Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0a84462e-ebef-3601-aa9b-894d08e40b73.roa
File:                     0a84462e-ebef-3601-aa9b-894d08e40b73.roa (raw, json)
Hash identifier:          qm2gUTptu++RVRJey4Pa2V1/uQ89aiH/iXr6rHLM6rI=
Subject key identifier:   33:14:D8:11:E4:F9:BE:72:6D:F4:5F:44:3F:9A:BD:F2:BF:7F:BF:58
Certificate issuer:       /CN=17499469-12e7-4915-9db8-02bba626b87d
Certificate serial:       010D0C9F4328584B13D6ACD561D28CB477D19C00
Authority key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0a84462e-ebef-3601-aa9b-894d08e40b73.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396432
IP address blocks:        147.185.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ac:d5:61:d2:8c:b4:77:d1:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17499469-12e7-4915-9db8-02bba626b87d
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=dfc4ab5c-7431-497e-83c6-597e1090d38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:31:34:8b:70:7d:a2:b8:15:09:3f:1a:0b:
                    d1:e4:e9:d7:5f:2d:c4:68:12:10:3e:38:4e:40:00:
                    b4:4a:55:b7:70:44:ba:1d:87:bd:22:71:46:e8:78:
                    4c:93:af:ea:01:af:c4:98:69:a0:a6:12:0e:0c:97:
                    9d:a1:f4:d2:ac:44:61:5b:05:46:da:de:6d:f5:ce:
                    26:16:42:fa:05:32:d4:65:c5:34:2e:f2:db:1b:f9:
                    1b:2c:ce:6d:f8:fe:e2:8c:ed:41:9d:05:cf:76:14:
                    26:c5:87:23:5a:00:ce:8c:b5:0e:8d:32:42:3c:78:
                    23:2b:76:80:ac:77:41:40:28:92:d4:69:a3:76:36:
                    d5:f2:0e:05:56:78:b8:21:31:36:f4:29:2d:3b:dc:
                    43:1d:bf:7c:8e:b6:eb:0d:ee:14:d5:19:ef:38:b1:
                    d9:b2:e3:92:b7:48:95:cf:d2:51:7d:2a:30:a6:34:
                    e0:1e:b8:06:d4:8a:f5:a5:c9:77:83:6b:9a:b7:99:
                    c4:0d:bb:ef:4e:37:1b:19:23:87:c7:7a:53:07:27:
                    ed:68:be:e2:6b:da:74:f3:15:3e:66:32:26:04:3c:
                    71:f9:61:54:58:cd:84:75:71:3c:7d:67:10:6d:46:
                    ae:fe:33:89:d3:4d:d5:7c:98:47:a6:a3:6a:d5:f9:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:14:D8:11:E4:F9:BE:72:6D:F4:5F:44:3F:9A:BD:F2:BF:7F:BF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0a84462e-ebef-3601-aa9b-894d08e40b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:e1:01:e5:ff:0e:58:8a:12:81:02:ff:67:2f:a4:90:0c:
         40:c9:87:05:f4:d9:45:28:40:b8:15:f7:2e:04:87:36:86:10:
         30:ea:e9:45:aa:e8:12:c6:f5:21:92:a5:be:1c:8d:c8:c8:df:
         d0:03:56:c0:43:ed:be:61:e1:43:53:cf:f2:bc:a1:13:e0:5b:
         d1:62:73:65:28:e4:a7:c1:cd:c9:f9:5e:e9:0a:e5:b3:fd:ec:
         dd:c8:73:67:15:d3:72:3a:36:41:da:1e:3c:10:d1:b9:4c:b5:
         bd:ac:8f:b1:4c:66:ec:54:3c:28:6e:a6:73:76:4d:be:f1:71:
         ff:3e:4a:02:8a:74:96:9f:7c:26:a7:2b:e4:17:be:7f:3a:9a:
         4a:24:46:58:9f:72:4d:5b:aa:d9:68:f5:bd:2a:cf:88:47:8c:
         ab:a7:8f:a2:2f:0e:1e:f0:34:a1:ec:a5:98:a7:bd:54:4c:38:
         e5:66:a8:60:df:83:c6:74:61:dc:bd:74:f6:c4:e1:6e:0f:63:
         c2:75:99:3b:c7:f7:07:6a:ad:28:c7:4b:65:fe:4e:c1:4d:26:
         19:70:37:c2:15:be:cd:74:12:08:41:d7:4b:e2:ba:cd:7f:9c:
         a2:26:5e:0a:31:94:1e:a1:a9:e4:f4:f4:8d:8c:2a:c8:6a:83:
         37:bf:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:45 2025 by rpki-client