Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa
File:                     bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa (raw, json)
Hash identifier:          8jvygoy96GGbNEsaUIaoL2tRMArphoNMsqO9bja/miQ=
Subject key identifier:   A3:6E:A7:4B:C3:98:E6:EA:CD:62:60:A4:E8:C6:8A:51:14:0C:2D:AD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E103CDCB9B2EA4B3C3D400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        146.148.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:03:cd:cb:9b:2e:a4:b3:c3:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=51087bdd-a70b-4ddf-ad0c-941cac589195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:65:77:97:e7:ea:50:62:9d:8b:a4:d5:0b:
                    57:f3:99:07:6a:2f:4a:7c:cc:24:4a:96:30:59:76:
                    32:6b:12:25:5f:26:83:2e:48:bd:71:4a:6e:41:12:
                    29:8e:a9:bb:11:40:6f:30:cc:a6:28:15:8a:b6:ec:
                    e9:1c:98:ed:84:05:73:f8:2b:ed:f4:be:84:9a:be:
                    dc:4c:a9:09:e3:eb:ca:72:96:66:94:b3:9c:a6:cb:
                    36:5e:50:28:31:1f:dd:82:bd:48:74:c3:e4:af:71:
                    76:27:cc:b9:c9:36:0e:9d:17:d9:08:e3:9c:a4:b6:
                    09:83:49:61:50:bb:dc:32:f4:d2:c3:ee:90:32:e3:
                    f1:11:0b:f5:89:54:49:e2:4b:f9:cc:40:c2:6f:f7:
                    d4:a4:9e:95:13:b8:a4:25:d5:4e:7b:5a:ae:c7:40:
                    42:98:79:26:12:40:fc:cf:01:8d:48:69:0e:ee:e7:
                    97:21:a2:b2:86:5a:eb:01:09:30:78:27:64:54:ed:
                    c6:00:6d:5f:48:3a:14:26:86:71:55:23:02:82:2e:
                    21:d5:8f:9a:87:88:cb:8b:1c:ad:1d:23:e1:fb:fa:
                    2c:2e:30:78:7b:2b:9e:d7:ac:a3:17:5f:02:34:7c:
                    ec:6d:00:8c:4d:38:4b:c5:9e:0c:c5:ee:99:4c:bb:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6E:A7:4B:C3:98:E6:EA:CD:62:60:A4:E8:C6:8A:51:14:0C:2D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:62:65:32:4d:1f:83:15:ca:cc:a9:da:44:d7:89:f7:1a:
         70:56:84:ce:60:75:8c:d0:eb:37:d1:6d:43:0f:d3:9e:c4:a9:
         e4:68:b5:4b:c8:8e:36:82:91:3a:ce:30:d0:d7:91:20:56:c2:
         36:0f:2e:6f:f2:69:a6:d9:54:d1:ef:e7:eb:90:af:d1:17:2a:
         fb:75:3f:51:cd:8f:5f:ce:44:29:49:67:8d:c0:0b:02:70:ba:
         16:60:c5:8a:2b:bd:25:3e:b3:a8:d7:36:92:29:2c:c5:62:38:
         d5:27:ae:06:c0:ff:72:4b:c1:e2:39:78:b0:e8:8f:db:f9:67:
         13:af:bc:ad:ff:21:89:ae:69:82:b2:5c:32:69:9b:91:bd:51:
         16:33:da:c0:ff:82:2c:fe:e7:a1:a6:d8:ac:4d:84:a4:c8:a6:
         d2:1f:c3:bd:19:8c:a3:21:a4:0c:a7:88:c9:db:f5:80:a3:24:
         25:82:8c:ae:05:3d:8d:4c:ba:ac:68:cc:00:8b:ea:35:a2:8a:
         9a:36:62:5d:b8:76:b5:b0:f5:e6:c5:fb:2a:41:21:4b:bc:43:
         63:d8:6d:ab:ce:da:31:54:28:84:61:f1:01:82:b5:2c:59:df:
         21:b1:c4:2a:d0:b0:2b:84:d4:b6:ac:66:49:30:ad:8b:73:a6:
         27:86:a0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:48:38 2026 by rpki-client