Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c498cc3b-9f67-334b-99fb-f2490d6faefd.roa
File:                     c498cc3b-9f67-334b-99fb-f2490d6faefd.roa (raw, json)
Hash identifier:          beXqgm49No9a02ja7eJ9Ago4EQ1ALn+05ya2RMKumfk=
Subject key identifier:   7B:04:23:C8:DB:12:B5:E5:34:DC:53:EC:60:43:AD:37:1A:6E:D0:4D
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584D00B259ED6EA239498C5C6810
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c498cc3b-9f67-334b-99fb-f2490d6faefd.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     2615
IP address blocks:        147.1.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:59:ed:6e:a2:39:49:8c:5c:68:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=6c11976f-34cd-4b02-a986-8b6a7c54153b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3d:3f:e5:32:cf:2a:07:43:5c:a3:bb:38:71:
                    52:86:e5:e6:dc:68:13:a9:a8:90:45:d7:47:2f:93:
                    5f:9a:15:00:80:6e:6c:d9:96:b7:5d:2e:89:af:fb:
                    25:e1:f9:e5:8f:ff:4c:1e:01:be:62:c8:e2:ac:00:
                    6d:61:ed:30:4c:89:cc:fd:f0:20:48:4c:82:7d:74:
                    19:81:6a:18:cc:ea:57:51:7f:cc:c2:c5:47:bc:25:
                    f5:63:be:83:69:3f:fc:78:6d:32:c0:c4:88:1e:ef:
                    f0:c1:99:db:b0:3c:65:f3:d7:f2:cc:38:08:59:e3:
                    d1:c3:b0:59:24:71:60:df:20:75:c0:63:10:b4:96:
                    d3:21:21:8e:44:cc:af:0b:ba:95:3c:36:a3:bf:06:
                    a1:48:66:dc:89:90:cf:e2:5a:42:d0:e2:4e:f7:f3:
                    fd:94:c1:c9:42:8c:aa:33:8d:dd:b6:8b:81:df:6e:
                    28:20:98:e2:f5:75:fe:e8:de:81:51:c6:4d:52:7c:
                    c9:c4:74:5f:8f:56:88:46:a7:0f:16:0f:04:7c:b7:
                    06:8c:ff:1b:45:86:2b:84:6b:b9:e3:0e:7d:42:bb:
                    13:6e:df:6a:17:84:b8:70:49:b3:6f:2c:73:d7:02:
                    74:e5:6f:5f:04:1c:01:bb:ff:ea:d1:36:80:06:8d:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:04:23:C8:DB:12:B5:E5:34:DC:53:EC:60:43:AD:37:1A:6E:D0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c498cc3b-9f67-334b-99fb-f2490d6faefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2b:e3:16:3e:70:5b:8e:1d:99:85:3e:ff:b5:86:25:70:5c:
         6a:5d:19:74:26:67:23:73:d5:96:85:37:5c:2a:69:7b:d1:b3:
         29:87:3e:5f:25:46:04:a8:25:ba:9d:16:eb:c3:bb:b7:52:e9:
         f5:43:3a:4a:57:b1:82:0f:b0:9a:da:c3:f6:42:46:08:90:62:
         7d:02:ee:e2:29:01:9b:b2:c3:fb:84:12:4d:4e:4c:d0:d7:af:
         40:fe:e8:a2:50:7e:cf:51:90:99:cd:c1:35:14:35:56:de:79:
         9e:98:dc:9c:d0:8b:5c:98:f3:7d:2c:97:ee:c0:64:02:e5:83:
         df:a3:20:49:4c:af:9c:f9:f6:38:9d:24:0f:da:64:7d:d8:dc:
         ea:ad:a9:ef:ce:b8:b4:3f:8b:1f:47:98:42:a9:c3:96:88:43:
         0e:8b:f7:0d:31:d2:5a:e6:86:e1:d6:38:92:84:d7:6d:03:1b:
         2c:10:79:5a:be:94:a0:36:7f:f6:03:8e:f3:3a:f7:89:cd:04:
         dd:6b:80:68:c9:ba:15:a5:20:cd:40:d1:ae:b9:fc:d3:5f:81:
         be:39:3f:e4:ae:80:aa:d3:a2:48:b5:4d:26:78:35:f5:ca:12:
         a3:e0:4d:80:bc:a0:3f:ea:fb:3d:37:6e:f8:89:e8:b4:04:8b:
         df:14:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:37 2026 by rpki-client