Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa
File:                     04adc8be-6949-381f-85ec-0ef42f2d5286.roa (raw, json)
Hash identifier:          VX5KSy/zbmplIG6TIYhtLzalGG1SQxr279e5RqWdlAs=
Subject key identifier:   7D:FF:F6:A9:69:81:9A:03:3F:48:9C:87:54:F9:0D:30:EE:57:DB:BB
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584B821CD5A1A5EF6A5D2637E600
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     63199
IP address blocks:        148.153.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d5:a1:a5:ef:6a:5d:26:37:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=34286188-3b27-49dd-9103-d228640ddf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:ff:db:de:7a:b2:26:31:15:31:3c:15:53:
                    e6:ea:59:66:2a:9e:f4:3f:c1:34:4c:ec:56:db:d6:
                    60:5a:1c:47:a9:98:28:25:fb:8d:06:f8:c2:e3:88:
                    05:6e:25:aa:57:fa:77:36:01:35:b3:61:22:63:7b:
                    9a:6d:31:aa:db:0a:ed:b0:45:b6:85:ea:33:12:23:
                    14:ef:34:2a:2a:d5:54:de:11:84:22:0e:9e:8f:67:
                    69:1f:21:7e:3e:7c:d9:e8:da:75:fa:34:81:b0:f4:
                    b8:02:9b:ce:e5:c3:3d:57:10:52:af:85:f2:31:66:
                    53:51:7d:71:23:2a:af:f0:b0:20:ac:45:ef:eb:3a:
                    41:18:4a:42:3f:7e:f4:fd:7a:d3:98:27:b5:03:3d:
                    4d:79:51:a1:86:b7:b7:65:ea:d3:78:0e:a5:7f:45:
                    13:ca:1f:bc:e0:c0:0f:9a:b3:ac:c3:b8:79:49:56:
                    0f:c8:58:19:fa:2d:2c:6d:8f:1b:12:eb:17:c2:46:
                    92:32:76:5e:80:46:6e:91:bb:80:5c:84:70:4b:67:
                    06:80:6d:0d:d2:23:dc:13:04:91:7a:dd:a7:e9:cb:
                    82:ab:bb:2c:01:c5:9e:7b:b1:08:89:46:f7:e5:e8:
                    c4:da:2f:cf:c8:a8:ca:e3:57:63:7d:d2:98:f8:38:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:F6:A9:69:81:9A:03:3F:48:9C:87:54:F9:0D:30:EE:57:DB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:fb:1c:f0:3e:aa:85:a7:f3:fb:84:b9:d8:da:60:36:f2:
         cd:e4:d7:8c:90:c6:ce:15:54:e6:b0:08:41:7f:a2:41:ac:6a:
         31:1e:b7:37:ad:39:ce:1f:43:71:86:0b:3c:bb:a5:b5:d5:6e:
         e0:d5:f8:37:ab:9e:60:f3:14:1c:54:93:60:cb:3f:88:dd:d1:
         fb:4b:95:ce:d7:d7:24:4e:d2:91:bc:77:18:ed:ca:77:ab:53:
         36:3a:af:bf:ed:ce:57:fa:92:ef:28:62:bd:46:4e:a7:d1:f9:
         95:71:b1:b6:c0:b1:5f:37:b4:e4:d5:83:60:e6:3c:2a:e9:51:
         60:d9:d9:84:eb:4d:4a:1f:34:50:3a:6e:1c:99:c0:97:78:4f:
         80:4b:0f:81:0b:27:4e:31:cc:dd:c0:86:1e:40:33:8f:cd:0f:
         b2:45:1e:63:64:26:94:a5:a6:2f:c6:4f:cb:ea:06:8f:76:3d:
         ba:32:da:d5:36:82:4e:c0:3d:95:b7:ca:0f:ce:1c:a7:bb:57:
         cd:88:60:03:87:66:f1:91:69:1f:23:95:ec:cc:3f:d6:82:3e:
         01:19:26:96:e6:36:ef:51:13:16:73:67:0a:6f:19:22:c2:64:
         3c:0d:08:01:dd:28:cf:2c:61:9e:c7:3c:a9:ba:f4:30:16:b8:
         e5:0d:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:42:23 2025 by rpki-client