Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa
File:                     517d4d16-8ae0-3416-b488-37d337e7455b.roa (raw, json)
Hash identifier:          ZdN1dRV4Bz4LLbKo69JU/awg3U/oYsCFqfk2EFvJPNA=
Subject key identifier:   16:08:63:C4:C4:61:56:25:B7:76:C7:ED:1D:26:8F:12:23:90:75:6B
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584CD6D21A14ED7FD760C57E9600
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     2615
IP address blocks:        147.1.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:1a:14:ed:7f:d7:60:c5:7e:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=86f17a03-34ba-4929-b28f-7b44b2512f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:c1:e7:c8:f9:a8:a6:ae:eb:d7:68:1d:b9:
                    e9:12:ce:29:c8:f4:38:1e:0d:6f:ca:e4:60:7a:e1:
                    f8:2d:bb:fb:7a:c0:88:e0:42:ae:88:a5:10:14:f2:
                    fc:aa:45:3e:10:44:75:73:34:f1:a6:ab:25:c4:a5:
                    f3:8c:14:32:ec:87:16:b3:de:b8:c7:6d:89:63:ae:
                    3d:a8:e7:8c:d4:bc:6a:0b:27:53:ff:6e:01:2d:94:
                    77:38:79:55:88:c0:3d:81:1c:32:c1:e6:aa:a6:52:
                    04:26:1a:f8:54:7f:20:0a:90:cd:fa:96:64:08:b6:
                    ba:86:49:ec:84:58:c0:7f:60:3e:2e:fe:76:79:e3:
                    1a:fc:1d:d1:12:aa:2f:1e:66:89:bd:80:82:44:8b:
                    22:75:5b:13:40:66:69:21:e4:b5:93:15:3f:0b:17:
                    9c:9b:a7:02:65:59:03:f8:d9:e6:0f:ff:c1:7b:27:
                    d0:2b:2f:f0:8a:4c:55:e9:cd:52:d1:0d:fe:d6:90:
                    a2:44:c9:d8:f2:c7:c0:30:25:43:08:67:33:9c:64:
                    24:98:cc:13:5f:90:a7:1c:94:84:0b:75:11:22:35:
                    68:43:9d:d4:3d:18:82:b4:2f:08:d8:f2:b4:49:08:
                    b3:8b:3b:3f:fb:fa:63:bb:57:e4:78:df:72:4a:38:
                    2f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:63:C4:C4:61:56:25:B7:76:C7:ED:1D:26:8F:12:23:90:75:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:03:c7:d3:c0:cd:8c:4e:fb:8d:b0:d0:81:04:0f:aa:94:
         0d:80:3a:d2:b3:8c:bc:09:c2:f3:43:ca:6f:1f:30:52:13:f1:
         f8:a0:9c:04:ea:ab:c7:db:a4:08:18:69:ea:bc:a7:dc:21:ed:
         7b:82:bf:a8:84:af:6f:52:70:57:65:27:f9:96:fb:cb:5f:06:
         4e:12:04:84:00:ff:a7:18:60:40:29:c1:50:85:24:2c:3e:4a:
         f1:55:5c:5a:61:b1:5c:d0:54:93:f8:72:94:4e:86:2e:c1:01:
         92:8c:dd:34:17:11:ba:37:12:40:2b:6e:c6:4f:00:3e:bf:cf:
         cc:5e:b3:d7:3d:f3:fc:57:b8:d5:c3:9f:50:24:a8:6d:93:be:
         88:1a:ba:64:fa:fb:99:31:86:5f:d6:60:9f:f3:47:8f:57:f3:
         d8:85:21:03:93:78:54:ea:ac:e4:13:71:56:5d:e9:ee:4b:8c:
         7b:0d:75:c9:34:f1:6b:17:bb:6d:c5:3e:2c:cf:81:71:2e:ec:
         0f:a2:0b:bb:39:ae:4f:9a:aa:57:49:4e:a0:11:1b:63:71:2c:
         96:0c:95:cb:f6:4f:ec:9c:50:cf:21:df:6a:84:84:83:cc:f6:
         f4:d7:c9:e1:3e:2d:35:2b:ba:a5:53:4f:c7:f7:07:df:36:75:
         00:11:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:40 2026 by rpki-client