Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
File:                     c826d2c7-c973-3a95-b348-80cf23735821.roa (raw, json)
Hash identifier:          QDljiOceV6uz1sRFPqzzA2pQosNf/z/tcUjM71jXFm0=
Subject key identifier:   AB:EA:D8:FE:B0:CA:50:7F:01:62:30:F6:53:A3:26:DE:08:3D:69:53
Certificate issuer:       /CN=a75ece7f-5380-409e-b027-b6733c088c34
Certificate serial:       010D0C9F4328584F4975EB93AC2D3E89C1EC2D40
Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     59
IP address blocks:        146.151.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:eb:93:ac:2d:3e:89:c1:ec:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b5bfa2af-fb49-4bca-85ea-6d2ec6f8dd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:fc:59:34:72:1f:70:b4:51:58:14:25:0d:
                    cb:14:29:fd:c6:70:2c:58:ba:32:e1:f9:01:51:50:
                    fc:7d:e3:9d:f3:6a:21:3f:9b:aa:4b:95:9f:89:40:
                    c8:31:4f:b0:cf:74:3b:61:97:98:43:31:6b:ba:06:
                    ef:8f:05:97:c0:de:ec:d7:b3:d0:20:62:bb:a9:34:
                    f7:7a:d0:f7:5b:b1:72:f8:19:7b:4c:c1:d7:ed:4e:
                    50:41:48:7e:cc:66:1f:2d:78:20:1b:d5:f8:6a:39:
                    fb:fc:0f:ac:d3:de:27:29:9c:4c:08:30:0a:6b:aa:
                    48:e1:06:73:22:7f:f0:88:5c:9d:37:41:ef:ed:51:
                    6f:cc:a4:f0:11:62:72:8f:a4:a2:0e:6e:16:6a:6d:
                    a5:5d:d1:6a:24:85:6f:53:98:c5:f7:6e:03:11:41:
                    5a:21:2e:b1:43:0a:a1:53:3a:e0:dd:23:de:a4:f5:
                    46:34:8b:63:d2:b7:f0:ff:4c:87:6a:fb:f8:00:1f:
                    11:cd:a2:e7:46:8e:2d:c1:5a:57:ec:9f:4f:99:db:
                    ff:e8:f2:43:32:5a:c0:15:9f:d7:76:04:6b:d9:6c:
                    32:25:a7:97:d3:68:cf:92:3c:fe:82:0a:14:12:02:
                    bc:2f:47:5c:63:07:c0:79:b2:be:0c:26:d2:ec:78:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EA:D8:FE:B0:CA:50:7F:01:62:30:F6:53:A3:26:DE:08:3D:69:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl

            X509v3 Authority Key Identifier:
                keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:d0:5f:44:39:af:2e:24:cb:ea:a2:0f:59:ea:73:ce:a7:
         8e:26:cc:85:4a:6b:72:f7:23:2c:90:a3:9e:28:94:00:6d:16:
         34:f6:67:a5:a7:5e:af:d6:fe:13:6e:8a:cd:27:8a:46:4a:52:
         36:8b:ef:ce:73:cc:5e:00:ac:ab:00:b4:86:52:7a:3d:58:ac:
         d8:9b:de:63:22:c1:60:ac:4b:86:6e:4e:0f:0d:fd:8e:37:06:
         fc:6b:e5:10:09:81:9d:18:23:4c:6b:89:4f:d2:51:6e:98:12:
         a2:45:19:cb:eb:32:a4:15:0f:d2:64:e1:d9:3b:df:9c:37:ea:
         40:9a:83:de:46:5d:d0:0b:09:b0:59:60:36:92:29:2c:70:d1:
         1b:d7:0a:b2:9f:ed:9f:33:e7:43:c3:a7:9c:5d:8c:74:14:59:
         b6:a9:df:2f:da:59:5d:2a:ed:e2:9a:f3:bd:f2:38:7d:6c:2f:
         cc:52:23:79:42:71:aa:74:a5:0f:98:ec:1b:52:80:52:b2:d4:
         87:9e:54:0e:7d:66:3b:c2:26:79:5a:eb:09:b6:e2:f1:9c:1f:
         db:3f:5f:10:41:1a:2b:cd:1f:14:2e:e4:19:02:34:f2:f7:ad:
         c3:44:ac:7a:90:e3:02:a4:c4:a7:78:fc:86:a6:0d:4b:22:75:
         5d:a0:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:42:20 2026 by rpki-client