Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b66d07c5-d805-3b4f-b7f5-59d3c1f95afc.roa
File:                     b66d07c5-d805-3b4f-b7f5-59d3c1f95afc.roa (raw, json)
Hash identifier:          yeBT1drmsvcfuYXKt+6ShGIfv2FNC/TywEQA31pKXfk=
Subject key identifier:   1B:2E:F6:C9:D5:79:58:5E:87:E9:C7:72:23:30:06:D8:6F:EB:62:FB
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584E7EBC5A690D6B170A48C64080
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b66d07c5-d805-3b4f-b7f5-59d3c1f95afc.roa
Signing time:             Tue 14 Jul 2026 10:19:52 +0000
ROA not before:           Tue 14 Jul 2026 10:19:52 +0000
ROA not after:            Mon 12 Oct 2026 10:19:52 +0000
asID:                     397849
IP address blocks:        169.148.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:bc:5a:69:0d:6b:17:0a:48:c6:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Jul 14 10:19:52 2026 GMT
            Not After : Oct 12 10:19:52 2026 GMT
        Subject: CN=5e32cb3e-4146-4532-8bc8-600b4d5027a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:4c:e0:d9:1f:a0:c3:e6:cb:cb:88:3a:df:
                    90:25:d5:dc:f8:28:d3:81:ca:e4:5b:81:a7:ac:c7:
                    a5:bb:e6:1e:e7:ac:83:65:e4:fd:13:4e:c4:32:e4:
                    18:4b:0f:9b:61:80:e9:15:af:6a:24:6e:b6:fa:59:
                    de:23:c9:75:1c:6c:d8:a7:f2:51:78:09:9b:c7:f6:
                    39:4b:47:0b:6b:1c:ad:7f:89:1c:ec:2e:fb:66:52:
                    ea:d2:c1:cd:25:8a:69:3c:d3:e5:36:55:cf:b6:5f:
                    21:d8:82:41:0e:a0:5d:59:06:a1:c8:e5:2e:8f:10:
                    cb:a6:b6:dc:6c:0e:76:30:fe:d2:1b:7c:2b:a2:9b:
                    db:3e:d3:65:4d:64:ba:af:a7:d4:11:42:2a:95:45:
                    2d:c7:d5:62:6f:f3:2b:bf:d0:5c:36:38:bf:40:ad:
                    62:08:de:a5:b5:16:e3:2e:23:0e:12:0d:3d:7a:18:
                    41:1a:46:e1:bb:a9:21:df:e1:9b:f5:82:7e:f3:a1:
                    85:f3:84:82:d9:56:70:48:f2:b9:9e:b1:2d:b6:cd:
                    59:af:8a:8e:ac:99:00:25:a5:cf:90:8d:9e:e0:f3:
                    d0:f8:ab:7b:a0:2c:12:b4:c3:d2:e4:bb:6b:ef:bc:
                    a0:e1:ba:08:a2:8c:e2:c2:7f:d2:a0:e4:26:e7:80:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2E:F6:C9:D5:79:58:5E:87:E9:C7:72:23:30:06:D8:6F:EB:62:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b66d07c5-d805-3b4f-b7f5-59d3c1f95afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.148.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:92:df:ff:52:5f:bc:f1:9b:1c:96:90:9f:07:8f:0d:d7:01:
         4b:a0:ee:2b:c6:f2:3d:5c:69:c6:3c:2c:9a:77:f2:e1:61:d6:
         a5:18:a6:69:28:e5:c1:9f:53:b9:ba:69:7b:2c:dd:25:32:b1:
         50:41:21:2f:18:33:74:39:4c:92:ed:2c:f2:7a:62:18:f6:86:
         64:de:62:c3:91:3d:33:4f:32:85:d9:82:3d:6a:b0:25:f2:6e:
         58:ea:82:2a:14:fe:6f:28:2d:bd:9e:29:f7:26:5e:58:6f:3c:
         a4:81:81:86:43:35:65:db:c3:6e:8d:40:33:f0:27:17:02:2a:
         3b:c7:99:31:f9:bb:37:b8:18:ea:38:05:99:71:5a:4c:35:f2:
         8b:f8:80:87:28:d9:7d:d7:15:bf:6c:59:5e:95:c4:c6:31:26:
         78:b9:c3:ed:b6:d0:6a:6c:81:6a:de:27:bb:9d:4f:1b:fa:6b:
         7d:ea:f7:08:88:44:e0:4b:dd:b9:3e:fa:33:3a:df:dc:8b:b3:
         df:68:c4:08:a2:41:f9:be:fb:a2:52:6f:5d:ce:31:12:bc:70:
         92:0e:93:5b:70:d1:cd:3c:15:c0:5a:f7:40:5d:29:00:46:7f:
         c5:f1:0e:94:95:9e:a7:bb:02:3f:59:54:5f:b0:2a:d5:5f:82:
         e5:3d:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:54 2026 by rpki-client