Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/79393f20-6fe7-3803-bbc1-8d40d92784f4.roa
File:                     79393f20-6fe7-3803-bbc1-8d40d92784f4.roa (raw, json)
Hash identifier:          Du/o6bzw/7ohJnO7U9Z+5UmBSTIewxepu9YqHFcTpGw=
Subject key identifier:   6A:53:B8:06:DC:EC:65:AA:65:D5:45:24:AF:1E:63:02:24:91:8C:1D
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584EA8EC3E1062E8703110795F00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/79393f20-6fe7-3803-bbc1-8d40d92784f4.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     63199
IP address blocks:        148.153.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3e:10:62:e8:70:31:10:79:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=300fe42a-a03e-472b-91a9-8533fffff0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:47:33:1d:0e:75:8d:c8:0a:b4:6a:7c:65:
                    a3:e0:17:7a:2b:f9:21:03:36:53:89:86:fa:e7:5a:
                    e7:99:52:58:00:93:49:4b:4a:b8:1e:2a:51:8e:5a:
                    57:0a:a2:c4:ee:cc:37:87:0b:89:3c:f9:96:76:90:
                    3b:f5:fd:a2:0f:c0:8e:35:50:83:07:15:44:ff:fa:
                    f4:03:e7:ab:e7:ca:bc:9c:8c:a2:b4:f7:43:0d:fe:
                    28:29:7f:f8:5d:e3:75:a9:55:5b:eb:aa:88:ac:72:
                    b9:7d:cb:46:9b:33:4a:09:a3:c1:be:7b:d7:26:3e:
                    dc:81:ce:53:48:62:b3:ff:52:29:b4:b0:b1:1c:23:
                    b9:f6:c2:64:f5:61:02:09:ce:87:5f:63:e1:f5:dd:
                    dd:da:02:90:ef:78:da:57:eb:e8:41:f1:2d:60:d8:
                    9d:cb:e6:25:65:68:37:f6:17:ef:16:6f:b5:db:c3:
                    c9:04:53:2c:e3:a7:c6:0b:6c:2c:ba:68:ac:7f:a4:
                    4c:6f:bf:fc:fc:ce:90:59:ca:cd:92:79:22:02:d5:
                    37:10:8d:eb:14:5f:4f:1e:08:1b:15:4b:fa:6a:05:
                    5a:a4:be:66:58:55:ff:24:05:7e:37:63:34:06:d7:
                    89:8b:57:98:6a:27:da:ef:c8:de:2a:44:71:df:d2:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:B8:06:DC:EC:65:AA:65:D5:45:24:AF:1E:63:02:24:91:8C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/79393f20-6fe7-3803-bbc1-8d40d92784f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:34:16:13:fc:8c:2d:5e:cc:d3:f8:e1:b1:3e:52:b2:18:a0:
         c2:6b:0d:37:fb:1e:52:ad:a2:19:5f:81:5f:9c:45:f5:c7:91:
         08:a1:44:7e:c0:5a:52:fd:82:43:b6:8a:ed:62:5d:ab:24:c1:
         d6:ac:aa:e4:49:89:b2:a5:42:1f:e1:ce:f9:56:2a:78:f4:c1:
         b9:92:30:c3:4b:65:67:84:5b:48:fd:01:39:e5:15:f0:f0:0e:
         80:21:bc:87:3c:37:bc:b6:97:20:ab:28:3e:31:ab:6e:89:4b:
         aa:af:b3:21:50:9b:36:66:b9:ed:51:18:40:07:cb:a8:7c:e7:
         b2:7e:bb:ef:7d:a1:8d:c3:1a:98:c2:86:6e:0d:ed:3f:86:49:
         0a:e5:ba:0a:09:20:33:d0:ed:75:ca:fb:da:2d:b0:70:52:7a:
         bc:df:79:5c:83:30:1b:19:7b:c6:8b:9b:84:ea:13:da:3f:3e:
         24:27:96:50:04:27:b5:b5:74:d4:23:17:8a:7d:a4:7f:b0:de:
         35:84:c4:f6:af:c8:fd:81:39:1d:e7:4d:81:eb:69:50:5f:29:
         12:1c:6b:22:f2:46:a0:3a:38:68:8f:5f:50:a6:ca:0f:04:8d:
         52:ed:33:8b:e3:30:76:f8:bf:88:47:a2:5a:90:99:89:c6:23:
         50:ce:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:33 2026 by rpki-client