Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/369d19ad-05c9-32be-8d66-3d398b6a8c58.roa
File:                     369d19ad-05c9-32be-8d66-3d398b6a8c58.roa (raw, json)
Hash identifier:          rxo5PF0NzRBC9fXaDUzxpscyY1AY/3+hZZQ58UUjHac=
Subject key identifier:   BD:79:D7:B3:A5:BD:A7:DE:DF:4C:FB:D1:E5:8D:E5:ED:97:33:BC:70
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584CDC67737480E471BD3463D900
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/369d19ad-05c9-32be-8d66-3d398b6a8c58.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     63199
IP address blocks:        148.153.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:73:74:80:e4:71:bd:34:63:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=939d934f-b3ab-4a95-958a-4d1dc745c457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:5d:a5:01:71:80:d9:f0:40:7b:87:21:9c:
                    55:be:ce:28:44:f7:75:a4:01:89:ee:4a:c0:37:e1:
                    42:9f:17:47:e2:0c:75:14:c8:62:88:de:30:8c:d4:
                    02:f8:0c:e5:a5:8d:df:14:32:cc:7f:d5:b4:25:eb:
                    b5:e3:e8:e5:7c:31:15:0e:08:64:2f:a7:7f:a2:ed:
                    02:44:f2:12:0a:ca:83:8c:1a:43:f3:1f:38:c7:8f:
                    bc:22:9c:61:91:45:0a:aa:49:51:a9:97:71:88:e0:
                    53:48:99:b5:7f:75:c9:ea:17:77:ac:ee:57:ac:b6:
                    ef:a6:ef:8c:73:51:70:55:9c:fa:0b:9e:d7:50:4a:
                    14:f1:6e:2f:3c:48:ff:0d:b6:9d:b8:ec:ca:19:e5:
                    ce:86:47:c3:b5:32:f4:c0:3e:b5:ba:6c:ea:28:75:
                    d7:9c:39:0f:30:4c:c0:1a:c7:47:eb:97:ad:76:93:
                    8e:7e:a5:d4:02:d8:fc:62:3e:71:11:42:f7:6b:38:
                    80:cf:3c:b8:40:e2:9e:34:8a:d7:ed:f2:b7:ed:5e:
                    c1:20:e3:41:dd:f6:f9:02:af:00:df:d8:3b:1c:d9:
                    d4:60:88:c6:06:8b:bb:5f:8e:7d:f5:f4:5b:2a:e7:
                    51:3a:58:ac:12:ce:c5:5d:d3:f2:ae:b4:e9:18:9a:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:D7:B3:A5:BD:A7:DE:DF:4C:FB:D1:E5:8D:E5:ED:97:33:BC:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/369d19ad-05c9-32be-8d66-3d398b6a8c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:4e:6d:4c:78:8f:84:e9:58:0d:9e:ed:54:a8:3a:3a:a4:
         18:bc:ca:76:6b:0b:68:bd:b4:36:be:10:ec:bb:a6:49:47:32:
         96:d5:03:77:a1:3b:ec:71:bf:1e:23:e4:e3:76:ea:22:f6:1c:
         a6:a4:96:1a:c5:af:65:c7:e4:da:1e:27:d3:e5:bd:e5:fc:d2:
         97:c6:f7:e0:0a:f9:7c:7e:a7:e6:25:a8:14:31:13:07:26:cb:
         40:31:0c:69:f1:17:55:b1:45:d7:15:51:54:37:0e:d9:f5:8c:
         cb:1d:9c:3f:bd:d3:f6:ca:3e:14:4f:8e:7f:9f:66:84:05:76:
         5e:3c:08:8e:43:9c:b4:23:c8:10:c8:72:04:02:d4:75:72:63:
         dc:0e:06:d4:a1:56:a6:fa:49:2a:4d:1c:b2:ba:93:cf:b6:12:
         04:84:45:ba:11:45:b2:3f:24:f7:0e:44:58:a7:48:5b:80:85:
         33:d8:34:35:da:e7:41:d3:6c:f1:50:70:ec:62:8a:fe:43:0f:
         ca:39:75:ad:97:1e:3c:5c:9d:6e:21:3f:41:22:bb:f8:10:2b:
         ac:a1:01:f8:2d:fd:53:fd:58:d9:a8:bc:e3:7c:68:f0:5b:2b:
         39:4e:cd:8d:69:45:d8:45:f5:7e:ce:6d:65:6b:d9:e6:8a:fb:
         c4:4f:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:00 2026 by rpki-client