Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674/08708e35-4cec-34e8-8c54-d3b41503a9b5.roa
File:                     08708e35-4cec-34e8-8c54-d3b41503a9b5.roa (raw, json)
Hash identifier:          IqIJCFi5V/qic2a0R1JwiUhmr5i5MfF7nhTbhRapekc=
Subject key identifier:   65:98:92:36:9C:F1:2E:5E:2A:1E:47:BF:91:F6:EB:24:65:98:70:6F
Certificate issuer:       /CN=a9190674-1803-4ffd-add8-c908121c1674
Certificate serial:       010D0C9F4328584EF7A136A001E6B8F78BA0E080
Authority key identifier: 09:DF:C2:71:53:19:F2:41:0D:5F:F2:9C:41:88:8B:38:C1:88:45:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674/08708e35-4cec-34e8-8c54-d3b41503a9b5.roa
Signing time:             Wed 26 Aug 2026 17:38:00 +0000
ROA not before:           Wed 26 Aug 2026 17:38:00 +0000
ROA not after:            Tue 24 Nov 2026 18:38:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674/a9190674-1803-4ffd-add8-c908121c1674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674/a9190674-1803-4ffd-add8-c908121c1674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:a1:36:a0:01:e6:b8:f7:8b:a0:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9190674-1803-4ffd-add8-c908121c1674
        Validity
            Not Before: Aug 26 17:38:00 2026 GMT
            Not After : Nov 24 18:38:00 2026 GMT
        Subject: CN=bed8939c-7824-48ec-8a02-4d36a4804e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:78:25:99:df:e9:92:8f:42:1e:98:75:a6:
                    11:32:df:78:4f:7d:4d:d5:95:07:56:aa:7e:37:cf:
                    99:3c:0f:e2:a7:41:40:1c:ca:81:99:02:2e:ac:8a:
                    ce:53:93:bf:be:15:fe:32:27:e4:38:bd:ad:8a:de:
                    df:50:f9:a5:f2:4b:25:0e:18:b7:68:7c:7e:e0:90:
                    9e:e9:cf:bd:bb:cd:c0:70:66:f0:6c:8b:b8:d7:61:
                    17:17:6c:d1:04:f9:9f:f3:88:26:39:bd:6d:07:69:
                    56:4a:2d:11:cc:20:75:01:8d:bd:09:9f:54:be:a3:
                    28:26:a3:3a:66:bd:96:93:35:0e:f3:53:f6:ea:de:
                    1b:cd:d0:da:6e:dd:d5:ab:ef:cf:27:7a:4c:bf:d1:
                    8c:ea:6f:29:9f:52:75:81:2c:91:d0:b7:7b:e3:cf:
                    ad:d0:be:16:eb:82:90:59:74:a0:42:82:e3:a8:9f:
                    d1:88:49:96:88:9f:73:d5:28:07:f6:d4:51:2f:1a:
                    3c:29:d4:6e:e9:07:df:6f:1a:5b:d9:b1:a8:3a:e2:
                    6f:99:73:f0:01:59:ea:4a:4a:3c:40:93:70:df:5f:
                    a8:e0:86:56:1a:49:63:0f:7c:c1:58:46:4d:85:55:
                    15:3e:ac:2e:4a:38:55:28:85:41:1b:14:71:76:02:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:92:36:9C:F1:2E:5E:2A:1E:47:BF:91:F6:EB:24:65:98:70:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674/08708e35-4cec-34e8-8c54-d3b41503a9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674/a9190674-1803-4ffd-add8-c908121c1674.crl

            X509v3 Authority Key Identifier:
                keyid:09:DF:C2:71:53:19:F2:41:0D:5F:F2:9C:41:88:8B:38:C1:88:45:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a9190674-1803-4ffd-add8-c908121c1674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:ef:b3:ff:b5:42:ca:b8:07:24:0c:4c:2c:17:5c:d2:2e:
         bd:c1:31:c6:08:74:d1:2b:b0:14:57:12:bd:8c:6e:69:56:cc:
         d8:91:c7:b4:f2:6f:de:57:0b:a5:7a:24:c3:30:b1:34:9e:8d:
         0e:d0:cb:c1:76:bf:b6:82:c0:7f:1a:23:57:84:94:e5:ae:09:
         ed:45:17:29:93:83:ed:b2:61:9d:b9:99:8b:98:5a:4b:16:d2:
         29:b5:bd:00:3f:f2:d0:c1:3c:98:4b:4c:95:4f:1a:0d:77:8e:
         41:59:16:9e:d0:9f:28:59:1b:0d:34:dd:83:03:7a:8c:5c:e8:
         8f:6e:94:f3:66:1c:68:53:ca:fa:e0:0b:ea:ca:19:aa:ac:4b:
         64:81:ac:a0:c2:80:45:8c:b9:87:22:9d:54:39:65:d7:cf:07:
         ad:1d:60:48:47:ea:dc:30:1c:96:e7:9b:a4:aa:1b:92:ee:50:
         23:d1:8d:1e:08:26:74:29:9b:ca:de:b7:be:ab:0a:96:78:ae:
         03:9a:0a:0b:bb:f5:63:2b:84:9b:70:89:32:6a:7e:69:20:a3:
         b5:73:f7:8a:66:7e:86:21:ee:7c:87:10:a5:ea:66:8b:ea:50:
         9e:cc:d8:09:d4:82:40:cc:3e:81:e5:3b:48:10:1f:cb:d2:c0:
         82:81:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 10:58:07 2026 by rpki-client