Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa
File:                     3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa (raw, json)
Hash identifier:          y+Rckga+ujiV+bq7pj9h5tjYVmXxzxPj7zaSazVblw8=
Subject key identifier:   10:E3:CC:6D:EF:1A:C9:5F:6B:AA:5B:78:9A:19:96:DE:F8:2F:E9:78
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584A8DD6013C916981645821D680
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     2615
IP address blocks:        147.1.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d6:01:3c:91:69:81:64:58:21:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=79710f88-a98e-4484-aee7-be6ba8070e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:b7:62:df:f7:2e:22:51:02:23:3c:28:4d:
                    72:6e:76:3b:7d:e3:60:22:af:f5:cd:6e:b8:e6:08:
                    ec:fa:b9:62:6f:1e:e4:70:2e:02:db:e3:9f:41:94:
                    0a:e8:8c:a0:c2:47:91:55:d9:db:f5:e6:a3:b2:60:
                    65:46:af:f3:8c:68:3f:b3:1d:1c:e0:c0:b1:60:e1:
                    d5:7c:c1:eb:de:aa:03:b5:cf:4f:c9:74:ba:29:13:
                    7e:40:49:09:aa:51:f5:1b:3d:56:d4:2e:09:56:33:
                    25:4f:1f:5e:46:8c:ea:33:5c:21:c7:01:85:80:ab:
                    93:b6:59:98:7f:76:7c:b3:f1:46:49:09:c8:84:06:
                    b1:e5:b4:c5:16:1e:ba:69:17:bb:a0:97:08:90:e4:
                    96:95:f2:28:cc:42:78:2e:01:f0:c7:2b:54:3b:01:
                    9c:03:ce:f0:7e:ca:c0:83:ba:f2:f3:9e:61:47:fa:
                    d9:17:30:22:47:a2:22:6a:67:c9:73:0b:a6:05:df:
                    a0:ce:97:03:b2:1b:eb:ac:73:b5:02:ed:c1:4b:09:
                    92:03:8f:8e:6f:25:ac:c5:67:8a:d7:47:d4:f6:9a:
                    a0:cf:40:d5:0f:35:15:ac:50:e5:41:27:1e:0d:f4:
                    94:3e:af:dd:a6:41:98:ec:58:da:3c:ab:eb:79:fa:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E3:CC:6D:EF:1A:C9:5F:6B:AA:5B:78:9A:19:96:DE:F8:2F:E9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:34:8c:46:5d:53:57:ee:87:dc:b9:40:2b:62:a3:ef:d9:de:
         8f:57:d8:c8:bb:bc:47:0d:79:f2:c2:65:99:0b:c4:84:50:e6:
         57:ed:0c:2c:42:2d:83:ab:c7:ec:c9:75:04:0f:0c:f2:64:fc:
         b5:5e:61:e9:af:ac:2b:97:f8:cd:8d:08:8e:21:cc:55:a9:70:
         ee:78:6c:6f:27:d2:09:96:f1:e0:54:28:39:41:8e:4d:d1:0b:
         fd:3b:bc:7d:f1:16:d1:41:26:90:9f:24:a2:57:39:ac:a9:dd:
         37:e7:81:4a:d0:e1:c0:41:ee:0b:2d:42:0b:1c:0b:3e:2b:bb:
         d0:d9:72:d3:f4:de:91:f9:69:99:7b:93:bc:5b:a5:ed:16:29:
         45:a6:1a:21:f4:ab:c9:75:ca:d9:54:5b:9d:7f:af:6c:8b:0f:
         a7:07:bd:89:52:73:c3:76:c7:1d:c3:1d:e9:ee:43:ce:67:e5:
         7d:9b:20:0a:60:b9:04:6c:25:e9:eb:79:fb:4f:a1:68:80:65:
         f0:ac:17:35:53:de:6a:79:46:ec:00:37:9c:a1:1e:44:4c:4f:
         0c:be:e4:18:ad:cc:ad:6c:38:72:ad:c9:27:b2:dd:b6:f0:ad:
         50:da:02:bc:a9:b9:47:2a:48:d1:95:ec:c1:3d:de:14:3e:b0:
         5c:e8:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:55:10 2025 by rpki-client