Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa
File:                     f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa (raw, json)
Hash identifier:          EgQZSJPCbE9g0V/P8bPMliX7g7IFMfhYSZX2GB1pMhQ=
Subject key identifier:   35:D8:5C:55:DB:A3:27:62:A6:6B:7D:B0:B2:A1:75:D4:E2:AE:2E:DB
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F4328584F1CC79FABC743989465476380
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     9042
IP address blocks:        153.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9f:ab:c7:43:98:94:65:47:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=7def859f-2007-4dfb-80e4-e8a2fb224b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:df:22:fd:ee:34:02:a2:ac:3f:5d:05:84:
                    fc:c2:e0:bd:d2:5a:a3:ff:26:48:88:0e:4f:0e:1e:
                    9b:1a:4a:e2:8f:45:d3:85:f3:c5:90:31:a2:32:6d:
                    06:02:5e:66:a0:29:03:ed:2e:1d:b9:26:f9:fb:6d:
                    98:2f:ec:33:29:91:db:58:ce:d8:f6:04:9b:b5:27:
                    23:74:7e:4e:be:f0:98:b9:a5:ad:f8:b0:bc:29:6e:
                    17:15:67:9f:41:77:7e:41:8c:b0:b3:e3:a6:60:b7:
                    42:bd:12:54:c9:95:2f:23:ff:bc:74:72:e7:98:ef:
                    2a:3d:4e:d5:64:ce:a1:4d:b5:08:dc:c2:cb:93:6e:
                    af:5e:11:b5:db:70:32:a4:c1:af:0a:5d:12:3f:fc:
                    de:01:59:18:a0:fd:04:47:b1:86:8a:36:ff:2d:c1:
                    62:e9:e7:f8:75:83:e6:de:37:16:4c:6e:fd:a6:ba:
                    66:73:0e:22:22:cc:cd:12:56:77:9d:b8:fe:17:c7:
                    55:11:cf:4e:b9:d7:7d:e0:5c:4f:fe:d5:0c:b1:7a:
                    ee:06:22:19:65:17:31:ab:8d:99:59:e8:bd:a5:41:
                    b5:9b:21:bc:3f:a2:bd:74:2e:d8:eb:ea:29:61:b4:
                    4c:14:34:cb:14:65:84:df:17:50:00:53:29:79:06:
                    c0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:5C:55:DB:A3:27:62:A6:6B:7D:B0:B2:A1:75:D4:E2:AE:2E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:92:75:8f:16:b1:e4:47:1c:14:86:38:21:01:ab:6b:25:7c:
         90:ed:59:6e:9c:86:db:2a:18:13:58:74:a7:4d:d1:91:88:11:
         d2:c4:77:1b:b8:36:e5:e4:a9:0e:7a:98:c1:91:21:42:43:00:
         cc:c9:9a:f1:fd:51:7f:33:81:fd:fb:a4:67:7a:c5:a6:eb:c9:
         b8:15:fa:f5:86:18:37:0d:f9:58:93:57:c3:4f:8c:56:cb:39:
         93:91:4b:a1:b2:c4:41:14:f8:7b:44:04:9c:97:d9:ba:aa:c9:
         d4:91:02:fc:7b:57:5a:94:ae:7c:14:ea:4d:4a:41:60:b4:b6:
         52:49:7d:8f:51:64:b3:0e:6d:07:1b:f7:bb:1c:c8:28:4e:0c:
         85:54:ec:dd:9d:98:6b:21:f3:f3:3e:4c:7a:4c:2e:7e:59:33:
         f1:db:3a:0e:1a:2c:04:85:7c:a3:90:fd:80:13:1d:07:0c:9a:
         0b:21:85:fd:ca:9d:7a:1e:d8:c2:95:d9:34:ec:45:20:c5:ce:
         8f:eb:fe:0e:89:ad:61:db:b6:e9:af:64:03:95:e9:fd:9a:ce:
         18:f7:cf:8e:da:50:27:ce:de:b1:57:4d:a8:2f:3b:e7:bf:bb:
         f9:b5:94:0c:cf:a4:f0:f6:cc:c2:4a:39:50:3e:d2:27:a6:8d:
         80:3a:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:24:48 2026 by rpki-client