Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa
File:                     6bc53289-b90e-34be-bcd9-c39465f48c2f.roa (raw, json)
Hash identifier:          W6Tdteqfc/P60V0Xbgxmwu/Chv01E6y87g29hPtHvf8=
Subject key identifier:   D4:BA:B1:D2:6E:6C:12:B1:59:52:65:9C:CD:10:F7:08:38:FD:FD:17
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584F4C3D48A2FF046AC68198BD00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     63199
IP address blocks:        148.153.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:48:a2:ff:04:6a:c6:81:98:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=009d366f-ea11-493f-9453-09eb9bd90f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:8d:76:9b:e5:c6:1c:60:0f:dd:78:df:2d:
                    2d:da:78:04:60:d5:ee:21:f8:49:40:2a:33:31:34:
                    48:f0:74:1e:39:e7:49:45:e4:e1:83:be:1c:db:a3:
                    a9:dc:b6:ba:06:fa:1c:fc:b5:66:66:c6:d7:bb:85:
                    86:68:69:ec:a2:fd:5b:c2:90:80:a4:9a:67:80:fe:
                    53:54:a1:10:3d:7c:17:21:71:a4:36:64:92:88:cb:
                    b2:96:09:27:17:5d:21:77:fa:97:c2:13:33:01:08:
                    50:ce:93:41:d4:d0:c7:57:23:8e:f9:01:2d:fd:46:
                    86:cd:08:b6:8e:db:04:36:61:ab:15:71:11:11:93:
                    8f:d4:00:df:8d:ef:ef:fe:96:84:77:db:a2:e1:b0:
                    20:40:49:62:17:bd:67:c9:ea:e5:5d:78:58:64:c5:
                    7d:43:3f:0a:81:a6:0e:85:a7:c8:5b:df:ab:b1:da:
                    d5:e9:f1:c3:a9:39:c9:a2:25:4a:e7:be:a2:c1:b7:
                    b0:2c:19:d9:c0:1c:3f:cc:8e:82:92:9c:5a:58:e3:
                    43:54:82:76:e9:c4:09:ce:50:87:2e:35:e9:f5:76:
                    ff:1d:79:8c:39:a6:20:54:fa:8d:46:4a:3a:44:6a:
                    9d:ac:6d:b2:67:f0:2c:db:ed:f4:d0:34:e0:65:ef:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BA:B1:D2:6E:6C:12:B1:59:52:65:9C:CD:10:F7:08:38:FD:FD:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:8c:4c:67:86:6f:26:df:4f:87:bd:2c:a1:db:f4:7b:cc:
         0d:83:7a:82:2f:57:6c:7f:02:d6:32:10:cc:92:f2:96:8b:28:
         e1:ba:33:e1:ae:43:09:fb:9c:fe:2f:8b:76:1f:12:a6:0a:1a:
         26:c1:b5:1d:95:d7:23:c7:c3:ba:59:f5:87:fb:f6:6b:ff:5b:
         6d:1a:72:77:10:7a:45:aa:62:c4:35:4f:cd:40:8d:dc:a4:d8:
         3e:14:74:ec:5f:07:24:11:11:07:37:5c:6f:1c:a5:76:69:4c:
         e8:5e:48:f8:09:12:24:c2:60:6e:85:62:47:fe:13:36:dc:4e:
         d2:d0:95:0f:80:d9:1e:da:a7:42:46:9c:db:c5:f3:f5:a4:a5:
         a5:e6:e7:60:52:67:4f:db:2a:5e:5b:2d:bb:44:ee:3b:6f:9e:
         5d:4c:8e:ba:cf:0c:14:bf:d7:49:58:43:3a:2e:ff:12:ac:a3:
         12:f2:15:0f:8c:ed:9a:b1:94:44:c0:23:6a:aa:49:55:d1:95:
         7d:86:ba:06:ea:07:3b:43:c5:f2:e2:1b:7b:1d:7f:e6:e1:75:
         2e:ec:f5:5a:a8:6a:cd:91:cc:c3:0f:f4:0d:93:37:ae:c4:58:
         7a:b1:3c:2b:ff:f1:30:c9:c0:04:08:b2:bd:f9:50:d7:5e:cb:
         55:91:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:25:15 2026 by rpki-client