Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/8418a42b-f687-3353-805c-b0132dd77fe2.roa
File:                     8418a42b-f687-3353-805c-b0132dd77fe2.roa (raw, json)
Hash identifier:          CK2jNxT7TkOmNNT7HOy0jiSbaAduEszWi/vafi+o9DI=
Subject key identifier:   8D:C6:F3:B6:C7:6C:E4:C7:94:37:0E:4E:8D:EC:3C:CC:BD:5D:C3:50
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584E1319961088B5B47662E10900
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/8418a42b-f687-3353-805c-b0132dd77fe2.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     400423
IP address blocks:        148.76.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:96:10:88:b5:b4:76:62:e1:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=45a0d39c-3877-4556-9351-d8b5c813978f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:31:ce:67:ce:10:4d:7d:46:3c:95:02:89:
                    e7:4e:c1:34:00:b9:45:7b:05:66:fe:7a:b5:9d:18:
                    1c:cb:54:13:94:95:5a:53:04:cc:aa:d6:f9:31:5b:
                    c5:04:df:a3:44:ce:1e:98:00:a2:ea:f7:16:c6:9a:
                    5c:09:ae:c3:8a:0a:ce:36:7b:85:62:9d:6f:fa:c2:
                    dd:83:e2:76:2e:2b:87:9f:2c:4f:64:c5:73:f3:00:
                    97:db:6d:69:81:f7:e2:50:be:0a:59:ac:de:64:de:
                    4a:9f:14:b9:7b:e7:bc:4f:29:1d:fd:66:d1:05:25:
                    ff:e8:b3:94:06:8e:22:1e:12:3c:40:f1:dd:8f:9f:
                    a2:f9:c7:b6:d8:fc:0b:65:01:e5:84:65:56:97:3a:
                    d0:60:1d:90:93:0c:92:c8:27:09:41:07:e5:f5:0c:
                    b2:cb:78:d5:e6:ef:22:af:8f:59:ff:d1:62:21:87:
                    bb:89:20:40:30:be:e4:66:10:26:2e:2a:c1:3c:20:
                    4f:de:b1:ca:a9:6f:30:76:84:99:73:43:d3:a1:bf:
                    a0:f5:86:42:86:60:b2:34:e3:71:0d:63:ca:2e:90:
                    2e:89:a8:5e:1f:f8:ae:25:10:45:1f:13:ae:96:93:
                    cf:3f:b8:ba:01:8e:0a:1a:2c:e5:7b:44:a6:10:fd:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:F3:B6:C7:6C:E4:C7:94:37:0E:4E:8D:EC:3C:CC:BD:5D:C3:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/8418a42b-f687-3353-805c-b0132dd77fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:02:7d:a1:9c:70:8a:8c:bf:00:cf:c9:8e:1c:44:8f:b3:
         e7:f4:06:1e:c3:81:e6:a5:1e:0e:a6:e1:b0:b3:b7:02:42:71:
         7f:3b:69:10:35:b8:18:8a:61:b6:44:7d:43:a6:23:a1:33:c0:
         4f:74:40:ed:26:6b:c1:01:d2:c8:b8:39:7c:1d:12:0d:eb:5d:
         8f:95:30:18:af:b9:78:5d:9f:a2:c3:eb:ff:6a:84:c5:6a:c4:
         dc:33:28:fd:b1:1b:4f:9f:13:22:8b:20:0c:dd:56:f3:d7:36:
         61:b2:1c:5e:18:ef:2a:39:f2:77:59:d3:31:40:41:c5:6e:a9:
         40:0b:cf:12:ff:a4:89:80:e8:be:4b:0d:dc:ee:de:1e:31:6e:
         a3:20:65:cb:0b:a0:db:e3:cd:7a:5f:43:11:a6:35:77:61:64:
         c5:58:8f:b2:8c:f6:3a:49:cb:f8:04:ef:61:4d:d4:44:9f:e5:
         e1:df:20:cc:40:6e:40:69:50:1b:98:21:0c:26:f3:d7:6b:22:
         d1:ed:68:0f:5d:e4:02:87:9d:55:d7:c5:0a:5f:cf:cb:ab:fb:
         e8:ae:f4:e3:2c:5b:9c:c0:3e:bf:cf:6d:6e:9c:b8:61:d6:3a:
         8e:39:49:50:de:69:9a:eb:6d:d3:08:0c:09:0f:c4:9d:6d:2d:
         a1:68:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:02:06 2026 by rpki-client