Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa
File:                     135e9a6b-d871-31bd-aedc-3aee5546ac72.roa (raw, json)
Hash identifier:          ar5vbKA0lxIoWvH9RJieicsuBzbOMpGGGdka0BHn3Qg=
Subject key identifier:   82:24:2C:80:8D:39:AB:3E:CA:54:24:53:CB:8E:F5:FB:4A:BF:B5:12
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D5E1A6339E16730DC4787CFC0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16696
IP address blocks:        148.59.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:63:39:e1:67:30:dc:47:87:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=920dccae-7fb2-4f6c-b957-ebd32214bab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:40:94:ba:27:c4:9c:b3:fd:05:c0:01:f2:
                    cc:a1:51:3b:c4:9c:13:68:da:07:27:e4:f1:bd:4f:
                    ec:ae:a0:e2:98:1f:f8:8e:89:7c:39:b6:e9:e2:37:
                    31:94:5e:81:6f:75:85:ce:0e:e9:0b:b8:cc:0f:27:
                    41:b7:2b:46:b1:f8:6e:f0:17:91:a1:76:2b:81:43:
                    a5:e6:49:9e:d1:a4:a4:78:9a:26:b3:20:28:9d:c1:
                    b7:a0:39:01:07:6e:54:bf:4d:2b:55:1d:dc:fa:11:
                    cd:7a:05:3c:9e:41:a4:85:0f:09:1f:f4:f2:4e:92:
                    77:95:0e:bf:74:7b:89:35:e6:18:89:95:65:90:b5:
                    f6:dc:0f:61:77:8d:f9:98:e9:af:4e:68:c7:c4:0b:
                    12:8e:e7:12:6a:a1:d6:e5:02:50:55:99:e4:18:71:
                    df:68:fa:8c:58:30:4c:6f:00:b6:08:c3:7c:38:27:
                    e3:b3:39:b5:4d:50:f5:27:b4:04:c4:4c:c1:fd:41:
                    a4:f7:ca:03:b9:e3:d1:af:cb:b5:d4:9a:18:62:8d:
                    d9:8d:17:20:9c:1a:05:2b:17:37:bb:30:14:36:ed:
                    9d:6f:e5:6f:16:7d:5e:a0:b2:19:df:94:8b:8a:4a:
                    e6:6d:dd:f0:2c:5b:29:3e:26:7b:b6:dc:96:19:da:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:24:2C:80:8D:39:AB:3E:CA:54:24:53:CB:8E:F5:FB:4A:BF:B5:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a1:ca:3c:95:8c:b1:33:94:ad:0f:ff:e8:5f:92:c0:25:f1:
         d8:ae:2c:b9:6d:63:c8:c3:36:ab:19:06:58:15:41:9e:f2:6e:
         03:56:a4:5c:8f:6a:4a:64:50:fd:58:33:d3:c7:e7:6c:23:54:
         b2:bd:d2:f7:35:ac:00:df:4c:86:2e:ab:a2:2d:70:f0:95:98:
         83:70:7a:b6:2e:c4:e2:18:eb:89:8e:d1:89:7e:05:69:39:59:
         82:18:b5:dc:ec:48:2f:ec:5f:74:2c:94:6d:d2:31:6b:5a:4a:
         99:b7:ea:bb:27:16:73:f3:14:f8:f3:a3:35:c3:10:c7:5d:b6:
         85:f7:56:1b:a5:5f:20:ab:03:26:b6:2b:60:a7:f9:c6:32:bf:
         e6:e0:72:38:b1:e0:6c:78:71:52:45:2c:ab:eb:cb:d7:ee:09:
         eb:bb:79:10:38:0e:cb:39:51:02:31:6b:c7:ef:b4:92:cf:96:
         a9:99:34:f9:7a:e6:68:79:33:2e:2a:d2:4d:9e:aa:c8:df:cc:
         90:2a:8f:ec:a3:15:84:0d:ff:48:ef:f5:34:ea:71:98:ab:59:
         18:f8:f2:9a:ac:87:88:3f:7e:ff:f8:72:f0:01:b9:56:04:93:
         9d:c6:2a:9e:69:69:e2:06:73:3b:5d:c0:99:16:88:e2:48:1e:
         29:00:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:36:06 2026 by rpki-client