Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/748385f9-a4ce-3793-a7be-7cafafbb9105.roa
File:                     748385f9-a4ce-3793-a7be-7cafafbb9105.roa (raw, json)
Hash identifier:          HWz3WpavnPtXOzMaJyB+P/2tYMsNhKd0hqoClO1pKG4=
Subject key identifier:   57:12:9B:B7:15:E9:D5:7C:95:7B:9C:6F:AC:21:A1:1A:01:28:AB:EA
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584DC175B229AEA219654696FAC0
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/748385f9-a4ce-3793-a7be-7cafafbb9105.roa
Signing time:             Thu 07 May 2026 15:09:44 +0000
ROA not before:           Thu 07 May 2026 15:09:44 +0000
ROA not after:            Wed 05 Aug 2026 15:09:44 +0000
asID:                     32710
IP address blocks:        164.153.173.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:75:b2:29:ae:a2:19:65:46:96:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: May  7 15:09:44 2026 GMT
            Not After : Aug  5 15:09:44 2026 GMT
        Subject: CN=96cabc5d-bf25-4ba0-8fc7-0227d8b0613a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e9:cc:28:33:89:2e:a6:9b:7e:e5:e7:45:71:
                    d3:b3:84:a6:2c:e3:26:5b:3f:cd:80:46:3b:26:52:
                    63:28:c1:25:6c:96:b5:83:59:22:8e:fe:0b:b6:30:
                    51:9b:55:05:c4:0b:3e:b3:5d:f0:d0:e0:2d:4e:54:
                    fb:82:0a:24:5e:b3:da:5e:ef:c0:86:d1:1a:a3:9d:
                    7a:68:46:9c:c9:8b:b8:f0:2f:70:a5:4c:0a:b7:3b:
                    de:af:45:84:46:af:b3:a8:35:95:80:55:60:22:79:
                    69:21:48:ea:ff:b1:e1:d2:7b:f2:34:ef:cc:04:9b:
                    05:ef:cc:5f:66:13:2f:14:c7:bc:e9:27:52:68:9e:
                    55:6a:7a:df:b7:ab:2a:8d:1b:62:55:01:fa:39:93:
                    ca:38:34:7c:c7:d7:55:49:09:24:32:0b:a7:5c:e8:
                    c6:e3:7b:8e:38:d7:fb:c0:80:27:01:0f:cc:44:b0:
                    aa:2f:50:ac:dd:3a:7e:ad:0c:2d:a8:cc:4b:69:bc:
                    a5:0c:40:06:52:56:2e:11:a8:f5:74:ed:18:ac:7a:
                    52:9d:c6:c3:43:bc:b8:2d:1a:dc:4c:d8:45:8c:9a:
                    8d:58:06:12:37:6d:62:25:b7:87:2e:8f:84:1b:24:
                    43:fc:e3:10:25:ed:78:9c:43:bd:c0:c4:b5:6b:31:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:9B:B7:15:E9:D5:7C:95:7B:9C:6F:AC:21:A1:1A:01:28:AB:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/748385f9-a4ce-3793-a7be-7cafafbb9105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b0:4e:aa:55:e2:6c:06:0a:05:ef:8f:da:ef:39:8a:be:75:
         46:8a:f3:ce:1d:ed:5f:5e:43:f4:e9:6b:25:dd:0e:e0:87:40:
         e8:b2:bc:49:ef:f2:94:59:01:29:d0:79:ec:0e:f2:fd:cc:c7:
         8a:df:a4:3d:75:93:3e:5f:44:97:cf:3c:8f:ef:e1:fc:59:a4:
         3b:bf:80:25:c8:69:69:a8:b2:93:1f:ac:dc:1f:c8:3b:a8:49:
         50:10:cf:4e:90:a2:9b:3a:b6:c7:2a:ec:c2:b6:e0:53:10:1b:
         9c:28:86:78:f8:82:da:d5:23:7a:88:6d:7e:23:ac:7e:b4:39:
         a4:68:7c:3e:e0:f6:16:24:0d:df:57:ef:f5:be:cb:46:88:13:
         25:35:19:ca:a8:e2:ee:bf:39:c4:5a:be:46:d0:32:64:24:22:
         db:f6:cb:0c:91:dd:1d:72:a4:de:70:85:40:63:9e:60:98:3f:
         01:50:65:b3:91:b3:d4:97:e4:ae:2e:ac:82:8d:1f:f7:73:77:
         12:7c:1b:ad:ed:1e:81:45:ad:1d:9e:91:47:f2:a2:e1:a5:48:
         da:4a:11:70:83:c3:09:b2:da:3c:13:be:93:e8:5c:7a:86:47:
         44:fc:a3:19:a5:d2:4b:f0:3d:ed:d7:8e:f6:0b:fb:4c:e8:f5:
         5c:c9:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:05 2026 by rpki-client