Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa
File:                     6bc53289-b90e-34be-bcd9-c39465f48c2f.roa (raw, json)
Hash identifier:          8jG8mC4xB6/ShaRhEqb+rkQP83GVJiYjVuiQFEDPUHk=
Subject key identifier:   2E:87:59:96:54:98:E3:62:AB:C7:F5:9B:E1:BF:09:31:E1:13:2E:E0
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584E07008D655E2E057247FB2840
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     63199
IP address blocks:        148.153.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:8d:65:5e:2e:05:72:47:fb:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=fa76456b-bb54-48c5-8864-ec122765913e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:91:66:b2:4e:df:d7:62:87:fc:70:88:ff:
                    48:92:9f:3f:16:0a:40:c8:4e:7b:91:12:cf:93:28:
                    9f:a3:fe:13:4b:31:99:82:94:02:f4:8c:13:37:58:
                    61:b6:0f:b5:a9:57:be:29:09:ae:82:eb:04:43:44:
                    b3:92:17:1f:7f:20:ad:7e:ac:2c:f1:f2:cf:3c:ea:
                    f5:c7:6c:0f:0a:5b:b9:a5:63:21:a6:8e:9f:d4:04:
                    c2:27:a5:67:8d:bc:d2:45:d1:cd:01:1a:02:e6:f9:
                    e6:4e:06:42:bd:29:9a:50:38:db:8a:f3:1e:af:25:
                    81:64:71:93:c5:29:b6:a8:68:5d:f3:63:c3:e7:c5:
                    5c:f5:71:41:9f:c4:39:60:9c:17:c6:b0:62:bb:98:
                    c6:56:5c:48:d7:ad:22:d4:ca:89:be:da:4a:85:71:
                    48:1a:9b:a2:00:b7:57:01:9f:f0:89:06:fe:83:ec:
                    62:c0:69:42:db:e1:1e:55:59:eb:9f:d3:ee:75:a0:
                    12:f9:31:a7:ab:6d:22:fe:32:30:da:08:0d:8c:1a:
                    4a:bc:10:96:95:4b:87:5e:6d:28:f3:95:bd:1d:06:
                    9f:27:9d:32:65:42:69:59:78:2f:76:f4:2c:53:41:
                    1b:5c:e1:b8:4f:4a:df:23:1c:5a:31:63:33:c9:11:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:87:59:96:54:98:E3:62:AB:C7:F5:9B:E1:BF:09:31:E1:13:2E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5f:b0:28:1d:0e:64:2a:1f:71:5c:87:e8:4d:d1:70:c3:ba:
         23:9a:b2:21:45:71:38:e9:86:97:8e:b4:1c:b6:7d:16:28:99:
         7d:a1:29:cd:10:dc:79:a7:fb:78:a8:bf:02:d3:d6:f6:c8:56:
         72:e5:d2:49:84:60:02:b3:71:f0:1a:fd:6f:f2:a7:c9:e0:31:
         ee:bc:f8:4f:9c:77:8e:2a:4d:c3:e9:21:95:f3:33:07:5a:d0:
         ed:aa:5a:19:f8:52:56:3e:97:ae:1d:e6:02:42:db:c4:3c:94:
         19:af:59:ea:00:1d:14:e8:68:74:ba:b8:43:55:7f:2c:94:99:
         85:2c:5e:40:d6:51:2a:1f:c1:b5:c9:9c:c5:3e:ec:03:f0:9f:
         07:97:6f:70:44:a2:5c:c8:17:ca:a8:89:28:d9:75:05:a2:52:
         a6:32:3b:d3:34:51:f0:34:f5:4c:f3:c3:27:e0:b4:03:c6:dd:
         bc:9c:2b:66:5c:a9:be:f5:e8:ee:04:31:9b:a3:44:6b:14:b8:
         bc:d0:cd:6f:c2:d7:20:60:7e:14:be:c4:cb:3b:b7:91:dc:cb:
         40:7f:49:6e:7d:f8:fd:61:5b:3c:f6:11:16:b4:4f:b5:d9:df:
         04:87:1a:6d:0d:6f:61:91:8c:94:7a:c2:73:9c:53:5f:e9:da:
         4f:30:5c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:05:11 2026 by rpki-client