Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa
File:                     0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa (raw, json)
Hash identifier:          tWHF4A+rZKIv7wBA1rKNcl9jMvcVX1JhvKZD+Lzcj88=
Subject key identifier:   B5:7B:1A:95:50:77:8A:2F:7F:7F:B3:5B:83:77:27:35:37:FF:15:DD
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584CA32CFADA0F616832073E0540
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     2615
IP address blocks:        147.1.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:fa:da:0f:61:68:32:07:3e:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=5f591acf-0e5f-4180-901a-5b47e7854ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:a4:00:8e:f7:34:1a:7a:da:57:3a:f4:39:
                    e8:b3:4b:5d:39:96:2c:8f:ca:79:6f:7c:0d:9d:ab:
                    cf:c0:65:e8:00:c6:28:fe:9d:3d:8b:a1:a8:17:aa:
                    5c:46:57:a8:17:51:9e:eb:21:c2:21:73:3a:0e:02:
                    17:4a:2b:51:2b:fa:b2:bf:64:7b:ef:f0:a3:f4:b7:
                    5d:ca:3e:db:ae:3b:09:e5:37:0a:84:70:7c:f9:d1:
                    a3:dd:2f:c9:5d:57:67:9c:d7:97:49:5e:a5:8c:4b:
                    62:8c:74:c0:fb:bc:c9:5b:ab:e3:b9:d6:68:d8:e2:
                    cf:62:da:f4:cf:98:cc:9c:1e:e8:1a:b2:64:a8:73:
                    95:81:c3:9a:e2:60:d6:3b:c5:1c:c3:f0:08:af:4d:
                    a8:cf:3b:15:f9:b8:c2:03:85:02:4c:86:25:8b:b8:
                    e2:03:91:6f:e6:2b:7f:43:7d:85:73:dd:be:65:59:
                    2f:ca:f6:9b:7b:cb:a5:02:dc:0c:a5:03:a2:25:d3:
                    24:72:b6:1e:1e:06:8b:6c:87:47:e1:b4:3f:25:43:
                    11:df:36:a4:72:b5:e8:b0:16:a9:48:4b:50:74:5f:
                    7e:7e:9e:17:a9:89:25:2d:03:7b:37:ce:53:b0:69:
                    ad:ac:5c:e9:2d:6c:ec:49:07:22:93:1e:34:6f:cb:
                    ab:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7B:1A:95:50:77:8A:2F:7F:7F:B3:5B:83:77:27:35:37:FF:15:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:21:e0:b1:eb:81:89:4e:72:96:1d:86:0c:66:1f:c0:71:
         cc:a4:92:fd:12:e6:ca:bc:27:69:e7:1c:1b:4c:50:57:3d:f1:
         71:24:8c:61:57:72:aa:b1:4d:d5:04:03:92:fd:48:41:78:bb:
         cf:48:d2:9f:a5:a5:c9:ea:01:47:3e:84:22:58:fe:3e:52:72:
         f0:74:59:72:ff:41:6a:05:81:15:b6:5b:f9:20:ad:07:54:2c:
         bc:56:fd:4d:b5:3f:db:13:97:bc:83:fd:d7:39:4d:b3:6d:c0:
         38:c9:08:41:81:56:d0:9b:9a:f0:70:8e:7e:12:28:d5:a3:ab:
         9b:73:34:52:0b:40:8c:36:b7:3f:4a:68:37:c8:35:bb:16:a5:
         08:bb:6a:6e:cd:1b:62:b6:eb:a2:7d:b4:0c:2a:0c:04:4b:b6:
         91:d4:a1:02:a1:c0:a4:02:81:23:93:4a:22:3b:b2:a0:6c:ac:
         ad:33:13:66:37:6e:2c:97:49:f0:13:d2:47:df:00:d5:66:40:
         df:52:7e:96:41:3a:60:f6:32:58:97:bb:10:ea:82:45:84:44:
         9d:3a:91:1d:3d:16:a0:cf:77:10:e8:ac:1a:cf:e9:2a:2e:1b:
         0d:c7:24:6a:4e:2b:42:75:ca:f0:f7:0d:94:9b:e2:e4:1c:b3:
         77:61:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:24 2026 by rpki-client