Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa
File:                     a36da157-b4f8-3fa1-861a-594dc015fe56.roa (raw, json)
Hash identifier:          1l9+sYxguEdvxUYedc1UXltG2vlCZYu1NqLmYnXclwQ=
Subject key identifier:   C7:5A:3B:95:D9:DD:6F:D2:7B:BD:09:74:1A:A6:6F:D1:42:4C:2E:15
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F49751DDBABFBAB9C1B82CC80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        148.59.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:1d:db:ab:fb:ab:9c:1b:82:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b21f361b-5871-4cb7-bdf9-2331d0aa3ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:14:f3:24:80:c7:a0:4b:22:cf:4a:5a:84:
                    5f:7c:37:5d:20:2c:b8:c0:ff:5f:77:b5:18:64:cf:
                    e7:c4:1d:e1:8f:f3:f4:32:52:4b:ba:ce:b0:bf:9f:
                    00:1a:04:72:e7:93:d3:47:8c:14:65:bb:2d:23:7c:
                    be:1c:64:8f:69:23:eb:6b:e9:08:8f:09:0f:dc:c7:
                    5e:b1:0b:35:72:91:ab:82:bc:a1:c0:13:51:c8:7d:
                    83:b3:a8:f0:3f:70:4a:17:8e:cb:a2:e2:45:b5:35:
                    ea:b7:c2:39:88:f8:63:8b:0d:8a:b2:49:af:11:e6:
                    12:26:fe:6b:8a:40:d8:d6:e4:00:ac:d7:28:2e:b6:
                    88:36:22:8e:1d:8f:53:28:a2:e1:a1:26:b9:c6:93:
                    b5:d2:ff:08:e0:53:91:e5:fb:03:ae:e0:7c:af:9b:
                    29:af:76:88:b3:d1:6a:25:21:f5:2f:4e:27:17:6d:
                    59:97:02:d5:c0:e5:46:29:b0:0a:3a:c3:33:d6:f3:
                    6c:0e:76:f1:a5:cb:26:80:79:4b:78:4a:24:73:27:
                    20:0d:ef:88:f5:7e:0e:d5:ff:b4:1d:67:bb:d9:aa:
                    ea:05:56:25:b2:22:c6:19:b0:65:4c:29:de:e9:93:
                    ee:8f:34:af:ef:49:4a:27:fa:71:62:6e:50:43:4f:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5A:3B:95:D9:DD:6F:D2:7B:BD:09:74:1A:A6:6F:D1:42:4C:2E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3f:7d:f4:1e:f6:37:84:95:a7:83:1e:17:77:9a:b9:a7:70:
         f2:f6:16:d5:b7:34:e2:a5:9a:3a:6d:d2:dc:b1:1a:c4:4e:60:
         7b:1c:84:3c:10:3b:12:93:8d:4d:d8:83:1b:63:41:2a:de:df:
         ca:2b:14:6f:d2:c9:f9:a7:b5:14:4f:bb:6a:13:d3:74:7a:68:
         4e:bc:9d:f0:fe:31:d0:99:95:81:79:95:92:30:09:ba:c2:81:
         46:9a:12:c1:b0:49:84:1a:49:b2:7b:cf:ab:45:33:a7:7b:c0:
         11:0e:b2:fa:c2:de:72:c3:f8:43:fe:61:c2:30:b0:b9:24:86:
         d1:a5:eb:8e:28:51:2e:c3:05:7d:9b:90:53:a5:41:e0:c3:e4:
         53:6e:9b:9d:92:66:0b:d4:43:62:b2:16:b9:30:4e:13:df:5d:
         69:a5:9a:bb:dc:21:08:30:8e:59:2f:a2:22:ae:45:ff:7d:c9:
         2a:8f:9e:7e:9b:fa:92:26:b0:7b:e4:ac:ed:7c:31:05:32:ad:
         5a:8c:38:32:a4:b1:3b:75:ed:db:7f:07:1b:98:92:1d:91:c2:
         38:89:5f:15:75:53:94:bb:44:5e:10:d1:a2:06:5d:a0:1d:9d:
         4e:7b:7d:3c:2a:ce:3f:31:1e:84:80:50:b5:c6:1a:92:46:27:
         4d:a3:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:21:12 2026 by rpki-client