Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/178a6e3d-e703-3251-981b-9905dab066d9.roa
File:                     178a6e3d-e703-3251-981b-9905dab066d9.roa (raw, json)
Hash identifier:          jxYSL2LN7pZDKYZz5saAMtZRw2ODOSZWe8p/W9TY/g8=
Subject key identifier:   68:13:50:CE:90:98:95:2B:F2:F4:17:CA:BE:85:99:EC:3C:3C:39:49
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D1B1A13955E643EF0A6EF2040
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/178a6e3d-e703-3251-981b-9905dab066d9.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        148.59.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:13:95:5e:64:3e:f0:a6:ef:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=28773b44-e62a-4eba-92f4-8f7aa3466199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:52:84:91:eb:fb:05:cd:52:30:87:f2:2c:
                    1f:2c:4d:51:24:77:eb:32:b6:31:da:09:82:53:f3:
                    ff:c5:41:c1:21:78:21:29:1d:3d:ee:5c:70:08:2d:
                    11:34:74:83:62:8e:8d:2c:fb:b9:2a:35:ab:a1:04:
                    5a:74:90:4d:8a:df:87:f7:ca:b1:13:b3:87:1b:36:
                    36:e7:98:2d:36:d9:0e:3f:9c:27:7e:96:6c:0a:d5:
                    6c:bd:be:6e:de:4d:9a:bd:ef:b8:e5:99:fe:b0:07:
                    85:9d:2b:71:ce:fc:eb:ca:eb:7e:30:d0:bb:2b:4a:
                    0d:35:9a:f6:97:72:ef:38:82:4d:a5:cb:fc:77:8a:
                    f8:3b:b8:3d:54:15:45:8c:a7:07:e1:3a:68:fa:16:
                    62:70:af:48:ae:79:b1:fd:e7:3d:68:b8:03:6f:8a:
                    7f:54:86:bc:3d:b6:d6:7c:19:a3:90:ec:26:be:39:
                    79:da:85:87:35:a8:bb:ec:5a:c0:72:79:91:4c:97:
                    01:c7:c5:a7:76:b4:a9:62:b4:40:ea:ac:3b:00:64:
                    37:b5:07:81:27:79:5a:39:b7:77:33:19:49:e5:ec:
                    8c:94:dd:4b:e2:ab:6e:f6:c1:64:69:fc:49:36:3e:
                    40:7a:f5:91:ee:54:40:c9:d3:97:e1:f3:e8:d9:53:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:13:50:CE:90:98:95:2B:F2:F4:17:CA:BE:85:99:EC:3C:3C:39:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/178a6e3d-e703-3251-981b-9905dab066d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:46:82:1b:ec:3d:c3:a7:f7:96:91:4d:f2:d9:01:00:bb:db:
         3b:7f:84:a1:95:c9:cc:ac:cd:48:b4:7e:b1:55:b6:74:fa:b7:
         e5:d0:4a:e8:ce:41:0f:f4:c3:9f:f6:84:49:99:60:1a:cd:cd:
         b3:38:1a:7d:d6:c1:98:aa:e1:f2:8f:d4:18:c3:2b:9c:0d:f5:
         37:67:64:e2:50:34:19:59:08:bb:4f:b8:af:ff:e1:88:9d:f6:
         84:4d:c3:25:c6:69:f9:79:f1:2e:e3:db:32:00:85:63:bf:d0:
         ae:f9:e7:1f:fe:81:4a:15:84:12:07:5e:8d:19:4e:94:46:2f:
         ee:36:c4:63:08:bf:8e:f2:96:ce:7e:b0:0d:71:2f:ee:b5:51:
         68:19:2e:1c:6f:33:d6:37:11:77:44:10:a5:6e:d9:58:fa:2e:
         e0:0c:11:65:69:0e:84:5a:df:52:e4:6f:ff:1d:70:6a:75:40:
         ec:ad:75:d1:94:e7:dc:ce:ff:a0:de:9c:0c:69:a0:8d:09:55:
         57:e3:36:1f:13:b3:79:75:a7:81:e7:5e:51:e3:1e:e1:32:67:
         cf:0e:88:ff:6e:2b:72:70:3a:75:9b:4f:3c:31:73:79:39:45:
         1d:10:86:4b:9f:9f:58:a0:8d:14:8f:fe:c1:b2:39:96:17:eb:
         b1:68:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:36 2026 by rpki-client