Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/3ec77ade-f280-3c56-ae9a-5994d53172ff.roa
File:                     3ec77ade-f280-3c56-ae9a-5994d53172ff.roa (raw, json)
Hash identifier:          peotuN39FtFemT7RKYxCjBXhhVHaw2YhDR0+gybsR3g=
Subject key identifier:   91:3A:A1:3F:64:17:9C:6D:63:CA:CF:93:98:CB:1A:D9:69:4E:B2:56
Certificate issuer:       /CN=00146dc5-48a5-4f19-81f4-b18f106b00e8
Certificate serial:       010D0C9F4328584AE1971ADDB24AC6BDF0066580
Authority key identifier: AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/3ec77ade-f280-3c56-ae9a-5994d53172ff.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6124
IP address blocks:        148.100.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1a:dd:b2:4a:c6:bd:f0:06:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00146dc5-48a5-4f19-81f4-b18f106b00e8
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=55df67ea-1653-4dd2-aed2-af037892fee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2c:4c:9f:2f:9e:a3:56:65:a8:9b:4e:04:52:
                    a0:c3:95:7b:f5:34:ad:cb:b1:f4:56:40:65:9e:96:
                    fc:a9:65:1b:b7:38:81:1c:de:5f:1d:cc:e4:57:1b:
                    aa:8e:a9:dc:da:f7:ac:35:ca:4c:28:9e:a5:f0:46:
                    70:93:4a:e8:dd:0a:26:fc:5e:1c:02:8e:f6:f1:93:
                    ca:64:90:1b:1a:8c:7e:8f:65:62:0e:92:a0:9f:a7:
                    36:af:ec:5c:eb:00:86:dc:5c:f8:9d:27:2d:7d:f5:
                    7c:0c:5b:50:ed:6e:36:15:bf:cd:cc:9d:26:62:e5:
                    1f:6c:1c:5e:e9:c2:2a:60:bd:e9:2b:a2:5c:31:d4:
                    42:bd:ff:79:c0:e9:09:94:ee:51:ad:f9:d2:ca:53:
                    6e:e6:c4:48:44:bb:22:09:f2:62:02:80:0f:95:ef:
                    72:da:90:f0:14:18:b4:5f:31:95:24:fa:11:f2:7d:
                    1a:5b:1a:10:cb:58:2f:f8:48:72:91:f1:d5:3b:f6:
                    53:f6:74:7d:5c:e0:93:ff:fb:3e:be:d1:93:a5:8b:
                    0d:fa:a3:2e:77:1e:db:51:3b:f9:36:95:42:6b:96:
                    31:2d:d5:ac:72:eb:4e:21:c5:59:8b:01:fb:69:24:
                    9e:bf:e9:55:8e:36:ff:c8:ba:de:c2:d9:54:44:cc:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3A:A1:3F:64:17:9C:6D:63:CA:CF:93:98:CB:1A:D9:69:4E:B2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/3ec77ade-f280-3c56-ae9a-5994d53172ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl

            X509v3 Authority Key Identifier:
                keyid:AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.100.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f1:f5:ab:2d:6b:75:b7:19:ff:d7:50:78:6d:5b:72:1e:46:
         b1:c2:2b:26:91:26:10:82:7a:cc:de:b7:0d:d2:83:9d:a4:14:
         72:40:a1:19:5c:21:81:14:34:a6:96:9f:9a:ec:69:eb:bc:fb:
         28:7e:29:0e:94:a0:0c:ab:6e:0f:80:d4:00:51:7f:05:65:cd:
         73:a7:96:06:c7:df:25:d2:ad:57:7e:f9:ea:c1:05:df:f4:6d:
         83:1b:a7:25:91:db:5d:29:63:e1:cb:ff:24:a4:1b:8c:c6:a8:
         e1:88:4e:9a:a2:df:18:9a:95:44:d7:e9:a2:5f:e2:1a:7c:b3:
         9f:27:c4:1c:28:86:1a:e9:5e:de:25:ee:ce:ce:4a:28:2c:86:
         5b:43:e6:65:20:e9:42:ac:d5:4e:70:45:6d:33:9b:10:e6:0f:
         d2:95:e7:4c:0d:9e:8a:85:bc:99:5d:35:ff:d8:b2:83:5e:37:
         7d:dc:03:15:39:0e:42:93:20:0a:9f:7a:b8:e6:da:eb:1f:85:
         48:53:7a:4e:b8:60:53:4c:22:d9:4c:13:b6:1d:41:1f:66:97:
         10:f0:34:1b:b7:bf:44:a9:ca:53:9a:a1:0a:f0:db:c1:eb:82:
         a4:7b:2f:34:73:1b:f4:2a:23:2e:29:48:e7:c9:14:ae:69:b4:
         e1:d7:c8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 02:18:34 2025 by rpki-client