Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa
File:                     e50b675a-f0df-35b7-bdd9-68271d2f787a.roa (raw, json)
Hash identifier:          RUFT9DeoQvVSTXR1ACTIJySo52nHkY5QUOZbhm6hnlU=
Subject key identifier:   DB:66:FE:CB:CE:6E:61:E0:F9:6B:57:00:8F:27:CA:2F:89:1B:87:E8
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584F549DA0881DC7FE14FC53C700
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     2615
IP address blocks:        147.1.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a0:88:1d:c7:fe:14:fc:53:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=39d7316d-9af7-4ebe-be7a-15f57a5bea8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:bb:47:a5:0a:65:32:1f:cb:09:b6:09:0e:
                    91:da:a6:f1:e0:ac:da:a3:05:3d:bc:57:78:9a:34:
                    e5:0b:9d:73:60:83:9c:33:5b:4a:6c:62:e9:58:a8:
                    3c:f8:7d:bd:d6:0f:22:1f:ee:83:a6:7a:62:f5:87:
                    28:e8:bd:0b:8a:e4:3c:14:c2:a7:a7:56:f9:22:87:
                    8d:bd:3d:d4:c4:76:51:3a:05:c3:8c:32:ac:40:1f:
                    52:93:97:7f:12:8a:6b:a9:76:aa:25:f7:4a:7a:e3:
                    3a:23:c5:d2:c9:ea:d1:51:dc:1c:f2:6b:15:83:13:
                    ee:8b:7b:af:38:66:69:30:ec:33:9c:8d:af:79:0b:
                    e3:4b:60:33:a0:4a:dc:ee:6a:27:fb:e4:0f:92:b4:
                    d8:59:87:e2:6a:c2:81:c0:37:32:4f:29:e9:32:cb:
                    17:28:0c:57:b6:3b:e2:5a:10:3d:c9:75:12:37:e3:
                    2f:eb:47:9f:08:f2:90:04:b5:6f:2f:18:2d:43:98:
                    f7:02:3d:e4:cf:81:28:6b:84:63:1f:7b:5c:b8:cf:
                    8d:ed:d7:f3:62:ad:ea:15:e7:2c:0e:9f:02:db:35:
                    52:7e:f8:f5:b3:b7:92:4a:f4:66:a1:eb:42:b2:b3:
                    e7:95:63:04:fe:60:f0:86:99:98:34:c2:ec:f4:ef:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:66:FE:CB:CE:6E:61:E0:F9:6B:57:00:8F:27:CA:2F:89:1B:87:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:52:36:44:1b:8f:ec:55:e5:23:bd:52:83:76:81:af:59:
         89:2f:9c:56:8b:82:86:01:02:c0:9d:43:f5:12:f0:97:3c:e4:
         fb:12:03:9a:8a:e5:ce:ca:c6:f9:0d:ff:5c:fd:a9:12:19:a5:
         20:7d:a4:e3:c2:98:3c:da:eb:b8:c9:d4:a1:44:36:d3:bd:7b:
         25:22:65:ef:99:c4:ad:e4:b7:7b:b2:5c:e9:e2:0e:43:b1:de:
         53:a5:ff:b5:d8:79:3b:6d:63:83:e2:59:e6:07:0e:6c:b8:a3:
         e4:3f:16:59:3a:98:df:b1:c8:0e:63:d2:38:91:13:04:eb:89:
         4f:56:4b:6c:3f:df:85:2a:3c:09:c5:43:45:60:c7:01:dd:50:
         56:14:4f:ed:80:33:7c:2d:86:23:5d:6b:90:36:b7:35:e7:1e:
         e1:c8:93:b7:38:ed:b8:a5:aa:6e:f8:df:5f:65:3f:bd:5e:13:
         9e:72:66:a5:8c:0a:a7:5d:af:68:14:6a:5c:16:93:77:58:c4:
         0a:3f:81:51:ba:d5:84:99:73:57:44:64:f5:92:7d:0b:d5:cb:
         c6:f1:5a:ea:ae:a9:07:ca:db:db:f0:1c:48:ad:c2:e3:11:e7:
         f1:64:38:51:06:71:5a:ae:99:8b:98:45:8c:c0:32:8b:0a:b6:
         a2:8e:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:26:26 2026 by rpki-client