Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/148751b0-9805-3a25-a6f3-b29e384df38b.roa
File:                     148751b0-9805-3a25-a6f3-b29e384df38b.roa (raw, json)
Hash identifier:          3wmEN+XRLn3Bfbf8IJcITy2sLtGh0BNJ/NvYOyW2ACQ=
Subject key identifier:   30:26:69:A6:F8:9F:49:77:E6:59:CC:41:68:DC:3C:8B:40:DB:BF:67
Certificate issuer:       /CN=048641d6-b337-4557-8bae-329ba9998239
Certificate serial:       010D0C9F4328584D24DF8496E31EEB3D5CD22080
Authority key identifier: A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/148751b0-9805-3a25-a6f3-b29e384df38b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     27353
IP address blocks:        162.1.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:84:96:e3:1e:eb:3d:5c:d2:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048641d6-b337-4557-8bae-329ba9998239
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f7a20ccc-782a-45a0-8174-54a9529cf703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:4a:bf:1d:55:d0:0b:b2:44:74:8c:3f:8d:
                    16:f1:bc:eb:64:c4:33:b1:ba:c3:61:58:7d:09:f9:
                    70:d8:9b:63:41:69:c8:d4:70:99:5a:c9:da:0b:00:
                    c8:c0:2d:1f:2e:67:b7:3f:41:46:18:2e:b3:c9:d4:
                    f9:fc:c9:be:51:c1:54:0f:01:06:e7:80:a3:fc:9c:
                    b2:6f:60:f5:36:b0:a6:ce:37:2e:66:53:4e:f5:96:
                    bf:62:12:7c:4b:94:6d:92:44:85:34:7c:d3:36:27:
                    71:62:e6:79:07:2b:95:cb:7c:71:e3:4b:89:14:96:
                    3b:74:14:a7:b0:c9:c0:d7:2c:12:31:57:ca:8c:85:
                    b3:68:16:3a:d4:d6:9e:41:5e:9a:98:7e:cc:f7:cf:
                    3d:ae:24:57:34:38:e1:c9:2f:f0:5d:1c:d3:da:e6:
                    b1:ba:5b:fb:18:96:7e:73:c8:a2:3e:06:51:1e:56:
                    82:ae:0b:9c:be:6e:98:89:7e:4e:39:37:80:4b:ea:
                    eb:8f:d5:3b:a9:d1:7a:24:33:9d:b2:6a:8f:78:9f:
                    c9:d5:bb:2e:85:33:0b:76:bd:32:c4:92:5b:4a:35:
                    dc:27:55:14:a4:1d:b8:97:df:af:6e:b8:e8:1f:ce:
                    c5:e8:1d:1e:35:b1:96:58:1e:66:25:40:80:1f:0f:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:69:A6:F8:9F:49:77:E6:59:CC:41:68:DC:3C:8B:40:DB:BF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/148751b0-9805-3a25-a6f3-b29e384df38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.crl

            X509v3 Authority Key Identifier:
                keyid:A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.1.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e8:e4:5c:10:c5:2b:b0:f1:07:be:cf:a2:e3:86:91:7c:23:
         4c:b8:4a:7c:d5:87:3c:1d:e5:6a:8e:3e:ee:0a:aa:46:1f:f3:
         93:35:bf:3a:28:e8:bc:45:c9:33:24:c3:02:c7:41:09:3e:16:
         74:9c:2e:46:1c:03:a8:9c:67:b9:c5:92:3b:3d:80:58:35:19:
         87:59:79:cd:af:43:83:b7:ec:7b:cf:76:ac:68:9a:5c:5a:7f:
         2d:bf:54:d7:8c:12:ba:69:d1:14:2b:e7:30:40:01:c2:ce:b6:
         f7:da:4c:eb:04:c6:d8:02:6c:8e:44:6d:ea:a1:6c:0d:67:50:
         f6:3a:47:19:26:11:9c:55:a1:1b:ca:47:21:83:dc:51:5d:ae:
         42:42:73:83:22:aa:25:41:a2:b0:be:60:59:d0:c1:59:e5:9f:
         c7:11:92:5b:58:7f:2c:01:61:ba:3b:fa:6e:2b:62:bb:60:22:
         ea:db:01:1c:c4:8e:c3:36:09:1e:38:91:0b:89:8f:2c:b6:ef:
         ae:71:e7:a0:a9:52:d8:88:b4:3c:cf:2b:54:b6:cc:95:93:58:
         11:56:39:e1:07:5b:40:63:c6:bd:eb:cc:89:1a:6c:f8:42:af:
         1d:b2:c1:c5:fd:49:17:aa:4a:ce:7d:b3:30:ad:19:d8:01:a0:
         14:74:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 17:03:29 2026 by rpki-client