Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa
File:                     b354ebbc-2421-3278-ae3a-2710d363b5a5.roa (raw, json)
Hash identifier:          1Eope/kipFppCGs4XGpZPiruLwjyWwBl04gs66pZhuM=
Subject key identifier:   8D:6F:79:EC:75:C3:1F:53:30:26:31:0C:D2:20:2F:48:34:6A:BF:6E
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584E0435D984DDC5C2422AB80F20
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     2615
IP address blocks:        147.1.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d9:84:dd:c5:c2:42:2a:b8:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=e698f1e2-707b-4bcd-b04e-a96a5adeaf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:07:f7:a0:90:6e:33:8b:04:fa:ca:3f:a7:
                    69:a2:d8:83:29:b1:e3:c1:9e:b2:dd:30:d9:cd:78:
                    15:10:f0:0c:0b:e5:11:2f:91:9f:50:75:e1:3a:9a:
                    a1:95:f9:6d:45:d2:a0:4c:2f:3a:04:8a:fc:e5:6f:
                    59:03:76:05:e6:e2:d3:54:26:72:be:13:69:b5:6a:
                    a8:02:3a:10:07:d6:b8:47:06:2f:d3:ab:16:66:46:
                    7f:c1:8e:ef:96:71:87:3a:08:52:af:52:21:ed:ab:
                    d9:3e:18:74:bb:83:87:c0:cf:31:09:d5:10:84:8d:
                    1c:5d:3b:99:7e:42:51:1a:b8:d4:40:55:50:dd:93:
                    8c:39:77:b4:54:eb:9c:06:01:2f:ab:91:9f:1f:96:
                    1a:ff:f1:56:28:ab:21:3e:6b:e0:81:ad:45:40:d9:
                    09:d4:c9:a3:46:98:fd:61:83:de:5d:13:f2:58:0d:
                    78:3d:a2:23:70:f9:f1:a1:e5:89:3c:ba:d0:56:75:
                    17:4c:2f:fc:e9:7e:e6:8e:58:54:ae:da:b4:2c:bc:
                    39:93:51:ef:a8:e8:c0:36:e4:ca:b8:bd:0e:8c:a6:
                    9e:d2:4e:a1:b6:3d:d8:3c:96:9f:e4:4e:91:e0:db:
                    06:f2:20:00:6c:9f:6f:b1:2c:6c:39:2c:98:fd:01:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6F:79:EC:75:C3:1F:53:30:26:31:0C:D2:20:2F:48:34:6A:BF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:6d:2d:b3:1f:ee:e6:dd:82:07:a6:4f:42:db:8f:38:85:
         fb:d7:10:24:4d:38:a1:48:82:69:a6:27:54:0d:90:3d:aa:68:
         b4:f4:58:2a:4a:47:ea:45:88:2c:a7:b6:4e:a8:d0:1a:3c:34:
         d2:39:5f:e1:a4:c4:2f:99:6b:5d:80:b6:86:ae:1c:e3:1f:e1:
         2c:f0:52:19:0d:3b:be:c3:63:13:a8:2c:11:53:26:fc:41:a4:
         7d:18:a8:2e:ef:bf:9c:38:46:56:76:e3:f9:e4:e0:0a:68:4e:
         cd:74:9d:a1:b8:5b:de:4e:e4:59:4d:18:32:1b:76:6b:5b:11:
         46:15:55:81:e1:fe:70:3d:ec:f9:93:ec:9b:7c:55:14:21:2b:
         35:13:9f:44:a4:2d:b7:79:27:25:8a:50:1e:f8:ac:78:41:ef:
         64:ff:f7:8a:96:c6:af:08:8d:5d:0e:1f:f6:a6:cd:54:fa:f5:
         8d:66:62:b5:42:97:e2:fa:7b:fa:e5:6a:a6:57:e2:59:dd:18:
         96:df:31:61:c4:42:a2:38:c7:b3:6d:9f:a7:e0:40:7e:e1:35:
         4b:f8:d8:ba:ab:65:30:48:b9:b6:8f:e2:02:1f:01:53:5a:84:
         9b:0b:e5:83:0c:95:c1:b1:f5:42:cd:7a:4e:7b:7f:d4:33:d9:
         45:07:1f:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdmE3cXCQiq4DyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
ZTY5OGYxZTItNzA3Yi00YmNkLWIwNGUtYTk2YTVhZGVhZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCoH96CQbjOLBPrKP6dpotiDKbHjwZ6y3TDZ
zXgVEPAMC+URL5GfUHXhOpqhlfltRdKgTC86BIr85W9ZA3YF5uLTVCZyvhNptWqo
AjoQB9a4RwYv06sWZkZ/wY7vlnGHOghSr1Ih7avZPhh0u4OHwM8xCdUQhI0cXTuZ
fkJRGrjUQFVQ3ZOMOXe0VOucBgEvq5GfH5Ya//FWKKshPmvgga1FQNkJ1MmjRpj9
YYPeXRPyWA14PaIjcPnxoeWJPLrQVnUXTC/86X7mjlhUrtq0LLw5k1HvqOjANuTK
uL0OjKae0k6htj3YPJaf5E6R4NsG8iAAbJ9vsSxsOSyY/QH6awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1veex1wx9TMCYxDNIgL0g0ar9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYjM1NGViYmMtMjQyMS0z
Mjc4LWFlM2EtMjcxMGQzNjNiNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqgbS2zH+7m3YIHpk9C2484hfvXECRNOKFIgmmmJ1QNkD2qaLT0WCpK
R+pFiCyntk6o0Bo8NNI5X+GkxC+Za12AtoauHOMf4SzwUhkNO77DYxOoLBFTJvxB
pH0YqC7vv5w4RlZ24/nk4ApoTs10naG4W95O5FlNGDIbdmtbEUYVVYHh/nA97PmT
7Jt8VRQhKzUTn0SkLbd5JyWKUB74rHhB72T/94qWxq8IjV0OH/amzVT69Y1mYrVC
l+L6e/rlaqZX4lndGJbfMWHEQqI4x7Ntn6fgQH7hNUv42LqrZTBIubaP4gIfAVNa
hJsL5YMMlcGx9ULNek57f9Qz2UUHH6Q=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:22:37 2026 by rpki-client