Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa
File:                     6a46475d-4bf3-3cf5-806a-8e9461339682.roa (raw, json)
Hash identifier:          K7g8+Cz+z9FzGuVWdlz09UrDv3O51l4hcrLJ/EZAwPA=
Subject key identifier:   30:0B:CB:3F:AB:33:AF:99:EF:38:A1:67:F3:E1:F5:12:8C:95:DD:7B
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D5E1A6DA84F70461F70AF1D00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16696
IP address blocks:        148.59.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6d:a8:4f:70:46:1f:70:af:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=bbb4372f-9b26-47b8-8b64-b596bfef773f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:bb:59:a6:e2:90:4f:3b:04:aa:24:08:c0:
                    3d:35:83:60:d0:a1:84:eb:f7:af:4e:d4:89:22:c0:
                    92:17:8f:c8:9a:1c:e2:ab:d7:07:b6:1f:d0:36:67:
                    d1:77:3a:6a:a0:78:ea:2f:c2:fd:a6:ac:eb:1b:fa:
                    65:21:72:a9:52:39:d1:3c:8c:31:e4:00:c6:9d:f7:
                    1e:fb:e2:49:5f:dc:7e:f6:cc:8f:28:dc:d0:79:a3:
                    fd:37:9b:60:26:cd:a9:e8:f0:f1:ac:27:ed:75:1b:
                    b2:45:70:74:1a:1f:3e:0a:82:27:8a:d3:01:47:1b:
                    91:90:73:47:1f:55:21:4d:8b:d9:e7:a9:6d:6c:0b:
                    5e:14:27:89:48:c9:53:e0:32:c6:cb:b3:96:70:78:
                    09:dd:a5:30:49:af:f7:c7:84:72:ec:b5:4e:b0:51:
                    5e:d9:eb:a8:b2:42:b1:8a:77:b5:d9:c9:2d:a8:77:
                    49:1c:04:59:2e:06:50:ac:93:89:8f:8f:06:7a:c2:
                    25:fb:00:ac:43:36:f8:01:6c:d3:1e:a8:e5:4d:34:
                    00:55:f5:d7:23:ed:09:18:19:52:63:4f:5e:4d:4e:
                    b3:54:95:7b:28:c2:96:62:dc:85:cb:6b:46:68:4b:
                    b1:3c:25:31:ce:ed:72:8e:8b:2a:69:dd:30:7f:99:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0B:CB:3F:AB:33:AF:99:EF:38:A1:67:F3:E1:F5:12:8C:95:DD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:db:2e:4b:e4:1b:fd:d5:94:d9:47:90:40:c6:7e:47:bb:40:
         b8:eb:57:96:e7:d3:1a:79:06:20:1d:ac:13:8c:45:64:fe:61:
         c4:27:b2:b7:63:c3:d3:bb:76:96:17:65:86:0a:7a:6f:a3:cf:
         20:84:21:b8:cf:10:43:0e:e2:a1:7c:27:6a:06:75:ea:eb:d1:
         d2:4c:f2:07:27:70:29:d2:69:91:31:6f:1a:29:d3:47:3f:80:
         2d:c8:6b:b9:22:c0:f3:3b:39:29:4d:85:77:f0:ca:da:95:3b:
         3a:23:60:a8:f7:c2:41:7b:82:4a:5f:1e:34:66:cf:f4:a3:74:
         a5:47:11:02:83:08:d5:9b:4a:2c:db:70:42:fc:95:d7:f0:09:
         b2:1e:0f:07:b2:07:b9:c9:cf:9d:fb:e8:70:6b:1f:d8:2b:f9:
         db:7c:a8:c4:5b:8c:04:f8:15:da:90:f5:57:86:73:a0:16:bf:
         96:d3:34:31:bb:58:4b:f8:37:bf:dd:fd:0c:ce:e0:4e:4d:08:
         a2:07:14:37:2d:6c:b8:42:e4:09:a4:ae:74:f0:db:21:c4:82:
         01:b1:69:92:50:9e:28:5a:7f:99:8b:cd:67:06:33:81:e3:7f:
         65:e9:41:6c:42:db:b5:d3:bc:5e:5f:9b:54:ad:e1:e1:27:0a:
         d4:69:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:36:29 2026 by rpki-client