Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa
File:                     9ba08d73-b505-3fa5-a35b-23519c486b5c.roa (raw, json)
Hash identifier:          A+znNhsPp1YOnWilcRrf6h/jR+FSFQD8cRsO5y8Nm+U=
Subject key identifier:   AB:F7:1D:69:69:B7:97:4F:00:7A:2E:27:DB:5F:98:37:88:93:2A:01
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584A8DD5FAD0576FD10C0A6C2C60
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     2615
IP address blocks:        147.1.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:fa:d0:57:6f:d1:0c:0a:6c:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=f0a9c369-0e9e-4572-af22-416a11c9af36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:ef:06:d1:e3:d7:66:3f:48:2f:60:b3:91:
                    35:13:16:73:21:0b:39:9f:8a:6b:46:62:47:9b:31:
                    f3:25:05:e6:70:55:f6:79:db:f2:3a:e9:3c:49:3f:
                    f8:84:05:fe:5f:ef:15:75:e6:98:3c:03:7d:bf:89:
                    14:51:d6:3a:3e:31:83:a7:3b:72:84:bf:a0:71:93:
                    6d:15:70:94:8e:30:d5:75:30:3a:f7:e0:d1:68:8a:
                    47:ff:d7:ff:51:07:bb:f4:82:77:f7:89:e9:3b:0f:
                    2c:47:1b:a8:16:62:f3:70:e8:0c:1f:0e:f3:65:39:
                    59:bb:ae:0e:74:cd:9a:fe:7d:70:82:c0:a0:72:77:
                    5a:d4:30:c1:05:53:46:d8:9d:ad:03:14:f3:46:5d:
                    9f:33:86:bd:99:5f:29:5b:a9:5b:3e:79:ba:3e:8c:
                    50:8c:69:59:42:04:12:0f:75:e8:44:bf:8b:5d:5f:
                    c7:02:29:e5:dc:e7:b0:09:7a:11:a5:a1:6f:84:8d:
                    cf:fb:41:ad:29:1f:1b:3f:1a:f1:47:db:e1:e7:f3:
                    fe:f1:d1:13:5b:e2:51:0e:0a:18:60:d4:35:c8:1e:
                    36:f0:84:ad:5f:c5:93:69:b1:03:75:81:85:30:92:
                    0d:ce:2f:22:af:45:91:f3:07:42:e7:1f:e5:e1:38:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F7:1D:69:69:B7:97:4F:00:7A:2E:27:DB:5F:98:37:88:93:2A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ec:15:c2:80:28:d0:a0:d9:b8:db:37:37:f4:d8:87:67:07:
         8d:f9:9a:98:78:b9:34:73:27:e9:c3:39:ef:fd:5d:f7:4c:09:
         e0:bf:6b:fe:3a:76:9c:50:91:91:2e:b9:1b:91:10:31:ea:29:
         bf:d8:59:0a:e1:e6:c8:ff:62:69:95:2a:73:ff:1b:75:12:83:
         e3:f7:c2:4c:1a:05:0b:67:91:9a:23:12:65:36:79:c0:eb:b6:
         ac:07:69:3a:07:4d:1e:ba:65:2e:b6:ac:c7:bf:e4:21:3a:a2:
         08:ec:91:36:47:f6:a0:60:3e:73:49:ef:04:e2:8c:a7:99:5e:
         07:d6:54:67:58:30:83:2f:84:3a:89:c4:c5:ed:d7:f0:44:f3:
         17:2f:bd:df:da:df:18:fa:c4:26:74:81:1f:6b:00:58:d9:f8:
         81:d5:86:18:d3:29:d0:6a:49:59:be:e1:26:d5:34:54:6c:87:
         ab:cf:bf:09:1a:51:23:a2:e8:61:a4:13:30:bf:0a:72:2a:11:
         91:ae:04:7e:f5:6e:85:24:fa:ce:a6:55:7f:44:36:11:a1:fe:
         81:8a:f8:e9:20:24:fe:82:21:47:63:ae:da:0e:b1:9e:3e:62:
         12:d9:48:3c:5c:36:75:22:0f:75:ba:9a:e6:04:c1:08:19:b2:
         fe:7a:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:53:58 2025 by rpki-client