Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/026b8301-cef4-3113-b8e1-d35b57fd9e2e.roa
File:                     026b8301-cef4-3113-b8e1-d35b57fd9e2e.roa (raw, json)
Hash identifier:          xfOM24Ymq5uvSYSOBv2hwuyFCfH89uzLN9+kgt2m3J0=
Subject key identifier:   AC:24:2E:0F:13:EF:BB:81:45:EF:29:3F:41:B7:41:D7:51:7B:3B:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9EE75F991017AD05BECC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/026b8301-cef4-3113-b8e1-d35b57fd9e2e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33657
IP address blocks:        162.148.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:ee:75:f9:91:01:7a:d0:5b:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=3083f5fd-fadf-4277-bfe8-e1c6c47270c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:2e:cc:5c:f3:c0:8d:c1:ef:26:07:80:15:
                    ef:24:0b:b9:89:7c:4c:b1:62:3d:32:10:07:14:10:
                    6e:43:cb:f9:35:ae:93:45:84:10:5a:ee:3c:25:91:
                    bb:ad:88:01:34:f3:eb:fe:54:ad:07:40:41:97:b9:
                    67:de:ab:36:58:31:c4:85:ab:38:7d:51:d9:6b:91:
                    04:9e:cc:3f:12:2c:c5:67:8c:a8:2f:db:b6:29:33:
                    92:dc:a5:93:08:83:ec:6e:c3:8e:98:fe:85:8e:95:
                    3d:5e:f1:2c:a6:8a:b3:53:45:06:7b:64:be:25:2f:
                    05:5b:30:46:3d:86:50:f3:73:34:1c:1d:b0:a4:b2:
                    97:4f:aa:8b:e9:7b:d1:d6:01:09:f1:18:ff:4a:56:
                    e2:75:da:e4:0c:7e:35:c9:bd:4e:9a:cf:32:04:3f:
                    b9:01:8e:18:59:1d:c1:53:00:60:6c:18:72:20:14:
                    20:ce:1c:91:23:91:a5:79:e8:c6:9b:82:1a:07:8e:
                    eb:fd:7d:ae:a0:3e:87:b9:18:80:d4:6a:06:9e:95:
                    a7:6e:f2:93:0f:1e:d6:0f:19:d7:65:55:ac:72:61:
                    54:3c:71:2b:ab:ff:97:83:36:9c:76:8e:24:d1:86:
                    e0:02:ef:a0:40:91:5f:9a:16:b9:db:0a:40:e6:84:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:24:2E:0F:13:EF:BB:81:45:EF:29:3F:41:B7:41:D7:51:7B:3B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/026b8301-cef4-3113-b8e1-d35b57fd9e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:95:d4:08:39:9f:cc:bf:51:3d:96:b7:43:61:ad:11:1f:53:
         ee:b1:b8:24:6b:da:69:2e:b4:b9:aa:4a:8c:33:ea:b1:47:15:
         16:cc:dc:9a:ba:8f:31:46:3b:51:28:42:bc:cc:f5:c3:35:51:
         19:74:90:cb:0c:d9:b6:66:97:a6:76:bf:33:a0:31:00:59:e1:
         f4:44:c3:a0:f7:32:9f:55:f4:01:15:44:b1:c1:b1:7b:20:ff:
         31:ca:4d:df:b0:24:e9:da:52:e7:65:0d:06:98:7b:8b:4c:80:
         8d:12:b7:d2:a6:53:9c:07:9b:f7:88:82:eb:cd:b9:8f:7b:5b:
         72:73:4f:30:00:52:34:2e:05:95:56:36:c9:aa:bb:12:fc:bd:
         fc:f6:76:69:41:3a:c8:e9:6e:e2:b1:be:73:42:f4:72:94:06:
         b2:d6:a6:8e:7c:38:16:a9:73:cc:c1:e3:73:96:de:93:e3:6f:
         8c:89:29:be:75:16:0b:0e:dc:d3:3c:9b:d6:e7:9e:32:0e:22:
         a3:4b:3f:39:e3:ad:59:a5:c1:89:d9:b6:7f:b4:0c:8e:9d:25:
         47:b9:41:d4:ed:18:71:20:4a:90:5e:38:c7:15:da:1f:4f:2f:
         a1:18:2c:5e:07:5a:44:e2:6e:81:4b:98:d1:43:1f:c5:80:22:
         2d:e4:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:58 2025 by rpki-client