Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/fe7c4442-addc-3ce4-8135-8acde6c9345d.roa
File:                     fe7c4442-addc-3ce4-8135-8acde6c9345d.roa (raw, json)
Hash identifier:          ipEmpiLqX3HYgn0+iirlDwG7IurSHzma5TOcAW8Vx5Q=
Subject key identifier:   43:39:DA:CF:7E:DC:1F:9D:59:65:EC:FA:F1:45:91:15:4F:CD:1A:CA
Certificate issuer:       /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial:       010D0C9F4328584F49760A01AB2C1673F9549D00
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/fe7c4442-addc-3ce4-8135-8acde6c9345d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15404
IP address blocks:        148.188.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:0a:01:ab:2c:16:73:f9:54:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=44172b0a-1e34-48ee-9387-3ab9787c1766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:ba:c8:43:f2:e6:09:8a:36:44:9a:7a:c4:
                    07:21:51:54:1e:7b:c7:b3:97:df:5d:7d:c7:ea:a4:
                    fa:ba:82:22:c4:0c:c5:ec:d9:e8:1f:cc:fc:af:f1:
                    86:61:57:83:ad:24:bb:1f:f3:c5:c2:df:5e:60:d7:
                    1f:aa:27:aa:d2:0a:ed:34:bb:9b:da:12:45:79:e1:
                    35:68:b9:0c:55:5e:01:cb:8b:d0:b7:dc:7b:99:1a:
                    23:18:3c:ce:b3:d9:fe:88:75:ec:7c:e3:f3:e7:73:
                    54:7a:31:f7:ad:78:14:44:32:74:9a:e8:ac:50:c4:
                    55:de:3c:79:17:3d:96:2e:34:54:87:26:9b:5c:de:
                    99:44:2f:3e:f9:a7:00:4c:de:25:b2:a7:b8:c4:38:
                    86:84:44:ee:4e:c3:2b:80:0d:04:90:bd:a9:c0:d0:
                    9d:a8:4b:ce:da:bc:bf:62:23:ed:48:bc:1e:07:07:
                    66:99:06:52:1e:72:65:0b:c4:8c:fe:b4:d0:d9:92:
                    1f:30:3a:05:0f:81:5e:b7:f0:a4:3e:8b:78:42:08:
                    61:90:e6:46:35:b1:eb:35:b7:ff:d6:cc:23:31:22:
                    a6:ef:0b:f7:60:4d:1c:b5:4e:8e:fc:de:1e:84:6d:
                    e6:fd:76:eb:cd:1b:26:fa:cc:66:cb:4b:f0:08:a9:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:39:DA:CF:7E:DC:1F:9D:59:65:EC:FA:F1:45:91:15:4F:CD:1A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/fe7c4442-addc-3ce4-8135-8acde6c9345d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.188.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:9e:0e:9e:20:72:36:18:58:a1:25:6e:de:a0:0f:fe:73:
         18:d2:49:d4:31:24:6f:eb:cf:6a:1c:c8:39:1a:cf:c1:22:62:
         b4:0f:ff:43:e3:ca:93:f2:4d:81:3d:c1:b4:64:96:02:91:d3:
         28:84:eb:36:e5:f6:fa:71:42:1d:75:0c:ac:90:fc:de:bf:2c:
         44:1f:e8:62:5e:c3:e3:c2:4c:88:e5:59:88:1a:ac:16:08:3f:
         40:65:ca:10:d2:41:12:6c:98:ed:42:47:ee:42:dc:fa:42:09:
         9a:1c:2c:a0:ee:1f:48:86:82:35:cc:7c:e3:ec:e0:e4:87:53:
         55:a8:5e:5e:45:7d:b5:e5:c9:ac:44:96:f9:af:be:52:50:2b:
         6d:23:d7:c4:43:a7:f9:4c:9c:87:61:94:5f:17:77:5b:66:3d:
         4f:59:6e:f9:4c:1c:f2:f0:73:61:4a:c6:67:1d:d9:1c:b0:08:
         e7:aa:1f:0e:19:6f:fe:26:66:02:8e:5f:d6:64:ad:b0:12:e6:
         ff:5e:f1:4e:fd:d4:09:76:e7:4b:73:da:ef:59:5d:d0:54:8e:
         82:a4:cd:ee:2f:dc:26:63:e2:57:1d:2a:05:73:c1:d9:4f:f1:
         90:8b:3b:01:ad:af:4b:4d:a1:0f:8d:d6:28:57:f5:b8:c7:91:
         14:02:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:50:28 2026 by rpki-client