Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/abc007e7-a1ac-3ddd-b7af-6fc80edf8cf4.roa
File:                     abc007e7-a1ac-3ddd-b7af-6fc80edf8cf4.roa (raw, json)
Hash identifier:          +xiCFf756JxcA5xHe6EJWTZVN43BJQalE1ht4gwyq+U=
Subject key identifier:   73:2B:C8:BD:14:6F:7A:FB:8C:56:2E:2E:2C:1F:B1:DA:6D:3B:09:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EA798C598F6BD081BB79EF880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/abc007e7-a1ac-3ddd-b7af-6fc80edf8cf4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63402
IP address blocks:        168.148.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:c5:98:f6:bd:08:1b:b7:9e:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d0a184f5-bdd4-42eb-ab39-e82434de65dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:00:da:5a:e4:61:bc:0c:7a:01:35:3c:b7:
                    66:b9:6c:1a:d9:43:23:6e:0b:c1:ea:02:77:ff:21:
                    7c:b3:62:94:56:48:f7:55:b2:6c:97:c8:a6:46:14:
                    c8:74:c5:d6:21:f8:39:fe:ee:56:ff:5c:f7:a5:09:
                    fb:c0:02:6d:bc:b7:27:2d:45:88:1b:12:33:fd:9d:
                    cb:b3:a7:e9:01:2b:50:a3:5d:27:ce:3e:4d:87:db:
                    98:da:a5:34:86:ea:f3:e0:e4:f2:e2:1c:cf:e9:08:
                    04:1d:48:da:ff:3a:97:f2:88:1c:89:96:6b:7b:b0:
                    4e:2e:a7:05:52:2a:11:3b:91:17:55:f8:f2:0c:b3:
                    7c:3d:48:a5:65:91:f9:11:48:13:02:35:51:db:4f:
                    39:37:1a:54:9a:8b:ef:4c:22:f1:b3:cf:de:4e:4d:
                    57:b8:fc:01:77:51:0e:cd:68:14:d4:27:0f:60:b9:
                    b7:2a:96:b7:a5:11:db:4f:08:61:a7:74:d5:3b:0b:
                    0a:14:cd:90:46:92:53:27:ba:7d:9e:83:8b:48:d8:
                    dd:2b:37:0a:ef:ed:79:89:91:b8:10:49:6b:3b:9c:
                    4c:0a:28:f9:23:9a:fa:9c:74:59:14:37:08:41:c5:
                    f1:1c:91:42:3b:4e:1d:da:43:0f:c1:98:1d:67:8a:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2B:C8:BD:14:6F:7A:FB:8C:56:2E:2E:2C:1F:B1:DA:6D:3B:09:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/abc007e7-a1ac-3ddd-b7af-6fc80edf8cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.148.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c5:4f:d3:e9:91:3d:d7:02:91:4c:18:ae:0d:1e:bb:9e:2f:
         96:17:9d:95:60:24:97:f4:0f:6d:1b:01:65:de:82:ff:5c:99:
         56:0d:dc:ec:06:43:ed:1b:c2:9b:3a:0b:3d:ae:5c:77:a8:4b:
         6c:c2:d9:f3:2f:3d:e2:2c:45:cf:71:5c:5e:7f:e4:e6:dd:2c:
         11:56:d6:cc:96:d6:eb:b4:58:1d:d3:83:ac:eb:dc:bf:7c:0a:
         3a:a3:a2:5e:c9:84:56:7d:e3:38:5d:29:6c:df:9a:55:13:f1:
         20:c9:1e:92:53:b3:66:33:d8:3c:df:ab:de:35:44:61:fa:0f:
         94:6c:78:06:d4:72:4f:79:5e:1d:90:da:d1:6e:34:77:f9:ed:
         9d:80:17:d9:60:51:cb:86:8a:38:73:26:a7:fa:a6:3c:f9:5a:
         d2:ff:48:ee:eb:a1:e4:e4:7c:13:2c:de:b8:43:c1:b1:ff:9e:
         21:ef:c2:29:5e:e5:e0:ec:05:4a:57:6f:d9:f9:0b:5d:07:fb:
         68:65:19:c4:5a:28:67:00:b0:e4:98:36:8d:5a:39:42:c7:44:
         47:39:a9:b0:57:09:a8:e6:3a:fb:cd:c6:22:1b:23:72:27:29:
         6c:dd:6a:1f:1b:93:52:04:3f:df:7a:69:2b:c7:68:92:60:fb:
         45:4e:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:46:52 2026 by rpki-client