da:42:4b:e3:d6:
         16:8e:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:25:42 2026 by rpki-client