Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa
File:                     c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa (raw, json)
Hash identifier:          4QBn4DQYKd0sEczfwk57UGYNMl+Eeu+vSneAAcsUQps=
Subject key identifier:   29:6B:DA:D8:E9:27:CC:3D:29:E6:9C:79:9B:C5:21:FB:F1:CB:DA:5F
Certificate issuer:       /CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
Certificate serial:       010D0C9F4328584E9309C6561073CA0C353437C0
Authority key identifier: 83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa
Signing time:             Tue 21 Jul 2026 16:52:02 +0000
ROA not before:           Tue 21 Jul 2026 16:52:02 +0000
ROA not after:            Mon 19 Oct 2026 16:52:02 +0000
asID:                     15304
IP address blocks:        148.186.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:09:c6:56:10:73:ca:0c:35:34:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
        Validity
            Not Before: Jul 21 16:52:02 2026 GMT
            Not After : Oct 19 16:52:02 2026 GMT
        Subject: CN=90aa6db9-0bdb-403d-8ddc-e64620a45126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:85:6b:d2:1a:25:80:80:01:97:16:82:fa:
                    c6:be:a8:69:a7:6c:e6:18:26:35:8c:e1:98:23:f7:
                    ae:48:42:90:36:87:1e:9d:6b:50:9b:d6:8b:91:59:
                    38:11:75:3c:61:09:b2:9d:b6:96:e0:45:01:4e:ef:
                    eb:76:23:9d:5f:ef:17:74:36:78:39:59:f9:de:ea:
                    a5:a3:3c:de:fe:d8:3d:01:fd:98:ca:c6:0c:2d:31:
                    d1:72:8f:02:d4:ef:32:3f:0c:a2:57:1e:44:0f:42:
                    b5:1e:3a:66:95:46:df:e0:bc:ea:c2:a7:43:73:c7:
                    f4:85:77:92:4b:60:5b:14:f0:d8:90:8d:59:ff:15:
                    93:c8:40:4e:40:b7:73:7f:05:41:70:0f:e1:af:a0:
                    51:89:bc:29:c1:08:03:b1:18:0c:77:23:9d:13:f0:
                    cd:f4:5c:c1:b3:d9:5c:af:98:9d:f3:25:04:61:f0:
                    f9:6e:a7:11:a8:c2:36:00:ba:b9:99:c8:e2:0e:9b:
                    7a:ef:60:25:d2:0f:41:b5:17:70:10:ee:30:fb:44:
                    ed:1e:54:65:d8:6a:c4:2d:94:51:16:ee:a1:2c:f8:
                    12:ec:e6:a4:e1:d3:cd:fe:41:90:85:8a:48:fe:7c:
                    0e:de:da:3b:fc:60:9d:92:67:03:52:11:a3:59:ff:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:DA:D8:E9:27:CC:3D:29:E6:9C:79:9B:C5:21:FB:F1:CB:DA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl

            X509v3 Authority Key Identifier:
                keyid:83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.186.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a7:a5:4b:51:33:45:93:1f:3e:b6:aa:34:f0:f9:45:a5:c3:
         c5:a9:82:a7:12:0c:c4:0a:9c:1e:bc:8a:4b:c6:8f:88:c4:7a:
         a4:33:8e:3d:73:7b:00:b0:c3:6d:fc:cf:2c:40:0b:a1:6d:b9:
         a0:38:09:7b:6f:7c:e7:21:25:c0:ad:9d:0b:b1:9e:58:53:1a:
         46:b5:ee:2c:05:fc:8e:9e:67:28:f5:38:35:d6:13:0b:a0:5f:
         3b:f6:9b:5c:17:32:39:7c:39:8c:31:39:ec:e3:ba:c7:57:f0:
         dc:20:73:e6:9b:98:66:af:c1:45:d4:d0:bb:e8:71:20:9d:59:
         13:e8:35:08:89:13:52:ed:ea:c1:c0:36:11:da:4b:f0:c8:6f:
         26:3c:a6:47:c2:25:05:28:5e:a2:65:35:1d:03:e0:1e:3c:9d:
         7b:44:fd:48:4e:76:e1:49:bf:b7:84:01:e5:fd:18:59:f1:cb:
         6e:52:20:51:1f:e4:e5:16:e9:5b:22:28:6b:4e:ba:01:7f:28:
         71:2e:52:b7:49:e2:3f:30:2a:ee:dc:57:02:fe:8f:0a:b0:f8:
         dd:6f:ea:1a:57:95:1d:10:83:53:66:64:21:39:2b:ee:00:0c:
         58:15:1e:44:0d:90:e0:77:49:a2:f4:f5:06:95:fc:92:62:3b:
         f5:b7:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:33 2026 by rpki-client