Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa
File:                     16c03017-bbc8-3176-81e9-84ec549cc974.roa (raw, json)
Hash identifier:          JSvTkHzB7uEuoNLY59qU5Fro3973kZ9eg4uI+DukuEE=
Subject key identifier:   0C:01:04:7A:01:01:D7:CA:49:7F:CE:87:88:83:1C:F0:78:B5:21:13
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584EA79C5005AFA08C4D84369200
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63199
IP address blocks:        148.153.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:50:05:af:a0:8c:4d:84:36:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=29f05b06-f1d6-40f6-a845-910cc29bd0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:b3:90:e6:f0:1f:63:45:6b:37:6b:62:a9:
                    35:91:46:f7:90:ca:79:a8:8f:cb:23:6b:e7:a3:f0:
                    91:14:4b:db:1e:1f:4c:4d:9a:07:0a:5b:73:68:04:
                    28:86:42:ad:d0:81:32:fb:fc:89:8c:6f:1d:9d:dc:
                    5f:b1:84:5a:9b:1a:3f:3f:2e:ac:2c:62:fb:1f:0f:
                    8e:f3:57:6a:cc:75:10:6a:ef:a7:45:36:3c:38:7c:
                    bc:4f:20:88:26:d5:54:17:de:39:b1:a8:d4:ae:c4:
                    b0:ab:6d:00:fe:a5:84:4f:5c:5c:e2:a0:5f:8b:a5:
                    5a:98:db:15:4f:69:88:80:70:b2:e5:4e:bc:34:2d:
                    ed:3b:3d:69:bf:69:48:e4:b4:fb:6d:d9:19:a9:60:
                    66:96:57:65:01:df:db:5d:0a:35:ae:32:c6:01:4b:
                    2f:73:7b:93:c9:a5:02:3b:88:44:26:e7:e4:64:ac:
                    a2:34:92:5f:39:93:c9:cc:4f:ec:8e:bf:d4:16:85:
                    c1:20:64:59:6c:dc:fd:c5:41:ea:9d:16:ce:f3:89:
                    4d:7b:25:b1:9a:83:34:a2:e9:89:73:21:56:2a:3b:
                    a8:e3:f5:1a:89:d1:84:3a:08:aa:03:99:ee:19:70:
                    9d:3f:74:01:72:82:7d:42:aa:eb:45:8b:46:d6:7a:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:04:7A:01:01:D7:CA:49:7F:CE:87:88:83:1C:F0:78:B5:21:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:26:d5:a3:6f:ba:64:c2:cc:55:1f:3d:63:b1:eb:79:6f:4a:
         78:da:6a:d1:b7:52:35:d3:2b:3d:80:73:44:2c:e8:ef:4c:c5:
         61:69:73:9b:a7:08:68:3a:4c:69:46:cc:f4:51:be:1f:61:72:
         48:5b:29:03:e0:ab:94:67:f4:81:79:35:f0:d8:af:e3:5e:12:
         24:fa:f7:51:4f:15:7c:23:69:bb:30:9c:d1:05:bc:86:65:f4:
         72:4d:d5:09:3f:52:d8:6d:1c:11:c5:59:32:4d:0e:e0:12:c8:
         a4:a6:e1:0a:2e:9c:6f:64:46:bb:8e:cf:2a:2f:f2:ec:17:2a:
         89:05:bb:af:99:b5:8f:9a:f8:90:c9:18:ec:58:5f:4f:fc:bf:
         63:f4:b7:ef:78:09:3d:aa:04:23:ca:ee:4b:4c:60:f0:61:fd:
         97:70:16:ad:05:95:36:6a:ab:9d:14:9f:82:c8:01:26:c3:50:
         59:18:17:74:2a:7b:d5:f8:68:cc:ce:77:1a:20:d4:04:e8:5c:
         0f:f3:41:d5:17:f7:b5:02:f2:05:06:41:56:87:b4:ca:83:9d:
         6a:2e:c8:2f:3c:7a:37:77:9d:b4:58:ea:43:f1:30:95:1d:67:
         3e:87:87:de:50:e3:71:3f:3e:13:45:2c:2a:98:c8:be:4f:be:
         1d:1d:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:56:36 2026 by rpki-client