Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa
File:                     eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa (raw, json)
Hash identifier:          vYSqf1hAdVFFVZXhvBYOd1KWUkkZGvsWHfVrGFRHx5Y=
Subject key identifier:   0D:2C:06:2B:2C:8E:A4:E2:61:7E:33:62:78:92:BB:BB:DF:3B:5B:48
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584F6F22FFCD421CDB2FA6E1FAE0
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        148.163.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:ff:cd:42:1c:db:2f:a6:e1:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=b53efcdd-3aae-4c47-9baa-fe5dabfbe3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:fc:f4:14:01:23:32:32:d7:34:ad:1e:87:
                    4e:48:28:d7:7a:27:05:76:00:2c:32:3e:dd:76:5a:
                    2a:59:2c:e0:6f:44:77:d1:66:58:20:f7:81:17:ab:
                    25:31:6a:8f:79:04:1b:29:86:de:21:ce:d8:22:8e:
                    71:bc:8f:d4:2b:72:6e:62:e4:1a:0d:9e:5b:5c:d5:
                    23:18:00:33:0b:fc:fa:99:e6:f3:fe:60:47:24:df:
                    c7:30:45:9c:1f:54:a3:95:0b:9f:8e:af:de:23:3b:
                    aa:62:a8:32:4d:90:fb:61:73:df:97:c7:20:4f:78:
                    b9:ad:75:44:ae:58:d9:cf:06:55:4c:30:9d:24:60:
                    6b:65:21:9a:79:09:c7:fa:23:57:f0:e1:d8:0d:65:
                    72:60:73:e1:a0:86:84:79:af:e3:a8:11:5c:79:db:
                    52:1a:6a:0e:c1:c6:94:ab:5a:a9:96:57:80:49:54:
                    e9:9c:2d:33:f4:da:83:0e:fd:21:29:ce:51:0e:00:
                    e5:d1:e2:bd:61:d5:92:ff:2c:76:d7:5a:12:fc:0f:
                    de:77:41:99:8a:a5:86:24:ad:ec:f7:e6:ca:d6:72:
                    7a:e5:69:e5:93:bc:88:41:34:6c:09:e9:e4:f2:08:
                    7c:e4:06:26:9e:78:28:ef:b4:21:e8:8e:c9:ca:f3:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:06:2B:2C:8E:A4:E2:61:7E:33:62:78:92:BB:BB:DF:3B:5B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:30:fc:da:44:eb:72:d7:55:78:6e:2a:27:90:ff:49:2b:
         70:0e:c1:33:31:73:d1:c6:45:6b:aa:c9:39:67:a2:f0:c3:8b:
         40:cc:85:75:aa:fc:8e:24:57:91:84:8d:ad:b0:1f:94:e2:33:
         7f:c4:50:19:cb:4e:46:ee:7e:3b:1c:af:1f:6a:89:8b:0e:6a:
         f1:66:7b:9a:f6:3d:40:6b:5b:8a:46:22:95:bd:e1:97:17:15:
         f0:8d:94:58:cd:16:34:f4:ce:71:54:63:12:0a:c3:09:0f:d7:
         66:a3:27:8f:9f:6d:a7:ca:ea:42:92:72:42:bd:79:3e:75:bd:
         51:e2:13:8b:a0:24:24:73:13:c1:5d:37:06:7d:38:df:74:ae:
         c9:52:db:5b:e8:db:b0:9f:f8:a2:12:27:e8:99:b7:26:89:a0:
         7e:82:68:26:28:16:7f:8c:d1:86:75:5a:8e:78:c8:29:9d:18:
         c2:96:57:df:b3:5b:61:c6:b0:47:7d:e0:e0:c8:b8:b0:ef:29:
         bb:05:65:04:32:74:a4:d9:b1:0b:2c:cc:86:e8:c9:50:17:ed:
         c7:7b:a5:0a:8f:6b:0f:b5:78:cd:93:0a:99:a9:58:cd:3c:4b:
         71:bf:b9:f3:47:c9:33:c8:9e:22:22:10:20:99:46:f7:68:b0:
         f0:95:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:33:50 2026 by rpki-client