Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/3ec77ade-f280-3c56-ae9a-5994d53172ff.roa
File:                     3ec77ade-f280-3c56-ae9a-5994d53172ff.roa (raw, json)
Hash identifier:          6mdAONhjk747iz+LKfMwXHv5wylwk9S/De5/JZqEuSg=
Subject key identifier:   79:23:AF:49:83:BC:C9:80:F7:46:78:F8:7D:61:F2:A9:8B:76:F6:DE
Certificate issuer:       /CN=00146dc5-48a5-4f19-81f4-b18f106b00e8
Certificate serial:       010D0C9F4328584F067238F7E72E240ECE04A9A0
Authority key identifier: AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/3ec77ade-f280-3c56-ae9a-5994d53172ff.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6124
IP address blocks:        148.100.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:38:f7:e7:2e:24:0e:ce:04:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00146dc5-48a5-4f19-81f4-b18f106b00e8
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ff4f99ce-3700-4b16-bf68-dd2a1f493a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:00:f2:bc:f2:ca:b9:59:3d:ea:4b:f0:43:
                    4a:43:2e:21:8e:0b:3d:72:0e:7d:47:72:fe:10:8d:
                    31:dc:5c:d8:1e:8c:05:dc:6d:ae:66:ae:d2:f1:ff:
                    95:10:e6:c5:98:97:f8:b6:fe:84:dd:85:8a:a2:95:
                    3f:52:65:a0:2c:08:1b:e2:c7:58:71:a9:48:e6:d0:
                    f0:3c:2e:34:20:7a:2a:48:fc:5a:ba:11:81:2b:c3:
                    b0:ec:2d:cc:9d:7f:22:85:1c:c5:83:19:b2:92:20:
                    91:10:a3:57:6b:f8:39:85:aa:13:14:ed:2a:53:37:
                    32:f5:52:61:37:da:63:3c:2e:63:94:81:20:f0:04:
                    02:1c:9b:5e:3f:e7:dd:a5:73:ed:2f:07:a6:64:fc:
                    e1:ca:ed:be:96:0c:4a:22:bf:b4:be:b5:0c:62:5b:
                    44:ff:68:11:18:1a:f4:44:68:2b:ae:ca:d3:7e:4d:
                    7a:92:87:1a:75:5d:c2:c7:2d:d7:1a:f0:fc:87:c5:
                    48:34:c9:6b:cc:34:44:97:a0:81:90:ee:0b:7e:f8:
                    85:59:98:fa:bd:05:cf:2c:b9:df:c4:2e:61:51:93:
                    05:c4:fb:a2:3b:dd:13:b5:e8:62:29:be:2c:e8:0e:
                    43:aa:25:dc:f6:43:7d:6c:45:ab:f3:90:4e:a1:b6:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:23:AF:49:83:BC:C9:80:F7:46:78:F8:7D:61:F2:A9:8B:76:F6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/3ec77ade-f280-3c56-ae9a-5994d53172ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl

            X509v3 Authority Key Identifier:
                keyid:AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.100.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:df:14:13:16:4c:10:15:7c:ad:2c:c9:9b:ea:b1:ca:79:
         51:3b:69:40:0f:7b:f0:c6:7e:65:4b:d8:f6:72:fe:06:7a:34:
         6f:6a:f2:96:ab:64:64:8e:98:f0:0c:52:34:0d:d0:93:50:4d:
         76:c6:63:29:63:a1:ca:13:ed:24:a7:58:15:63:d7:a8:7d:fa:
         00:3c:b2:45:86:8f:75:45:4c:f6:4d:d4:66:a4:7f:8a:a0:1b:
         30:6a:e4:5c:e3:c0:12:60:89:40:88:65:f0:bb:ec:4a:12:2e:
         05:18:83:2b:af:6c:00:c4:a4:08:df:7f:b2:14:60:ab:ce:3f:
         9a:60:33:05:d4:2f:a0:d4:8d:f7:53:93:79:5b:57:30:cf:96:
         7b:5a:e5:fe:9b:ef:42:d6:42:d6:c4:38:fc:ef:7d:3c:19:3a:
         a3:85:6b:ab:29:28:f8:13:4f:31:c7:d6:72:1f:82:3b:44:de:
         ac:f8:8a:8d:bb:2c:ea:5d:64:d9:97:27:17:c0:d2:23:68:62:
         d7:eb:3d:86:9c:35:6c:cc:5d:d8:7c:57:3e:98:ac:05:bf:e4:
         17:1f:3a:12:c0:b5:49:bf:53:4e:db:3a:c0:d1:97:85:e5:1e:
         17:15:c9:83:0a:88:93:9f:1a:ef:59:06:5e:6f:ad:cd:c5:fa:
         61:59:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:46:53 2026 by rpki-client