Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
File:                     03982157-61b3-3065-ae38-53829dc9dce4.roa (raw, json)
Hash identifier:          cYMvcR5aj8/9OhPMP7pZgUVekQcs+5Y8hx1gjePSQRE=
Subject key identifier:   9D:18:65:A8:C2:3F:0B:0A:2A:96:C1:68:B0:E2:16:20:B9:20:E4:A5
Certificate issuer:       /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial:       010D0C9F4328584B8EACE8D25920AC1B200325D0
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     56308
IP address blocks:        148.188.240.0/21 maxlen: 21
                          148.188.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e8:d2:59:20:ac:1b:20:03:25:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=844f916b-553f-4218-acd3-53f6fe6573b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:f8:3a:9b:fb:54:89:30:9b:be:05:f5:ed:
                    01:27:47:82:64:b8:83:c0:46:6c:75:cf:b9:50:01:
                    07:19:ca:34:6d:e3:3b:2e:91:5b:85:69:83:f7:39:
                    f8:62:60:2f:63:28:4c:e7:d4:4b:0e:d0:ff:48:a7:
                    ef:97:35:d0:fa:53:6f:a4:97:55:ac:f8:08:e7:44:
                    d7:19:90:18:e4:fc:ce:fb:61:39:d4:b1:63:44:68:
                    03:62:88:23:41:f4:49:da:98:bf:25:07:93:d4:c5:
                    4e:ea:3e:71:f0:03:08:df:61:3e:06:f1:3a:0b:6a:
                    86:b7:05:52:34:25:85:35:fd:d3:fa:80:2a:fd:c4:
                    a5:4a:e3:0c:50:31:ca:50:af:73:0d:3c:e1:fc:ea:
                    42:f7:d1:b8:22:da:0f:93:d0:7b:55:f4:4a:c2:aa:
                    6c:90:b9:7b:83:07:ff:de:ff:ba:8b:10:6d:87:f1:
                    e4:aa:07:b8:5a:59:72:17:c5:47:80:51:d8:25:91:
                    06:46:c5:d1:64:5c:d1:d1:74:8c:1d:3f:63:fd:75:
                    7f:9d:5a:26:66:bb:61:76:10:fe:f5:b0:40:2b:50:
                    3e:8a:b1:4b:b2:87:75:51:0d:c2:07:bc:62:84:e3:
                    c5:7e:96:4d:26:34:81:3f:4e:d2:a6:f5:5d:25:dc:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:65:A8:C2:3F:0B:0A:2A:96:C1:68:B0:E2:16:20:B9:20:E4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.188.240.0-148.188.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:4a:85:4f:7f:f5:db:c5:10:ee:ae:8e:c5:60:d4:8f:6a:
         e7:27:fb:b2:f7:98:34:22:8b:f0:87:05:fe:5e:1a:d2:73:c2:
         49:8b:f8:4e:2b:f7:98:cf:35:76:96:86:38:f5:87:79:3d:9d:
         28:74:19:f8:15:6b:b4:bb:51:02:a9:a5:d3:e0:74:15:a2:a7:
         6d:d9:86:62:c0:f8:b2:85:f4:bc:eb:d7:6d:12:58:95:3b:c2:
         71:da:45:a4:e4:87:9c:f2:90:b0:9b:86:c3:23:d4:4d:7f:ac:
         50:2d:89:b6:e0:c7:b4:48:0b:76:81:2c:b9:c3:b3:3f:4d:3b:
         8c:dd:d6:fb:af:c5:a4:5d:3a:94:5b:4d:d8:db:61:d0:59:fe:
         d4:84:f5:fc:f6:bc:ad:ad:f2:7e:d7:c3:4f:58:15:50:28:b3:
         ac:99:59:09:c8:70:09:97:a1:03:4f:08:d1:cd:41:e7:2c:03:
         13:b3:86:28:5f:0c:2a:42:83:50:d8:cb:5b:aa:df:e2:a4:ab:
         67:52:f8:41:f8:de:01:62:69:ec:0b:c5:69:07:1c:61:79:b6:
         9d:2e:9b:15:6d:8c:f4:13:54:58:43:b8:7f:c9:cc:2e:84:df:
         98:81:32:62:a6:20:14:13:f0:d8:ec:cc:86:7a:e8:85:ed:43:
         26:02:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:50 2025 by rpki-client