Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa
File:                     a4b48984-e8b6-30e9-a280-748e863bc46c.roa (raw, json)
Hash identifier:          XZjL1NTqLIgPbvzBTl6zgMl1GdlqVXVnUQB8dorp9m0=
Subject key identifier:   99:FE:0B:BD:30:95:0E:F8:90:86:98:CF:FE:D4:36:1B:68:05:1C:13
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584EA79CA6FBA407BF19A58FD580
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2615
IP address blocks:        147.1.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:a6:fb:a4:07:bf:19:a5:8f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=92353b03-f2d4-438b-8b5e-5861a58ee8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:c7:15:1e:55:6c:80:90:7d:02:c9:bb:bd:
                    6e:5b:30:5d:c7:ef:92:0d:91:33:9a:e6:6e:11:ed:
                    d6:ec:7b:17:11:a9:8a:ab:fc:32:87:6c:87:0b:b0:
                    92:54:44:bb:05:40:21:36:9c:26:cc:a2:ca:f5:a2:
                    bc:ee:cc:d3:ba:c7:d8:08:cf:3a:32:18:92:bf:f2:
                    d0:48:3b:ff:7f:3e:01:26:e9:5f:e3:64:1f:33:c8:
                    c6:0f:5f:fd:aa:3d:78:81:07:0a:35:3d:b5:8a:08:
                    fe:48:a7:fc:41:32:38:7a:e6:96:68:eb:7b:7f:d5:
                    d3:ec:9e:51:fe:84:a3:a5:71:55:a5:e1:5a:8e:cd:
                    37:c3:71:54:7f:41:ec:bf:b4:5d:89:08:64:ef:3f:
                    a8:d4:48:be:3e:86:3d:c6:3a:ab:7b:43:38:d4:ce:
                    30:65:38:8e:39:2b:83:57:58:24:f3:71:77:9c:49:
                    b1:04:61:33:76:b8:d1:a4:7c:76:fd:40:7a:b6:a5:
                    76:19:6c:17:6a:ea:62:91:a6:79:0e:1f:31:31:3c:
                    d5:db:5c:10:57:0c:af:9d:c7:75:5c:8f:ed:ed:63:
                    03:3d:2d:fc:b0:ec:f9:b6:c9:fd:f2:4d:9c:df:81:
                    d0:30:ff:ee:2e:bc:e0:20:81:65:e9:98:f2:a0:fc:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FE:0B:BD:30:95:0E:F8:90:86:98:CF:FE:D4:36:1B:68:05:1C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:cd:5e:e0:a6:71:47:ad:fb:35:10:e4:e3:7b:0e:5f:0d:
         95:dd:d7:57:84:89:17:09:d2:7c:cd:18:05:be:57:46:de:87:
         87:66:c7:32:88:10:d5:7c:5b:cd:65:e3:15:79:6d:3e:b8:b2:
         81:c9:dd:8a:16:3a:c2:34:f7:5d:1f:75:24:4e:1e:48:81:19:
         c6:a1:15:6d:8c:61:3b:cd:5a:37:b3:ee:df:0a:67:b5:05:16:
         55:d1:92:a4:82:5f:33:3c:71:10:5c:79:bd:e6:0b:3d:61:b5:
         53:a4:06:73:a4:4a:99:b5:27:a1:49:f4:30:52:b1:56:38:d3:
         bd:bf:1e:4b:ff:b8:56:56:cb:55:fa:24:60:6a:54:94:83:92:
         84:a0:13:51:58:6d:38:33:e6:08:68:47:9d:f5:00:6e:ac:ce:
         36:db:ac:ff:22:1a:be:08:1a:29:a1:c8:19:1b:a4:bc:8c:a6:
         b7:ed:3b:ce:f8:81:9e:8e:ac:e0:91:6e:92:a0:b2:82:0f:df:
         da:30:ab:cb:e4:31:32:4f:49:79:8c:b5:e5:8f:6a:87:6d:c3:
         dd:84:79:5f:a1:c3:1d:88:04:f3:04:94:42:f8:e3:84:d3:58:
         e2:f3:f6:e6:e7:26:36:f2:fc:f2:09:30:88:cb:92:1d:3c:75:
         d7:16:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:16:57 2026 by rpki-client