Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa
File:                     700e458d-b871-3d96-a213-ce09bd907b87.roa (raw, json)
Hash identifier:          WpPH5Nofe3TzfxbLCjgM103trw86QI9I6pC2fNJ1l8g=
Subject key identifier:   A6:C1:D0:11:55:06:CB:04:30:61:99:7F:A2:B8:45:75:83:9D:AD:C5
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584EA788505302521DCB687DE1E0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63199
IP address blocks:        148.153.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:50:53:02:52:1d:cb:68:7d:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7e4ae6ac-3a1c-40e0-912f-84599869cfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:66:81:42:a2:42:66:d5:09:a3:42:2e:85:
                    29:e8:64:76:2e:44:23:6c:ad:61:9f:e1:01:8a:9d:
                    9d:12:c9:ce:23:25:35:d8:ab:d7:74:5b:d2:0f:36:
                    3f:f9:db:62:08:0f:42:4d:00:87:37:52:17:f6:59:
                    15:93:c8:68:2f:71:b1:a4:5e:49:4e:42:b0:39:54:
                    99:f5:76:93:b6:7e:6e:74:48:4d:b7:80:da:1d:85:
                    46:03:f3:03:96:22:fd:2c:80:66:56:98:f6:a4:91:
                    e7:b9:a9:b0:47:34:88:18:e6:4f:df:4c:e1:bf:ce:
                    5c:cb:f7:8c:1b:aa:0a:95:b5:c9:9f:c4:09:a2:65:
                    6c:01:e9:55:11:47:7b:a9:d0:5c:44:8f:54:3d:c0:
                    85:d3:6e:29:bd:8d:96:06:fb:a9:8c:53:fc:f7:e7:
                    f9:62:a6:f9:d5:0a:ac:81:f2:ea:eb:d7:ac:7a:af:
                    bc:21:c4:53:3a:2c:16:4b:00:3d:29:44:97:ac:51:
                    8c:bb:d1:6d:56:dc:7a:8c:6c:40:01:b6:34:32:98:
                    82:51:a2:78:fe:7a:55:83:67:aa:1c:b6:a7:6d:f2:
                    1d:0f:76:b4:38:53:df:f7:df:c6:7d:09:be:bc:8c:
                    2e:0f:00:b4:73:c8:37:ce:d6:61:c4:45:cb:17:6e:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:D0:11:55:06:CB:04:30:61:99:7F:A2:B8:45:75:83:9D:AD:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:bc:d4:a0:88:97:49:68:33:a6:e2:87:1b:57:11:f4:97:
         41:68:44:71:e4:85:e0:a4:7f:ed:20:2a:52:43:c2:d1:f0:02:
         1a:d7:c4:6f:f7:5b:7b:8f:01:52:8a:81:43:04:e5:da:05:a8:
         c6:01:c4:3a:0f:ba:48:b5:40:56:65:08:89:47:4a:1f:f7:a6:
         42:de:88:5a:e6:e1:c0:ef:f7:2d:79:ca:b2:96:d3:60:07:f6:
         72:6e:67:c0:30:fb:76:e2:4b:c8:df:f6:20:dc:4d:ad:ac:aa:
         27:f3:b8:58:17:a9:85:2e:73:fb:bd:2f:36:bb:69:6d:46:d2:
         c8:78:e8:c7:07:fb:36:49:ea:3c:63:78:a4:7f:e0:03:25:b4:
         fa:75:23:35:fe:80:3b:ea:ef:df:7a:cd:5d:a8:5d:37:13:bd:
         7a:c9:73:63:86:f2:c2:8e:86:74:03:bc:a7:71:6c:d3:8b:70:
         2f:5c:ec:dc:4c:ad:cd:76:b9:f4:69:cb:1e:ee:d9:e7:b2:36:
         e3:d5:13:c4:c1:f4:23:ac:c5:46:3f:be:e8:81:aa:30:be:85:
         d9:42:a9:1d:f2:6d:b7:88:03:1d:18:8f:3c:83:7c:14:1f:a2:
         b9:10:0f:0b:4a:cc:05:3f:42:a4:3a:7b:be:16:5c:69:20:a9:
         b1:9d:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:17 2026 by rpki-client