Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa
File:                     6367678a-e23c-33d0-8e43-2013d216b88a.roa (raw, json)
Hash identifier:          8oRdTdKZgg9BfZB9hmmkUCoNpmlyC2Qjltl5gKx3YIQ=
Subject key identifier:   B6:00:CD:00:4A:38:09:50:FD:DF:FF:44:A4:CA:30:B5:0A:00:71:66
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584ED431EE68341DA5A248FFA700
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     63199
IP address blocks:        148.153.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ee:68:34:1d:a5:a2:48:ff:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=2920d690-282f-4060-ab2c-194828216e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:9b:4b:2e:fb:33:f0:26:eb:78:a3:17:24:
                    cf:3f:13:71:d4:5e:e2:4e:3b:1c:1f:83:3b:dc:63:
                    45:e2:41:8c:31:db:0a:db:5d:f2:97:60:d2:b0:6e:
                    3e:bf:b7:d7:d6:8c:07:3d:5f:66:dc:1c:8e:19:35:
                    84:76:51:8e:68:f4:23:2b:ff:2a:88:7a:b9:4e:63:
                    0d:a2:e5:a8:41:91:b9:8f:86:99:ac:7d:62:a3:bf:
                    03:bc:1d:fe:64:33:42:7d:65:77:6b:ca:8b:5c:05:
                    80:85:a7:f1:87:69:1d:3f:ac:d4:42:54:9e:2b:3c:
                    90:cb:33:0f:80:e2:5e:6c:c6:f7:6b:3f:b9:5c:ba:
                    15:49:93:5f:d4:63:1c:c0:f3:a4:0e:9a:12:b7:bf:
                    be:16:16:fc:02:e2:8d:08:53:52:72:ee:9f:55:7a:
                    89:57:9b:cd:f2:5b:5f:3b:68:44:c6:c0:fd:e9:fa:
                    7f:be:f9:db:6a:85:d5:b2:bf:ec:14:46:2d:54:43:
                    6b:b0:fb:c2:c3:3a:48:bc:05:54:e9:01:81:45:33:
                    3b:39:6a:8e:2c:92:06:c6:0f:b2:20:b2:da:92:09:
                    77:33:c7:6d:8b:db:05:39:31:63:bd:93:7c:10:80:
                    da:80:e2:7f:91:6f:88:68:f2:cc:5f:33:ee:b9:25:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:CD:00:4A:38:09:50:FD:DF:FF:44:A4:CA:30:B5:0A:00:71:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:1f:e9:82:e8:20:34:2c:2b:eb:91:82:4f:64:c1:32:13:
         75:5c:7f:c5:f7:e5:71:50:5a:db:2d:ca:e3:3c:29:68:89:6d:
         4e:f6:59:89:eb:c2:ba:58:e0:aa:b1:f5:90:90:eb:57:61:ce:
         3e:b3:05:86:92:ac:a5:54:db:e9:25:e6:dc:58:7c:24:c6:9a:
         18:96:7b:25:31:16:24:18:d4:93:9c:4d:9d:a8:ce:44:bd:cb:
         f3:c0:98:e7:4b:81:e1:e6:62:30:68:f3:b3:2f:03:79:02:75:
         58:c4:e8:e9:e3:a8:a7:f0:94:60:2c:49:fa:8a:73:bb:4e:01:
         1c:6e:f2:ad:25:0a:15:66:8b:55:94:c2:45:91:bd:89:7c:22:
         37:eb:94:f1:4c:ab:d1:4b:cb:f0:af:63:64:fb:13:2c:a0:d6:
         5f:58:e3:bf:e1:e6:68:b2:9d:37:36:0b:e7:87:57:16:65:3f:
         de:34:be:a0:e1:a5:3c:7f:35:99:70:5c:15:d6:93:0b:60:11:
         62:2b:3a:9c:22:14:3c:3a:d6:e3:29:c3:04:dd:24:3b:24:7f:
         d3:c2:6a:b1:20:72:80:4c:52:6b:53:05:d2:9b:31:8c:16:8a:
         88:5f:f9:fb:ad:96:02:ca:61:fb:f6:ab:7c:c3:c8:da:35:c4:
         f8:06:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:23 2026 by rpki-client