Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa
File:                     8c35e725-cb7a-34fc-b8dd-3626efeea859.roa (raw, json)
Hash identifier:          dyBT9WWiyUCQyGCUyUj1uPiFRJUoSXLFx0+UObiyCwE=
Subject key identifier:   F6:78:75:4C:DA:9E:53:3C:E1:74:6A:43:27:0E:5B:DF:7A:45:EF:FA
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584CD6D20225831AEEFEA9FA5D20
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     2615
IP address blocks:        147.1.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:02:25:83:1a:ee:fe:a9:fa:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=59d746e3-8412-4809-a742-2c8bfadc760c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:82:7e:a2:36:3f:97:d4:e5:63:0f:c3:23:
                    87:b3:c2:21:d9:46:5e:e5:4d:25:6a:5e:e0:a9:de:
                    48:2b:df:3a:92:40:80:c9:08:da:f2:34:06:b4:ff:
                    c5:4a:c3:8d:2b:69:9c:f1:1c:2f:1a:97:4d:60:8d:
                    b7:18:21:3e:66:6f:99:c1:fa:d3:ed:6a:40:55:ab:
                    c5:38:d6:da:8f:e8:53:4b:e8:28:3e:50:15:b7:6b:
                    ee:e9:0f:8d:cb:7b:b0:12:c7:b1:2d:2c:33:f0:79:
                    61:31:12:a0:65:1a:87:01:a3:6e:13:18:ef:93:6b:
                    96:f3:85:2a:6b:f6:63:95:f5:17:01:20:f0:a7:3a:
                    76:c4:48:70:e2:84:7f:d1:38:e3:99:9d:fe:e9:f6:
                    1b:55:cf:c1:34:3e:17:bb:2a:d9:ce:48:27:69:b0:
                    22:7d:d3:6b:8c:4c:18:08:17:ae:e1:9c:ec:64:08:
                    d0:dc:ca:33:36:be:7c:e1:98:00:c4:8a:f0:71:46:
                    10:ca:42:77:d8:92:c2:65:da:b3:e0:ee:4c:f8:5a:
                    32:0f:3c:77:a0:73:f0:df:1c:f3:b0:b7:a9:18:81:
                    5a:0d:98:d9:7d:9b:e7:26:03:74:e7:a0:25:d5:7f:
                    01:0c:08:f0:f4:d8:e8:91:17:71:ff:7d:6b:d3:bd:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:75:4C:DA:9E:53:3C:E1:74:6A:43:27:0E:5B:DF:7A:45:EF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:df:d3:c3:9d:64:1b:31:d5:73:95:0e:93:59:4b:c4:e0:46:
         50:89:0b:01:c2:64:bb:1f:40:01:8d:f4:ec:f4:84:ef:a1:85:
         25:b7:ef:cb:7e:07:5a:77:e8:d9:fc:95:ae:60:4e:31:23:e3:
         fc:36:0c:b8:f5:0a:71:f2:d7:51:cd:ef:2e:ec:85:65:26:83:
         13:a3:c2:9a:e5:04:ab:e7:e3:ea:bd:ca:a7:d9:b1:96:80:b0:
         5e:37:2e:73:de:f2:d7:e4:88:53:e4:bb:c9:ff:17:21:57:8b:
         f8:77:56:f9:af:90:69:4f:e8:5e:6e:d3:67:30:e0:fc:59:69:
         07:ca:bc:90:20:b2:aa:e5:63:b3:9a:d5:2f:0c:64:25:63:a8:
         ab:79:80:d2:8b:81:ab:3e:89:2d:af:28:6c:75:6a:e6:a5:d3:
         8c:4d:f5:3f:da:80:03:fb:a8:da:99:a7:84:ed:c2:8e:5d:de:
         95:4b:a6:f1:6e:01:15:aa:dd:0d:4a:ac:6e:02:6d:a6:58:61:
         6b:60:61:87:e7:88:58:21:24:8c:5c:53:f6:fd:ed:27:2e:b8:
         21:86:fb:57:eb:4f:c4:62:33:78:3c:96:6c:70:e4:2b:d8:51:
         f5:cd:7e:2f:4f:73:71:7b:cd:9d:a9:cf:8e:aa:b7:9a:33:40:
         49:b2:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:20:44 2026 by rpki-client