Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa
File:                     264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa (raw, json)
Hash identifier:          8F2LMb/XcKMEJWdeLVJzyBbKImuVBYJpl5ZzB7fi6us=
Subject key identifier:   51:CD:3C:4D:34:C5:ED:87:F2:6B:42:20:E7:F2:DB:FD:D3:5F:EF:B9
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584F5767FFB1558200209F1D0880
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     63199
IP address blocks:        148.153.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:ff:b1:55:82:00:20:9f:1d:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=adfaebc4-d46a-43cd-8ee4-05fcab40566a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:16:79:76:27:70:eb:23:83:3a:ba:3a:1e:
                    21:3f:6b:4b:51:02:11:4a:56:1f:dc:58:dd:5a:16:
                    a9:3e:d8:e5:fb:8b:44:0d:e9:3e:8d:1d:91:41:2c:
                    95:51:8a:6e:41:fd:98:3b:42:fa:04:83:e3:56:8c:
                    31:a5:17:54:fe:12:6f:3c:c6:b0:ea:5b:3b:d9:ae:
                    be:a4:a4:a1:91:a8:8d:32:37:fc:e1:cb:f6:d1:87:
                    3e:3a:1e:f4:80:2c:88:57:df:a3:f4:55:c9:90:d1:
                    d5:b9:9f:b0:27:5c:35:a1:5b:ce:52:6d:91:1b:5e:
                    eb:68:12:ff:fe:0f:70:82:2a:91:f6:c9:e5:c4:39:
                    52:f5:a6:1f:17:c8:82:1e:54:cf:eb:3a:e5:2c:fe:
                    21:de:36:b3:7d:8b:91:b0:83:75:1a:49:fd:cb:51:
                    d8:89:7b:34:4e:66:5a:48:1b:d0:99:73:fe:3f:0d:
                    71:ad:93:c2:ba:f3:88:08:aa:14:62:df:0b:d3:ea:
                    4a:35:c5:d4:fe:cd:21:59:c0:aa:51:b9:3a:0e:8f:
                    df:9a:d0:01:8e:8d:ce:06:92:dd:ff:f9:02:4d:62:
                    80:40:a8:dd:ed:a4:5c:78:6c:ca:0b:70:08:b5:24:
                    50:68:cc:4a:19:5f:0a:32:92:f8:97:72:3c:79:65:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CD:3C:4D:34:C5:ED:87:F2:6B:42:20:E7:F2:DB:FD:D3:5F:EF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:93:15:a3:63:e4:9c:26:f3:49:2e:69:66:91:34:fe:a2:7e:
         c0:e5:19:a4:3e:4b:a6:a8:d6:8d:67:d3:a2:92:99:74:fe:7b:
         ed:24:fb:d4:d8:06:bd:c3:41:cb:02:45:94:af:63:27:6f:5a:
         17:ea:8c:11:b9:f3:b5:9d:98:d0:5d:ed:bc:49:9d:4a:fb:63:
         77:7a:24:e7:84:c9:26:d0:fc:90:53:bc:33:bd:c8:c3:8a:57:
         47:c0:94:c3:c6:d3:af:db:18:a6:80:55:85:61:48:d1:08:26:
         c0:c6:80:f0:76:27:e6:4f:13:80:2a:2a:8d:25:92:fa:ef:5e:
         e9:f8:be:e8:dd:a6:19:02:ec:32:6c:fe:71:5e:52:3b:97:e6:
         5c:55:36:d3:65:9f:c5:2f:6d:0e:a9:59:ed:96:81:6b:13:40:
         3b:40:67:bd:02:98:c5:13:df:eb:68:0a:86:1d:d1:1b:16:27:
         dc:3c:a2:da:8c:9e:9d:3c:b7:b7:3c:be:b7:08:4f:c6:c5:e4:
         35:30:ac:a1:43:78:06:f6:6c:3d:e4:c8:5b:9a:71:e5:05:6d:
         5e:e9:ee:4c:41:74:99:c1:57:7a:03:7d:54:94:85:82:2c:91:
         ef:b3:e5:1f:1f:21:48:36:08:bd:54:80:83:97:ab:e2:ea:d8:
         a4:1f:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:17:41 2026 by rpki-client