Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa
File:                     248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa (raw, json)
Hash identifier:          awVY2Padltmn1Upjkq5l9k0souNOYR2sW1IIwkAhPDA=
Subject key identifier:   AE:CE:3F:70:8D:DF:9C:73:90:9A:76:1C:6B:79:79:B0:D3:5D:CB:39
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584EAD1C4963A37B190D23D5D800
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     16433
IP address blocks:        147.160.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:49:63:a3:7b:19:0d:23:d5:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=fbb81af0-808d-4c2c-9159-452227fd74e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:4a:01:35:fb:7c:2d:1f:c0:d4:65:d6:3e:
                    75:47:b1:63:32:83:4e:b8:b4:2c:cf:54:fe:d3:e1:
                    51:55:d5:08:d9:2e:86:8f:40:29:e3:7b:b8:e8:90:
                    1a:f5:19:44:57:c3:fc:8d:1e:eb:f0:6b:da:39:75:
                    ce:3c:4a:f7:3e:a9:23:02:44:80:49:6e:5a:29:de:
                    54:80:02:5c:98:4a:05:c4:0a:fc:f2:92:98:c1:d4:
                    5e:5c:7e:87:7e:49:f6:0c:49:6c:31:ea:62:f7:31:
                    e8:5c:c7:03:c9:a8:52:38:61:e9:39:7c:39:db:7e:
                    cd:89:9e:53:8c:23:e9:1f:cd:ca:be:e0:a9:65:0f:
                    05:44:87:ec:54:0c:2a:49:93:25:ae:d2:76:e7:c9:
                    05:a2:de:6a:33:dd:78:d0:82:c5:ad:df:c0:ab:b2:
                    8e:e2:c2:09:f1:30:8b:a7:a9:2c:2e:63:19:fb:74:
                    e0:13:7d:8f:cb:31:97:bc:bf:91:7f:5d:98:3d:d9:
                    2c:ef:0c:d0:a8:08:f2:90:fd:31:82:ad:ea:79:2c:
                    17:43:4a:34:bc:a3:cb:8c:ba:8e:d7:28:52:e1:37:
                    7b:8e:d4:7b:2b:2b:40:e5:f3:74:5a:b3:a1:37:41:
                    34:a2:44:6a:77:ee:ac:b5:06:f1:b2:66:bb:37:e0:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CE:3F:70:8D:DF:9C:73:90:9A:76:1C:6B:79:79:B0:D3:5D:CB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:06:fc:d0:01:63:85:9b:e2:e6:6b:70:de:0d:13:7d:50:
         5e:e4:27:de:02:26:fc:40:c5:ae:99:0b:e3:8a:01:7a:8b:4b:
         b4:8b:fe:33:b8:35:f9:23:a8:6c:44:8e:ff:4e:17:c8:f0:63:
         f7:98:e4:2e:1b:4a:ce:a7:ad:84:23:7f:7f:46:2a:28:a1:16:
         1b:fa:47:85:11:cb:13:9b:34:1a:5b:52:00:4d:87:8b:b4:23:
         68:9d:47:b9:5d:ad:ac:c7:ad:a6:bb:75:77:07:9b:77:79:61:
         07:a9:2f:54:fd:dd:25:5c:82:75:aa:3f:91:15:5b:58:16:21:
         36:49:6e:b1:34:56:42:86:89:ce:64:92:f3:ae:81:90:72:5a:
         3f:81:35:2b:8f:17:c9:88:50:ad:68:76:2b:6f:5f:2f:83:41:
         a0:0b:e0:30:22:0e:8a:2f:6b:96:f5:7e:54:57:9d:ad:15:6e:
         8d:ef:25:34:3d:f5:ed:cd:a1:91:6d:8f:41:c5:fc:f8:c8:ca:
         4d:54:48:f4:ea:bf:fb:5e:ae:17:54:52:54:44:d3:04:87:12:
         63:59:0d:8c:cf:69:23:ee:dc:08:9a:fd:e7:4a:b3:d7:ec:8d:
         f5:b5:0b:26:de:18:16:29:b9:89:ea:63:e5:27:81:5f:98:bb:
         34:09:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:30 2026 by rpki-client