Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa
File:                     4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa (raw, json)
Hash identifier:          tlrP/+fiJphc6Cym46jFqNWjqDGDrlR8Wnn1VCFu4w4=
Subject key identifier:   E7:0D:4A:82:52:70:2F:8A:36:FB:17:4A:94:70:2B:A5:75:85:6C:8A
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584F498B6A552B72524BFBC21CC0
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     56201
IP address blocks:        169.148.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:6a:55:2b:72:52:4b:fb:c2:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=367651d3-d310-45de-8769-0d82719cbb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:f9:f1:47:52:d2:ea:54:8b:e1:b8:42:f4:
                    32:65:3b:98:0e:f6:10:19:66:92:8d:08:87:b0:cd:
                    dd:15:34:f4:40:f0:7d:cc:3e:f3:3a:ed:ae:39:ba:
                    f0:c5:bb:6e:15:60:fa:d9:6a:15:e4:55:ac:50:a6:
                    50:b3:1c:e6:10:7f:83:cd:0e:0a:6c:93:a3:a6:a6:
                    d1:bb:3e:12:a8:86:6f:05:9b:fb:92:61:e9:5f:1b:
                    c5:f1:4d:ee:01:26:25:50:52:59:ad:ab:70:25:da:
                    6b:8e:e3:0b:5e:4a:0a:5b:6c:55:64:7e:b5:af:72:
                    08:e3:4a:a4:cd:29:b9:cd:0d:93:34:2c:bd:93:cc:
                    6e:46:98:ff:30:4b:b8:a2:b1:60:fb:0a:25:5e:f2:
                    fb:4c:d8:68:54:3d:50:f2:83:7f:ca:5b:e0:70:5a:
                    19:1a:ac:3d:23:57:49:37:08:e0:d7:ff:70:25:23:
                    3d:b1:e8:b9:1d:3c:b8:68:12:e3:73:85:99:56:d7:
                    af:bc:bf:55:2f:a0:f6:b7:8f:7f:93:87:35:46:2c:
                    48:73:19:4f:0a:48:ce:cd:b0:f2:95:9c:73:d9:1e:
                    06:4c:d5:84:68:90:14:22:eb:cb:4d:cb:99:d0:9a:
                    cb:f7:d9:a1:f2:6d:25:9b:8b:47:83:68:59:5b:fa:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:4A:82:52:70:2F:8A:36:FB:17:4A:94:70:2B:A5:75:85:6C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.148.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:30:f7:dc:8b:41:cd:1d:77:f7:3f:08:09:0a:ef:49:b8:57:
         4e:24:b6:70:13:45:11:50:7f:61:69:55:38:95:8e:08:3b:b0:
         ae:b5:bb:d9:83:05:4c:a3:da:a4:d9:66:db:df:f4:d2:7e:95:
         5c:1d:11:f1:68:76:62:47:72:5b:a2:ba:42:18:ff:2c:44:a8:
         38:fd:df:cd:7d:41:58:68:4d:ee:b0:81:d4:b7:b4:21:c8:43:
         26:94:ea:5b:df:f6:7b:49:de:34:1f:6e:23:c1:27:07:40:9f:
         a3:31:f1:16:f1:15:db:87:c8:6e:08:9a:01:b9:8e:de:45:c5:
         a9:a7:07:97:33:5b:e2:d9:b9:43:54:a9:88:3c:e2:0e:09:d9:
         0e:e8:61:3e:ba:e6:fa:5c:0b:09:5e:53:a7:f3:ab:5d:3b:3c:
         5a:91:8b:13:79:15:d0:7b:86:e9:ee:6c:ac:2f:91:cc:94:d4:
         a8:48:6e:25:0e:27:02:c9:02:c5:a9:5d:b8:8a:d2:6e:0e:9a:
         47:64:36:50:8b:17:ec:cb:f0:02:39:52:ab:d8:8a:31:ed:d3:
         b7:ff:01:a1:73:b5:39:3f:18:1b:ea:6d:4d:89:56:d8:ba:dc:
         1b:b8:98:59:67:c6:2b:2d:cf:bb:73:01:a0:38:ab:b5:27:59:
         a5:97:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:20:43 2026 by rpki-client