Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa
File:                     da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json)
Hash identifier:          tz3ir2xydvQHpGBb8sp4tcpiqU3oA4N3Uu4MtoPkfd8=
Subject key identifier:   E4:94:0A:38:03:83:60:26:57:EE:F3:30:F9:26:BB:D3:0E:42:5A:AA
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584EA79804E64C5F5001B341F2C0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2615
IP address blocks:        147.1.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:04:e6:4c:5f:50:01:b3:41:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=04f9f7a5-eac2-40d1-9076-662e11971806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:62:b4:79:ff:c5:95:d6:af:9c:5c:bb:3e:
                    39:bc:7e:25:9a:69:11:0c:77:2b:c0:6e:52:a2:af:
                    1e:a0:41:31:db:75:99:c5:32:f3:3d:cd:70:3f:39:
                    64:41:e5:55:ff:0b:89:d0:d5:a0:33:22:bc:77:42:
                    7b:33:f5:23:0b:09:6d:fe:56:8f:42:7a:cb:e3:c8:
                    ae:ca:57:07:b0:97:6f:6a:be:11:85:24:df:a4:d6:
                    a4:8c:51:c7:f7:4a:de:de:75:a2:0e:3c:ba:2e:42:
                    9d:fe:62:0c:ad:68:f4:c8:ae:32:e9:10:b3:66:4f:
                    cb:81:1e:5f:e2:53:46:3f:cd:1c:28:33:e3:9b:73:
                    62:44:79:8f:bf:09:82:55:dc:5a:0c:42:a2:82:b0:
                    57:57:2c:2e:b2:4d:11:2e:82:81:21:1e:aa:a7:ec:
                    3b:b1:ce:e4:69:18:48:b2:eb:5e:33:98:43:c8:4a:
                    dc:4a:68:ce:c3:37:43:7c:11:2f:38:e7:36:41:87:
                    c6:cd:a9:0e:65:8f:97:a1:22:2c:2e:8c:57:72:b0:
                    50:1f:6a:70:05:4d:01:cc:df:1f:22:c1:b2:9f:ae:
                    c8:8a:fb:ba:79:e9:f4:40:03:85:1c:c0:4a:db:07:
                    bc:76:74:dc:0f:ce:d7:ba:8a:f8:e6:d7:84:2d:92:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:94:0A:38:03:83:60:26:57:EE:F3:30:F9:26:BB:D3:0E:42:5A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:58:88:3a:d3:7d:67:d1:60:45:61:4c:2f:4f:0a:7a:40:08:
         21:47:99:b9:3a:84:27:87:49:02:e3:c5:31:53:54:0e:8f:3f:
         85:5c:4d:a7:3a:3c:35:89:3a:9d:5c:4e:e3:e9:1c:40:fe:5d:
         d0:98:c3:ad:45:fb:05:5d:89:66:02:17:9c:bd:d0:9d:1d:a1:
         95:ca:c6:90:86:41:a2:c5:98:ad:3d:3e:d1:1c:44:75:00:10:
         43:57:92:d0:6a:0f:a2:c7:90:52:71:cf:6b:90:90:18:89:54:
         d3:76:4d:99:81:f3:76:f7:e5:1b:d0:e9:83:a6:52:a5:93:8f:
         ba:23:0f:db:0e:fb:a6:fe:ee:2f:58:30:53:43:1e:a3:50:1b:
         a8:75:2d:eb:de:7f:c1:17:eb:60:2e:ce:38:c9:9a:8c:59:0a:
         e8:65:15:64:60:25:33:32:60:ea:74:f7:b5:96:f4:13:b7:e0:
         7b:6a:8a:2b:bf:80:a1:06:58:cc:62:91:ab:ad:95:16:b9:03:
         7b:d5:69:ad:4f:46:27:e5:96:14:fe:22:be:36:14:aa:74:15:
         fe:38:08:a4:56:e5:a8:60:e2:e4:45:57:d3:9e:bd:35:13:bc:
         e5:ea:ab:05:12:10:37:a5:2b:11:21:70:5c:a7:86:8b:be:2f:
         90:46:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:03:00 2026 by rpki-client