Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ad05669-0aae-3a7a-b8fb-b13ead99045b.roa
File:                     4ad05669-0aae-3a7a-b8fb-b13ead99045b.roa (raw, json)
Hash identifier:          eXEJy9PiymZP4GXmCpDP4fNtZoqny3tLh6ri1WwemiU=
Subject key identifier:   29:B9:25:6D:A5:D5:9C:5A:48:53:A4:99:AF:9C:40:EA:4B:48:D7:F0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F7A502B2E4065E32345393B00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ad05669-0aae-3a7a-b8fb-b13ead99045b.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     174
IP address blocks:        173.232.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:2b:2e:40:65:e3:23:45:39:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=c4f4771c-bf2e-460d-83d1-bf3417e0e7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:f2:78:f6:be:18:de:32:40:84:ff:4a:e4:
                    62:32:43:4f:cf:ad:cc:ed:3a:9c:51:70:d6:ad:b8:
                    ff:e5:fb:61:12:fb:69:87:b7:93:3f:e5:ae:6a:60:
                    78:c2:2e:d4:79:ac:be:c2:a4:3e:62:ee:1c:b1:a7:
                    d5:4e:36:ca:c1:b1:50:6f:f2:f2:f6:f0:a9:c1:36:
                    a9:8d:35:5a:8b:b6:82:9d:20:06:4b:f6:a6:93:af:
                    fb:35:d4:f6:9c:fd:9f:33:a4:bc:25:44:59:fc:0b:
                    01:46:29:5d:3f:ca:7e:9d:2a:35:ea:db:68:1c:ab:
                    a2:61:c9:16:9e:a3:1e:ac:83:3d:51:79:a8:c9:a8:
                    5f:1a:19:82:7f:fe:8a:88:66:f5:21:3d:dd:e1:26:
                    dc:5a:07:a2:a7:67:18:59:24:89:f6:a0:05:81:aa:
                    8a:a6:e7:d3:69:f1:b8:47:82:b7:ae:46:83:e7:b4:
                    6f:35:9c:69:d0:4c:e2:52:a9:db:c8:27:f4:cc:ca:
                    a1:9e:be:88:86:bc:90:99:34:46:77:ed:da:86:f7:
                    62:25:6f:67:0c:f9:9a:ba:cc:ef:4f:71:b6:92:db:
                    bc:02:b9:06:fc:7b:8c:57:cf:db:06:c6:f8:40:da:
                    55:8e:00:0a:9a:ae:53:97:74:0b:ea:a5:f0:cd:b2:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B9:25:6D:A5:D5:9C:5A:48:53:A4:99:AF:9C:40:EA:4B:48:D7:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ad05669-0aae-3a7a-b8fb-b13ead99045b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:bf:d0:0b:97:8f:4d:a5:97:01:ea:44:ca:df:76:ab:df:
         ce:2e:81:e4:be:f8:ea:3d:51:cf:0c:48:1b:bf:28:c0:c7:db:
         2f:2e:f5:7d:83:10:6c:9c:29:3d:b5:e3:88:ec:09:0f:2d:6f:
         fc:45:a9:c8:a9:fc:8b:17:be:bb:b4:bd:22:46:fc:d8:02:61:
         12:4e:2d:67:3d:97:e1:f3:16:ec:8e:f7:19:e2:54:04:c0:75:
         84:13:93:75:ac:d1:fc:d7:0f:62:e9:ea:95:a9:4d:58:92:92:
         c2:59:a3:39:ab:46:51:79:ca:4a:7a:af:d4:4f:97:67:a6:f0:
         03:5b:d8:4c:f5:a0:73:28:9b:8b:e3:7b:3b:71:57:e7:00:e8:
         95:bc:64:70:cf:a5:b8:fc:4f:4b:4a:09:06:ad:76:c8:8f:32:
         de:d3:f3:91:09:af:4b:4e:68:e9:24:38:38:e5:bc:ca:d9:ff:
         f4:02:1c:a8:b9:61:4f:56:15:9f:5c:0f:a0:c2:a4:22:a8:d0:
         93:5f:12:cc:4e:49:22:64:48:f8:be:55:ad:87:78:ae:54:fb:
         d1:cf:b5:6c:21:db:27:5c:29:19:42:73:94:43:09:f6:09:50:
         67:6e:37:7c:5e:bc:cd:70:5d:b7:25:e3:ec:a4:51:7a:e7:9d:
         96:5b:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:44 2026 by rpki-client