Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ee6f88b8-4258-3a47-b489-34227f905d1f.roa
File:                     ee6f88b8-4258-3a47-b489-34227f905d1f.roa (raw, json)
Hash identifier:          0X9EwlRKd0WuVrLriQ/p9ykBU8EIMws0a5c9hzAM8ms=
Subject key identifier:   75:67:B6:AE:40:37:C6:09:41:D1:92:C0:F9:85:72:33:FF:30:4D:0B
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584D83CAA583F28576700FB90B40
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ee6f88b8-4258-3a47-b489-34227f905d1f.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     2615
IP address blocks:        147.1.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a5:83:f2:85:76:70:0f:b9:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=0266f6a4-0b09-459f-9dd4-b9a6056c5c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e2:72:f4:cf:56:70:28:ab:65:ca:a3:fb:45:
                    31:ab:4e:3a:c7:29:38:80:44:1e:a9:68:8b:b4:5a:
                    74:3b:6f:61:77:3b:39:dd:02:8f:f1:4c:88:41:ea:
                    57:f9:0c:5c:97:34:8b:ec:ca:27:1f:f8:99:11:49:
                    50:fa:a5:5a:5a:82:58:3a:e6:9f:e9:40:e3:ec:14:
                    8f:99:91:7e:ce:04:65:84:64:2a:ea:cf:a8:60:26:
                    32:96:21:60:92:0b:7c:6c:ef:32:bd:c0:a5:ce:be:
                    c2:1e:1e:60:6b:ce:6b:f6:09:f1:e4:5e:42:ca:c5:
                    36:e8:1f:03:33:47:76:2b:b0:ac:ca:73:00:3a:8f:
                    b3:22:68:e7:f1:ea:ac:6e:a4:91:3c:44:45:70:fa:
                    4b:9a:e7:14:d6:29:27:d9:8f:92:96:6a:56:d2:ef:
                    d6:e0:3b:a0:66:d1:7b:a1:b7:81:36:8c:60:0a:92:
                    ff:d1:cf:2d:a9:5b:23:45:a1:20:80:4a:f4:37:4d:
                    1a:53:c6:6f:11:b5:b4:68:eb:13:20:8d:95:78:99:
                    97:8a:b0:0a:ec:d8:1d:c1:35:b6:7f:29:53:4c:e8:
                    81:2e:9f:85:a7:b9:9e:e8:76:cf:45:27:eb:99:00:
                    ec:fa:62:a8:0b:bd:43:d0:71:6f:b4:7a:04:db:bf:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:B6:AE:40:37:C6:09:41:D1:92:C0:F9:85:72:33:FF:30:4D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ee6f88b8-4258-3a47-b489-34227f905d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:2f:c8:3d:bb:77:3f:4e:a0:6f:50:5d:ab:8f:56:40:54:
         8c:58:e1:a3:67:e4:3a:34:d9:fa:c2:d2:aa:82:24:45:59:78:
         2b:bc:90:9e:48:81:6c:cd:6e:14:f0:84:5b:e4:e5:5a:a1:58:
         40:2b:2f:5d:6a:3e:c3:aa:9c:5b:ec:a8:25:df:99:69:f7:4b:
         23:78:9d:4b:d3:ff:85:a9:3c:2e:64:72:35:92:3d:48:6e:8d:
         67:9b:a5:3f:40:0c:64:f4:ca:b1:7e:b9:71:95:75:36:6b:4b:
         11:46:1a:71:d4:94:2b:f7:6a:89:0e:e8:c9:4d:1d:19:a9:09:
         06:ad:ce:86:0e:cb:fa:96:1c:8d:25:97:d0:e0:40:b5:fc:05:
         38:3c:cb:5f:75:4e:31:b3:11:c7:1d:cd:56:11:f7:91:b3:7f:
         ca:96:55:a4:fb:49:86:4c:00:82:db:07:1f:8b:20:64:10:24:
         bd:98:4f:96:ba:c5:47:22:d1:c7:0d:98:34:45:6b:8e:4e:b0:
         bd:04:3f:68:74:7d:98:81:9b:a5:bf:92:aa:7b:c3:46:80:1f:
         2c:97:70:d4:0e:27:1c:b6:ec:27:ba:02:fa:e5:8b:d7:f0:66:
         83:50:95:83:ec:9a:8d:db:4a:fc:91:ef:e1:f4:c5:b8:65:b1:
         62:64:52:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyqWD8oV2cA+5C0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MDI2NmY2YTQtMGIwOS00NTlmLTlkZDQtYjlhNjA1NmM1YzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeJy9M9WcCirZcqj+0Uxq046xyk4gEQeqWiL
tFp0O29hdzs53QKP8UyIQepX+QxclzSL7MonH/iZEUlQ+qVaWoJYOuaf6UDj7BSP
mZF+zgRlhGQq6s+oYCYyliFgkgt8bO8yvcClzr7CHh5ga85r9gnx5F5CysU26B8D
M0d2K7CsynMAOo+zImjn8eqsbqSRPERFcPpLmucU1ikn2Y+SlmpW0u/W4DugZtF7
obeBNoxgCpL/0c8tqVsjRaEggEr0N00aU8ZvEbW0aOsTII2VeJmXirAK7NgdwTW2
fylTTOiBLp+Fp7me6HbPRSfrmQDs+mKoC71D0HFvtHoE278OvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVntq5AN8YJQdGSwPmFcjP/ME0LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZWU2Zjg4YjgtNDI1OC0z
YTQ3LWI0ODktMzQyMjdmOTA1ZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwG4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrnL8g9u3c/TqBvUF2rj1ZAVIxY4aNn5Do02frC0qqCJEVZeCu8kJ5I
gWzNbhTwhFvk5VqhWEArL11qPsOqnFvsqCXfmWn3SyN4nUvT/4WpPC5kcjWSPUhu
jWebpT9ADGT0yrF+uXGVdTZrSxFGGnHUlCv3aokO6MlNHRmpCQatzoYOy/qWHI0l
l9DgQLX8BTg8y191TjGzEccdzVYR95Gzf8qWVaT7SYZMAILbBx+LIGQQJL2YT5a6
xUci0ccNmDRFa45OsL0EP2h0fZiBm6W/kqp7w0aAHyyXcNQOJxy27Ce6Avrli9fw
ZoNQlYPsmo3bSvyR7+H0xbhlsWJkUlo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:52 2026 by rpki-client