Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa
File:                     f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa (raw, json)
Hash identifier:          k0z6Stf4+JKt9oUeDnGLTDIcqN9/KpRpfcxCQjYGAc4=
Subject key identifier:   30:A9:67:70:16:28:BF:4F:DD:CD:D6:8C:28:7C:EB:65:77:E3:C3:D1
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584DCAFB0C543A4B132D3F756300
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     63199
IP address blocks:        148.153.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0c:54:3a:4b:13:2d:3f:75:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=6252166d-fb0d-464c-b5f5-0390c6c0b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:95:41:b0:5a:78:62:37:50:fe:35:cb:f1:
                    95:60:bb:7b:b5:e5:af:0b:6d:cc:0c:65:9e:9e:84:
                    90:87:10:a3:f8:7c:7a:0a:59:ca:39:f7:09:7d:61:
                    7f:7a:43:4e:82:22:21:41:fa:99:7a:33:2a:a8:a2:
                    b7:3b:bd:5c:50:8a:b9:2c:56:6e:56:84:66:b8:ab:
                    a2:f4:0c:ff:f8:f2:37:78:7b:5b:b6:53:d9:d9:44:
                    2f:90:f0:52:1e:39:35:75:62:aa:d1:cb:a4:47:52:
                    6e:a2:95:08:66:d4:55:f1:37:4b:48:f3:b0:0c:4a:
                    bd:d8:11:7e:0c:76:5d:1f:b5:13:74:2a:b2:be:e6:
                    7d:a7:c0:ac:2b:c4:d9:e3:5c:be:91:e0:e9:78:8e:
                    2e:24:d8:de:1e:58:c6:fd:73:09:0d:60:ac:a2:59:
                    f2:27:31:cc:7e:58:2f:ed:85:53:14:6c:69:20:89:
                    61:46:33:17:98:90:fb:a6:3d:dd:48:b7:7f:6c:21:
                    8e:17:6e:e6:20:02:5e:07:d6:5b:59:7e:f1:b9:fe:
                    41:c7:6b:ab:65:76:22:58:ce:17:c8:0a:3a:bb:7a:
                    3e:cb:fc:38:4c:79:bb:fc:75:14:98:2c:f3:25:53:
                    5d:5f:83:35:f7:78:e7:e3:7b:57:19:38:af:4b:c3:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A9:67:70:16:28:BF:4F:DD:CD:D6:8C:28:7C:EB:65:77:E3:C3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:70:c6:17:44:d8:d3:c2:79:a1:fb:40:7a:dc:cd:34:37:c2:
         10:63:74:64:b3:68:fc:6a:1d:66:a7:3a:67:a5:28:e3:89:7f:
         7c:db:b5:f0:7b:a9:42:ed:18:33:b9:35:67:81:6e:b1:6d:7b:
         9b:d9:84:3b:42:c1:01:be:e9:1f:1a:0a:3d:22:bf:3c:4e:47:
         ab:f7:20:93:d8:d6:3a:86:c4:0f:49:3e:22:4c:99:b6:66:d2:
         50:79:ba:bf:cb:18:08:22:0e:32:e4:e3:b1:1d:ab:2a:a1:49:
         45:4b:bc:5a:08:aa:28:39:73:f2:81:3d:9a:0f:8b:12:25:a3:
         4f:2b:64:a1:1c:fa:37:f9:5d:81:73:7f:e1:0c:91:2d:9a:9c:
         9c:96:d2:cd:04:5b:f7:df:ab:08:f7:aa:f4:29:3a:5f:06:ea:
         17:63:32:3c:ac:16:1c:1e:27:18:e3:5c:9f:af:13:26:36:06:
         5f:4c:92:33:6e:cb:bb:9a:86:b7:c2:6a:2b:9b:c8:ca:ca:ac:
         f9:99:47:3d:af:29:de:0a:b4:fd:96:56:b1:5d:c2:ca:da:26:
         d8:c0:75:f7:76:f2:09:8e:d6:78:bf:c8:99:e4:82:25:87:ed:
         b1:5b:a4:1d:ec:e1:d3:67:c5:43:d0:07:8c:2a:ad:a8:d1:a0:
         ca:0d:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:43 2026 by rpki-client