Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/69ec8c36-20b5-3220-a43f-61551b84afdc.roa
File:                     69ec8c36-20b5-3220-a43f-61551b84afdc.roa (raw, json)
Hash identifier:          6f6WpLQ+YfuCd200awT8Lw+QPHrTNPWj4SdONrMHQgg=
Subject key identifier:   43:B1:7A:20:33:FC:0E:B9:FD:38:41:6F:04:0C:F9:06:2D:F6:E4:C1
Certificate issuer:       /CN=00146dc5-48a5-4f19-81f4-b18f106b00e8
Certificate serial:       010D0C9F4328584AE7345AE1CDDC1012B633D300
Authority key identifier: AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/69ec8c36-20b5-3220-a43f-61551b84afdc.roa
Signing time:             Tue 19 Aug 2025 01:17:59 +0000
ROA not before:           Tue 19 Aug 2025 01:17:59 +0000
ROA not after:            Mon 17 Nov 2025 02:17:59 +0000
asID:                     6124
IP address blocks:        148.100.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:34:5a:e1:cd:dc:10:12:b6:33:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00146dc5-48a5-4f19-81f4-b18f106b00e8
        Validity
            Not Before: Aug 19 01:17:59 2025 GMT
            Not After : Nov 17 02:17:59 2025 GMT
        Subject: CN=682982fc-b9c9-429b-b688-45b9c3beb584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:0e:ae:fd:bc:fa:0d:06:16:96:db:ef:72:
                    64:32:6c:4b:9b:4a:56:d9:e9:f2:e9:05:1e:a4:2c:
                    89:43:29:3a:92:b1:e4:3c:4c:50:39:10:42:92:d4:
                    8e:06:dc:fd:3a:af:57:88:4e:0d:1d:fe:17:8c:8c:
                    f6:7d:1f:18:07:e0:86:21:47:d0:20:b6:36:3d:85:
                    8a:6f:1b:f3:3c:ba:37:7b:96:2d:85:95:2a:cf:2f:
                    5d:1b:db:55:d9:a9:20:95:fe:ee:db:33:9e:28:df:
                    40:7e:0f:c0:49:94:4b:25:57:b0:d8:6c:c1:ec:b4:
                    d3:b8:5f:16:f4:6a:b2:13:d8:ca:38:e5:0b:a7:0e:
                    6b:5a:ab:5b:0a:b0:33:f7:7f:81:91:40:97:9b:76:
                    11:21:09:d9:c9:29:28:f1:01:12:8a:4e:b2:96:71:
                    10:ee:74:1b:08:a6:38:02:21:1a:26:6c:07:c7:8b:
                    c0:4e:42:a5:d5:9d:c0:58:dc:e1:83:22:9f:6b:3f:
                    78:72:d4:3e:da:0e:80:a9:3d:fe:f4:86:bf:30:a8:
                    85:22:1c:dd:e2:1d:5b:0e:ee:f1:4d:86:cd:59:a5:
                    75:3d:90:35:fd:e4:de:fd:3a:e3:f5:57:2b:68:db:
                    46:0d:23:e7:6d:55:1f:92:24:48:88:ad:63:18:de:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B1:7A:20:33:FC:0E:B9:FD:38:41:6F:04:0C:F9:06:2D:F6:E4:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/69ec8c36-20b5-3220-a43f-61551b84afdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8/00146dc5-48a5-4f19-81f4-b18f106b00e8.crl

            X509v3 Authority Key Identifier:
                keyid:AD:C5:7F:A2:56:15:85:84:F3:44:DD:20:C0:DB:21:E5:47:2E:19:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/00146dc5-48a5-4f19-81f4-b18f106b00e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.100.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:35:48:60:63:6e:ef:39:18:46:d3:e4:9c:0b:a5:c0:ba:43:
         9b:a5:ea:bb:cf:3d:b3:94:c8:07:2c:b1:e9:bd:76:7e:fd:c1:
         c7:ac:5c:59:82:d8:af:a8:9f:bb:a2:2d:29:34:f5:27:f4:59:
         49:d0:a7:16:04:13:19:16:61:60:2c:3b:c2:c7:e6:47:7d:18:
         11:6e:76:7a:bf:6a:c0:e3:81:1e:cb:94:6a:03:a4:3a:e7:cd:
         a0:4e:2e:62:c8:9f:f1:bc:24:69:da:7a:3b:23:d9:8d:df:c8:
         7e:54:66:2a:56:e8:ef:32:b4:a5:94:af:0f:bd:01:90:60:4f:
         36:56:d5:eb:d1:f9:3e:ca:0c:74:6e:3e:00:87:fb:e3:f0:82:
         2a:ac:16:74:b2:ab:e6:53:cb:5c:6b:2f:cc:21:d8:1a:17:aa:
         af:d1:bf:b6:ff:f6:d8:02:a9:2e:a7:47:73:f8:07:ef:19:9d:
         63:6f:94:9a:87:70:df:4d:72:43:07:ad:3d:76:8e:cb:9f:97:
         b4:ae:a3:6e:eb:5c:b3:13:c0:af:62:4c:53:07:14:5a:4a:a5:
         3c:2c:e6:96:50:9b:d2:67:44:4d:e5:1a:46:24:cb:cf:23:4d:
         99:17:57:00:69:a1:9b:de:73:b8:61:9f:5a:ff:f8:36:07:67:
         1b:a8:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 02:17:09 2025 by rpki-client