Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948942ce-a237-3062-afb3-6b39206f8198.roa
File:                     948942ce-a237-3062-afb3-6b39206f8198.roa (raw, json)
Hash identifier:          +5+imULkrKq1ZetBNtpCMomNuoiD2K/Uz4RhlBZEbrQ=
Subject key identifier:   4C:1E:93:A8:40:1D:53:8A:5B:64:EB:57:D3:0F:AD:EE:43:AF:76:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D0D42803317007514CE464080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948942ce-a237-3062-afb3-6b39206f8198.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     396883
IP address blocks:        168.148.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:80:33:17:00:75:14:ce:46:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=5749f2c4-8f38-489f-b840-cf598d2b78b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:fb:81:1e:52:cb:72:b6:a6:cc:c8:53:6c:
                    f2:7e:77:53:ca:66:af:17:13:1c:9b:4b:9f:e0:7b:
                    eb:21:54:04:27:db:b3:7a:3a:71:d1:ae:4d:75:42:
                    7f:e8:ca:3c:1f:86:c5:b4:6f:9d:fa:52:3c:05:0c:
                    71:a9:5e:fa:88:29:42:ee:ea:41:01:d1:3e:e0:34:
                    50:ec:05:8b:a7:8a:34:3a:19:cb:6f:9f:66:7d:4f:
                    1c:ce:ab:d6:75:26:7b:88:8a:25:9c:18:fc:23:a2:
                    63:f6:f3:25:5a:03:0a:28:a7:13:6f:dc:ee:2b:71:
                    9d:6a:97:ad:ad:05:12:13:f5:35:23:c1:c9:00:f6:
                    09:aa:51:99:70:73:8b:68:c5:e9:59:15:42:ec:5c:
                    39:5b:54:c6:f7:30:c1:ad:1b:d0:1a:03:78:4b:78:
                    29:44:b0:2e:ff:00:3e:b5:4f:0e:9f:d6:7f:e1:fc:
                    d7:17:8e:da:c6:db:f5:0a:61:52:d8:40:47:30:36:
                    38:5f:38:59:42:b0:0c:8e:d7:73:89:84:bc:5d:32:
                    68:97:32:1d:24:47:65:d3:71:2d:b8:fc:a7:58:c1:
                    e7:33:7a:34:06:3a:6d:e7:95:c2:1a:f1:49:e6:9d:
                    b2:92:eb:ac:45:8c:c8:0f:21:2a:0a:72:72:a4:4b:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1E:93:A8:40:1D:53:8A:5B:64:EB:57:D3:0F:AD:EE:43:AF:76:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948942ce-a237-3062-afb3-6b39206f8198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.148.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:60:2d:37:02:0c:79:3d:75:9f:17:7d:d2:1f:1d:2f:ea:
         d9:1f:28:48:49:31:a4:ad:04:48:ad:ef:a3:a3:5f:ce:f5:a6:
         21:dd:84:4f:09:f8:5b:47:62:e6:31:73:17:6a:85:e6:31:4e:
         1f:82:4e:69:28:6a:32:6d:6f:c1:b1:db:3b:54:bf:ab:97:a0:
         87:7a:71:21:d4:99:d2:aa:45:ce:87:0b:1f:62:da:4c:08:97:
         1e:a7:37:b3:0d:7d:d4:e9:17:c9:b9:55:b3:32:6d:44:63:a6:
         b2:20:d6:33:5e:de:0e:47:91:75:c1:ec:56:65:81:51:c9:f6:
         23:d2:6f:09:80:b2:b1:21:e7:9b:01:db:5f:90:2d:e7:9a:2b:
         5d:46:9c:82:30:4a:c8:d8:39:d3:74:76:ba:c2:8b:cb:3c:8f:
         4a:64:50:9a:67:48:33:23:fd:62:41:ab:e8:73:ba:dc:21:20:
         29:20:b2:05:84:ee:fa:f8:50:eb:a5:ec:0a:66:40:bf:5f:d4:
         f3:5a:1e:ed:47:96:8e:28:c3:0f:d7:4d:03:7b:54:77:ae:cd:
         70:e0:4f:06:9e:59:13:9d:c0:fc:fb:03:9f:2c:22:2c:a0:aa:
         86:c7:ab:4c:87:00:9f:e6:a1:d8:68:7e:48:29:fc:99:c6:f3:
         65:e9:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:13 2026 by rpki-client