Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa
File:                     a36da157-b4f8-3fa1-861a-594dc015fe56.roa (raw, json)
Hash identifier:          oeHNDhN/4IAcSDdAXbRAYMuDbbBVQ2JXSW+kLFrqvqE=
Subject key identifier:   9B:4F:38:37:0C:FF:0F:FE:D8:07:FD:63:C3:ED:67:B2:1A:C9:81:18
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A7A4B3F0AA08D5BC026C29180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     64267
IP address blocks:        148.59.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3f:0a:a0:8d:5b:c0:26:c2:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=f1011e59-fb39-4e5d-b119-09afc37a74fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:af:9d:b3:c0:7f:ab:55:0c:1c:54:b2:39:
                    b5:62:02:07:05:36:71:df:03:20:ad:7b:e6:6b:6a:
                    92:03:ce:9e:65:b9:5b:5b:72:92:d3:2b:6c:64:a7:
                    27:00:9c:cf:b4:eb:02:dd:79:a7:76:6e:88:47:d5:
                    8a:81:d7:53:08:5a:5b:fb:24:63:30:17:59:69:e1:
                    26:7a:b8:8e:e6:da:c2:19:32:f4:7e:47:4b:19:39:
                    c4:33:9c:3f:8d:96:12:ef:15:69:8c:26:b3:3b:23:
                    a4:dd:8c:cc:bf:72:54:85:d6:40:45:e7:73:7c:36:
                    cb:9f:bf:ad:1d:d0:0d:1f:ea:48:19:34:84:00:1f:
                    8e:8f:4a:c1:7a:31:b8:82:be:6e:40:e0:65:35:52:
                    72:3c:55:92:a7:4a:ec:25:2d:61:bf:5a:c6:70:80:
                    02:36:5f:c7:d0:55:5a:0c:f0:26:8f:39:78:9a:01:
                    11:26:06:e1:32:b8:23:4e:d0:ec:49:de:10:33:1d:
                    97:87:02:27:cb:cb:f9:e3:24:2d:30:25:c4:a7:c2:
                    de:cf:ee:ed:5c:3c:ea:14:31:8d:70:4f:fc:8f:23:
                    5d:7c:7c:68:75:1e:d5:2e:f4:dc:d8:69:b7:3d:51:
                    87:1a:82:1f:fe:23:68:17:67:01:6d:0e:46:6e:59:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:38:37:0C:FF:0F:FE:D8:07:FD:63:C3:ED:67:B2:1A:C9:81:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:5f:70:3a:cc:7c:71:84:e4:29:e8:d7:31:de:30:7f:cb:
         02:05:40:93:c4:be:9b:13:47:98:56:91:fe:9f:bb:7d:da:18:
         78:dd:05:49:2d:69:68:c7:3c:50:f8:03:b0:3e:69:b6:52:fb:
         66:2e:44:d1:81:03:58:d9:59:73:d1:2a:5d:c8:90:2e:4d:b0:
         28:e7:98:8a:21:e4:b8:01:31:6c:91:f0:30:a9:61:59:d6:2a:
         61:fe:8c:c3:6b:61:7c:b4:44:8e:ba:db:0b:50:a2:7f:53:a3:
         9d:35:f8:f0:e1:b3:89:40:51:6d:a3:de:7f:73:f0:50:55:a6:
         41:b6:15:ea:84:f2:d6:be:c8:f0:8c:01:9d:10:a5:18:73:89:
         25:03:04:96:08:b5:20:d0:6d:aa:ca:73:39:52:06:be:75:e9:
         79:7c:64:dd:ea:9c:01:d8:aa:43:30:91:2a:70:2d:de:88:4c:
         dc:58:e9:fa:84:71:8b:0d:27:62:2c:22:51:89:a8:14:8e:7f:
         1c:46:24:a1:45:83:f9:4f:ca:57:88:c8:a8:80:e6:ff:bd:1e:
         8a:6e:8f:0a:7a:79:f3:20:4b:00:db:78:19:b0:9c:38:53:5d:
         0f:c0:0b:64:95:21:fd:2e:7c:d6:38:0a:e6:6c:a1:c8:91:18:
         3c:da:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:33:12 2025 by rpki-client