Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/0155302e-2572-3721-b5e8-e23b57d6cd96.roa
File:                     0155302e-2572-3721-b5e8-e23b57d6cd96.roa (raw, json)
Hash identifier:          nOTAZvXZPF0rrUsyvvGBOx+iaEaT5osSdP4BJ48XyyM=
Subject key identifier:   37:A9:2F:68:5B:73:48:BA:5E:17:D4:A1:4B:BC:24:A5:96:EF:B4:5D
Certificate issuer:       /CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db
Certificate serial:       010D0C9F4328584F549D643F9656F38760A3C980
Authority key identifier: 82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/0155302e-2572-3721-b5e8-e23b57d6cd96.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     16668
IP address blocks:        192.148.252.0/23 maxlen: 23
                          192.148.252.0/24 maxlen: 24
                          192.148.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:64:3f:96:56:f3:87:60:a3:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=2e12b5cd-e2bf-4580-af7e-8fc1f72b6e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:f6:7a:55:75:6c:4f:04:bb:b7:27:f8:d0:
                    69:fa:81:fd:0c:62:87:27:3f:34:ac:17:c2:6b:3b:
                    51:61:ab:76:89:ce:25:35:59:35:9b:df:e7:a7:a0:
                    79:c7:41:30:6a:39:90:f9:76:8a:60:c2:d7:8a:b9:
                    06:28:71:1f:ba:18:de:3a:86:c3:61:de:ce:40:60:
                    05:51:b9:21:8e:cb:84:0d:23:88:f6:1f:ee:70:14:
                    5c:db:e4:2c:ae:73:03:49:cc:f3:6c:3b:73:a2:6c:
                    60:64:d9:e6:18:32:a6:18:15:56:60:b3:67:4e:e5:
                    e1:2c:59:24:df:30:cb:59:56:4a:c5:29:10:06:66:
                    a9:db:c8:9f:d1:d2:f7:ad:20:af:39:e8:5e:6e:10:
                    b4:bd:14:06:be:f5:d3:19:3a:cb:78:33:e8:45:12:
                    aa:db:3a:f9:09:43:49:34:de:71:89:54:27:e6:28:
                    fc:17:db:b8:c0:27:7b:eb:ba:46:83:ae:ea:c3:e5:
                    2b:22:85:fe:ff:70:e6:97:cd:4a:08:17:f2:1c:1c:
                    26:b6:df:1e:f4:cc:26:10:8e:76:bb:3f:eb:96:a7:
                    40:2c:86:b5:26:91:95:82:e3:20:27:5f:fc:9f:d9:
                    19:4e:72:2b:a7:8d:d5:4a:73:90:64:71:ac:00:5b:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:2F:68:5B:73:48:BA:5E:17:D4:A1:4B:BC:24:A5:96:EF:B4:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/0155302e-2572-3721-b5e8-e23b57d6cd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl

            X509v3 Authority Key Identifier:
                keyid:82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:12:05:4a:cd:8c:d5:ee:72:93:c3:19:16:32:af:bd:75:e4:
         e3:6b:92:d1:a0:0a:5e:59:54:a0:98:af:4e:fa:20:fd:9f:44:
         f4:63:e1:2f:fb:6a:e8:8e:fe:4d:31:b9:f3:ef:a2:0f:74:c2:
         b1:9e:76:3d:71:09:70:c7:eb:8d:98:c0:80:45:0e:18:bd:06:
         ce:81:11:e5:23:95:63:5c:b7:d4:a8:9b:0b:66:00:57:c2:87:
         49:b6:6c:72:8d:94:b7:27:e9:82:e0:48:ec:eb:fa:34:11:16:
         04:e2:36:64:98:61:14:cc:d2:ba:90:25:7b:f5:c7:ee:eb:d7:
         1d:96:78:96:ee:a9:4f:55:eb:d4:fa:9a:cc:d8:41:d9:a0:9d:
         77:27:c0:01:5d:bc:d8:a0:71:a6:f9:fd:2a:e2:af:f6:d4:be:
         e1:59:12:ca:1c:54:15:ba:f1:34:83:19:1d:f3:a8:ff:39:5e:
         a6:16:d7:94:f3:ee:c4:56:4b:fc:fe:48:9c:56:dc:c4:16:52:
         c9:a8:28:36:28:12:06:55:bd:44:fc:af:6b:0f:a9:09:1a:f1:
         1b:ac:79:4c:bc:bf:9f:74:ed:4e:ae:f8:a9:b5:2b:b2:3a:24:
         5c:20:7d:e1:48:a5:7d:24:6e:93:35:c4:30:bb:cc:a0:e6:11:
         08:8b:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:16 2026 by rpki-client