Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ce816e2-ac21-3fab-80cc-176c71ff6504.roa
File:                     3ce816e2-ac21-3fab-80cc-176c71ff6504.roa (raw, json)
Hash identifier:          eBxBhpw6X5Uk56e6005QhgQA+h/66Haw4uDSTHOJzrQ=
Subject key identifier:   6B:61:A7:33:C3:9E:F7:85:64:7A:9D:FD:10:5A:4C:94:84:B6:9C:D8
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E8C8A621D6C98FEAFCAD70380
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ce816e2-ac21-3fab-80cc-176c71ff6504.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     54994
IP address blocks:        153.43.148.0/24 maxlen: 24
                          153.43.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:62:1d:6c:98:fe:af:ca:d7:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=a4e8fcc0-f3bd-4d23-b3a0-36cb673b7c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:51:d1:8d:27:6b:0b:12:92:30:51:9e:92:
                    fe:2d:ee:b6:e7:d9:d1:d1:14:9b:e2:da:46:76:24:
                    ec:bb:b7:95:14:d9:06:12:2d:c2:06:f2:b3:f0:bc:
                    08:ac:43:e2:29:fc:e1:23:be:e2:24:70:92:49:d1:
                    11:de:ed:7a:60:b1:9a:6e:31:8e:b6:2e:c5:ad:d4:
                    75:fc:2c:6a:52:08:c3:c3:4b:f6:e1:fe:0e:aa:a7:
                    5a:d2:fb:c2:e1:10:d5:b1:fc:08:c0:bd:e7:52:1e:
                    07:b5:ff:63:dc:3b:2b:cc:36:d0:e5:f1:0d:0b:cf:
                    9e:c9:a5:6e:36:7a:68:c7:b2:e7:d6:fc:62:ef:fe:
                    97:0d:b7:aa:e3:b3:2c:7a:d1:df:d7:65:45:97:f2:
                    c9:8d:eb:56:da:dc:17:5e:4c:79:db:08:ca:1a:b0:
                    0a:d2:60:b6:66:63:1c:7e:65:59:b8:2d:39:d8:b2:
                    0f:bb:38:62:c5:4e:b6:20:7c:ab:1e:7f:e1:4c:11:
                    b9:35:ea:14:d6:4c:c6:49:9a:a8:f4:49:91:99:17:
                    58:e4:d9:23:b1:8e:b6:34:ef:45:31:b2:6f:79:23:
                    02:f9:b2:a1:be:a8:8e:07:dc:f0:8d:1e:e3:36:9b:
                    4b:27:32:48:0f:2f:cc:42:b6:87:81:e3:85:f2:56:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:61:A7:33:C3:9E:F7:85:64:7A:9D:FD:10:5A:4C:94:84:B6:9C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ce816e2-ac21-3fab-80cc-176c71ff6504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:a0:16:57:24:0f:b4:1f:67:8c:52:19:39:71:1a:04:4b:
         21:1c:b1:6c:f1:bf:81:4f:6e:07:db:f3:5a:e1:53:ed:af:08:
         7b:0b:cb:5c:8b:a1:8a:b7:33:ce:1b:1e:89:43:82:f1:c1:b7:
         20:7e:2d:81:f3:c5:63:19:30:64:67:a3:8d:a6:0a:02:b9:e0:
         d6:0e:58:5b:dd:18:f9:dd:22:c1:b1:fa:34:49:1f:e6:69:4c:
         74:84:c0:3c:19:a2:56:90:7d:98:90:e9:93:c6:6a:7a:07:45:
         50:e0:45:e7:85:16:fc:42:76:ef:9c:df:a2:e0:94:e4:8a:bc:
         5f:e4:bd:e9:48:57:68:5c:2c:5b:83:74:2b:cf:96:5f:9b:4d:
         3c:c7:b4:b9:ab:f8:6d:1a:1e:b0:0c:b3:f2:6c:79:40:f1:5d:
         54:e1:c8:49:05:81:a6:37:d6:88:cb:9f:b1:a8:f3:fc:fd:52:
         dd:60:26:26:12:05:86:6d:70:db:d6:20:5b:91:e1:55:99:23:
         ef:ed:3a:5e:c3:09:cb:85:7f:c4:58:ae:68:00:87:c1:48:b5:
         ac:49:68:48:25:70:ab:50:52:89:78:fb:72:4e:e1:92:ce:2a:
         a2:f2:50:7e:09:89:46:28:10:3b:fe:1c:a6:35:d6:42:56:04:
         77:2b:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:43:42 2026 by rpki-client