Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa
File:                     264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa (raw, json)
Hash identifier:          mdlin/Hf1vlQGhMdeYmnfGsFkZo3tqijwo4e+EujDQ4=
Subject key identifier:   E2:A8:4D:E3:09:E6:75:EC:06:1D:9C:21:4F:BD:BA:B1:5C:26:E7:DA
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584A920632F6CB8C0DB6CDE87880
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     63199
IP address blocks:        148.153.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:32:f6:cb:8c:0d:b6:cd:e8:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=dfc96488-61c0-45b0-bc1c-0d3520ad1dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:65:56:09:d0:ff:a5:ae:93:7a:12:7d:bf:
                    e0:92:ff:64:e0:22:db:38:09:61:6e:da:27:14:45:
                    0c:b3:f4:d8:32:55:38:0b:d9:d7:f3:75:5e:82:f0:
                    5b:6f:39:a3:af:cc:52:95:14:51:3b:cd:4b:d2:95:
                    f2:09:80:76:9c:c0:2c:6e:16:2a:16:29:96:66:53:
                    d9:6a:58:38:cc:2d:74:fe:92:97:39:a1:e2:8a:40:
                    5a:d0:d6:15:3a:b6:e5:ca:61:7a:2b:a5:ee:f5:86:
                    5f:d1:0e:2a:67:9c:56:05:1d:a7:f4:05:5d:25:c8:
                    48:55:d0:8e:d7:ea:af:f2:d6:1f:6f:de:84:38:c5:
                    05:f9:ca:d7:d3:f5:7e:60:b2:39:a0:d1:ba:3d:15:
                    62:de:4d:83:ec:52:b1:cf:b9:0e:4d:8f:20:66:6e:
                    6e:62:57:c6:95:ad:6d:eb:ab:c1:9e:56:8d:56:68:
                    da:55:f6:19:d0:19:72:25:9d:52:79:2f:36:00:aa:
                    02:20:4b:08:17:40:df:12:82:f7:60:9b:10:2e:e6:
                    db:5a:3f:40:72:a6:47:a1:68:41:b1:03:b3:0c:67:
                    1b:c2:25:72:3b:db:a5:41:40:e0:d9:5c:11:7c:69:
                    df:66:55:26:ff:0b:e3:1f:c9:3a:4c:b4:71:ca:e5:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A8:4D:E3:09:E6:75:EC:06:1D:9C:21:4F:BD:BA:B1:5C:26:E7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:35:d5:53:39:56:d9:d4:68:5e:cf:0e:77:6d:a4:1a:36:
         de:bb:6f:5b:75:24:dc:75:db:b3:30:2e:b1:7e:fe:f8:92:bc:
         02:f9:e0:9c:e6:ba:75:49:ad:71:84:17:0c:e8:8e:92:02:aa:
         52:e6:84:2d:8f:82:75:10:3a:4f:dd:c0:40:4a:6c:50:61:6a:
         a3:08:69:a9:bb:7d:7f:6a:83:3e:c2:4a:e5:fd:63:e3:14:8c:
         c0:45:fa:20:c1:e8:ee:8f:54:91:91:08:ce:d2:65:c2:6e:cb:
         3d:c2:e9:f4:18:2c:b8:30:7a:f9:cc:fc:6b:df:fe:97:ae:75:
         1f:2b:8c:e1:a8:01:30:7a:e0:3e:7e:fa:6a:18:f1:98:c3:ff:
         b2:ae:d7:77:f9:e4:e5:02:e0:ea:0e:59:56:45:ca:7a:35:ed:
         cb:1a:da:03:ca:3b:c6:42:f1:cc:60:8b:40:1a:83:b2:28:a0:
         a2:9d:d7:e7:9c:bc:eb:a3:57:de:d6:5e:e3:54:f0:1d:f1:cc:
         7e:e6:99:ee:c4:37:3f:70:93:df:cc:42:db:4d:cf:ee:57:d6:
         bf:fb:c3:0e:6b:1b:05:a9:30:40:29:d4:9c:c8:e8:d2:93:54:
         81:2e:61:11:b8:d0:e7:a9:7d:1f:8a:fb:1e:ee:64:69:7b:1a:
         de:d2:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:35 2025 by rpki-client