Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa
File:                     02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa (raw, json)
Hash identifier:          YS+N1AGB8o1gr6y6ggPM3P/avkNytVTkBrZ5V4G7rjY=
Subject key identifier:   CD:98:E6:B9:BC:4D:04:3C:70:F8:BF:F7:0F:49:07:9F:93:84:9A:9E
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584EA794F8F5CEFD436C3060CE80
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63199
IP address blocks:        148.153.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:f8:f5:ce:fd:43:6c:30:60:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=737619e6-92f7-46be-a0fc-76078ee6855b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:1c:6c:11:d7:10:cb:bc:6c:4b:6a:b1:c3:
                    8d:52:c6:9b:5a:4e:3b:d4:c2:78:40:41:e6:62:6a:
                    d2:66:83:8f:4f:1b:9d:13:5d:f7:a5:f4:74:64:e0:
                    24:f0:dc:69:48:7d:cc:a9:e5:39:fc:2a:97:d8:58:
                    71:db:57:2b:be:e8:d2:72:bd:33:16:71:be:4e:6e:
                    d5:46:42:74:dc:b9:37:26:3f:35:c7:7d:45:30:0b:
                    19:bf:98:04:2d:fe:31:de:ff:b0:86:b1:35:f4:e2:
                    41:2f:11:78:66:95:e8:10:12:2e:0e:42:68:6d:e9:
                    d5:f1:f6:4d:55:96:7c:82:e8:07:76:9c:1d:f0:97:
                    7c:ed:19:7c:f0:56:30:39:2e:9b:65:98:f6:d9:3f:
                    c6:4e:cd:88:b4:20:2d:4f:12:5a:5e:ab:3e:86:41:
                    e4:a4:dc:10:08:66:ce:2a:41:e2:b7:8b:bc:79:ee:
                    7c:69:f6:8e:cd:7c:06:71:e3:5c:89:ed:3a:24:84:
                    e6:e9:df:77:7a:5c:57:5b:72:ff:e3:18:85:c3:5b:
                    37:6e:2f:f6:91:70:01:39:4f:35:4c:63:c1:00:fe:
                    c2:74:63:e8:ee:07:20:81:e8:06:17:3d:18:3c:60:
                    66:d9:8f:a7:1c:24:80:d8:1c:11:26:d0:5a:72:db:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:E6:B9:BC:4D:04:3C:70:F8:BF:F7:0F:49:07:9F:93:84:9A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:86:86:3d:92:8c:ce:f9:15:e4:d4:4c:55:4b:19:b9:4a:1d:
         89:1a:7d:d8:a4:47:4d:15:40:d3:ab:88:09:65:38:5d:1d:86:
         46:71:ec:4d:8c:4f:11:0f:24:b2:6d:18:58:77:8a:e0:51:51:
         3a:ef:d3:a4:3c:9f:ca:2a:4e:de:be:4d:bf:ce:89:d2:48:e6:
         64:4b:bc:cf:01:6e:b8:cb:66:fe:d5:2c:96:6e:88:77:82:2f:
         af:eb:f3:6b:04:60:6f:9f:59:a1:81:92:74:73:7b:94:35:98:
         5a:c4:b2:9b:37:71:c5:67:ef:6d:e5:0e:4d:20:85:5d:f3:b2:
         3a:01:2d:07:b0:42:9a:8e:c1:d2:fd:6d:d9:14:33:4a:69:e1:
         9c:4a:15:e8:6d:27:16:83:01:b8:a0:f9:a3:56:28:2d:8c:32:
         05:e4:26:2e:b4:86:b0:f8:ad:32:bf:ca:0c:1b:1e:73:a1:71:
         2a:43:77:b3:7f:a0:80:89:2e:55:c9:81:0c:4a:77:d6:56:8d:
         4b:db:0e:24:47:a7:1e:bc:46:87:95:26:36:0c:e6:f8:72:3e:
         ae:2c:23:fd:bb:04:90:7b:14:39:24:e9:05:29:b1:2b:c3:e1:
         a0:95:5e:99:3d:6c:e1:2d:cb:52:14:97:2e:3a:87:fb:c1:5a:
         77:4d:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:21:35 2026 by rpki-client