Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa
File:                     8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa (raw, json)
Hash identifier:          u3BvY481FeRrpv6dkYCiRenBJZeUreiXfUxGXQ9ayMA=
Subject key identifier:   8D:86:90:44:A4:E8:0F:FC:6E:B7:04:A3:AB:9B:84:C1:7D:64:6D:AE
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E35FF1F9E8E3CDD5D5E629980
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     3477
IP address blocks:        192.149.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1f:9e:8e:3c:dd:5d:5e:62:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=5fb57ae3-7a1f-4f2c-842f-224e085c306d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:4d:65:69:cf:5f:bf:c9:64:3a:aa:83:3c:
                    70:d3:6b:9d:f9:63:48:04:2e:f5:92:db:5b:d3:65:
                    42:a1:61:a9:dc:5b:2f:e2:9a:eb:e4:d9:1f:7a:32:
                    cd:da:22:d0:46:b6:15:84:bc:11:ce:b3:a2:3f:eb:
                    85:96:6d:5c:a7:71:89:1b:ea:b7:63:e7:fc:d6:96:
                    d9:5a:e3:3b:1e:5e:78:35:2f:c3:6a:94:2b:eb:6f:
                    1b:fb:4d:cd:09:02:0a:05:c1:35:8d:ec:65:49:da:
                    e2:c0:43:a6:69:47:ce:d0:26:27:91:69:37:0b:97:
                    6b:ca:5a:1f:a1:a9:e4:d3:89:66:17:f6:27:71:0c:
                    43:69:70:4f:3c:04:ee:53:50:bd:be:0a:3a:d4:7d:
                    fd:7d:73:a1:ab:22:a6:11:31:62:3d:c0:d4:af:f4:
                    23:e4:e3:af:5b:55:1c:9d:a0:c8:da:7d:90:b2:83:
                    0d:fb:05:6c:14:9a:3d:1b:6c:4e:5a:c8:28:81:ea:
                    e1:98:00:d7:12:f5:b2:f6:60:17:54:b5:21:95:91:
                    e1:fe:e5:3a:be:94:b2:97:72:9c:31:18:3b:d7:42:
                    3c:26:fa:bb:ff:25:63:19:9e:14:89:77:ee:44:09:
                    be:d2:0d:97:af:05:2a:96:63:95:93:14:6c:46:51:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:86:90:44:A4:E8:0F:FC:6E:B7:04:A3:AB:9B:84:C1:7D:64:6D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/8ab11b8b-8bec-33da-ab98-9d7b4e8dfb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:02:43:64:e9:65:42:24:37:79:6a:46:68:69:c7:f8:aa:a9:
         f1:ad:0d:5d:05:4e:da:1f:54:69:64:39:15:54:3c:33:0e:41:
         32:2f:d7:e2:49:94:c1:6d:3d:44:b5:44:b4:b3:af:8d:ff:42:
         02:34:31:78:a8:8d:aa:cf:9d:4c:cd:cc:34:31:45:15:34:ed:
         ba:79:c6:af:b5:97:78:a9:26:13:38:3b:05:db:fa:8d:1f:30:
         7b:53:1a:58:3b:04:b5:9a:a7:23:8b:bc:4e:66:f9:d3:d1:da:
         dd:da:98:a3:50:11:64:92:13:b4:fe:5c:7b:d6:a2:6e:6d:5d:
         75:c5:31:cb:b1:dc:e2:9a:e3:a7:08:c2:a0:53:bf:6e:51:a3:
         33:22:92:cc:11:d6:cc:9c:2c:fb:e3:67:c1:7e:16:b5:fe:2e:
         90:b9:5d:d1:52:76:d1:c2:8c:d1:a0:83:df:9a:04:f6:48:a3:
         c6:6c:d2:13:a9:c1:0e:96:a6:a8:c6:2f:ab:6e:05:74:87:24:
         3b:6d:05:aa:13:28:e2:92:1a:7c:2f:9e:53:b8:7a:31:93:18:
         69:65:6f:51:6f:b7:22:e0:a4:fe:05:81:27:d3:12:48:55:70:
         40:bb:77:53:e6:ad:bf:18:93:66:5a:d3:ec:f9:33:e4:3e:a7:
         da:2e:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 22:58:35 2026 by rpki-client