Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa
File:                     8167458d-3c38-335e-be8c-af4a2cce0f94.roa (raw, json)
Hash identifier:          rX16Xsrok3Dwje1ENQSH7VTKH8G2CO9xAex92PDQvcQ=
Subject key identifier:   A7:49:D4:0A:91:8F:96:3F:85:40:04:BD:5B:9D:49:59:3D:30:AF:95
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584EA7870762AE51534278A97B00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63199
IP address blocks:        148.153.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:07:62:ae:51:53:42:78:a9:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=73a4b950-43d8-4e83-ae03-74fe85ea7be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:fa:11:7c:7f:79:ca:2b:58:4d:d7:40:58:
                    96:89:18:5d:33:9b:34:e3:3f:41:5e:ca:f4:96:df:
                    52:94:d6:da:5b:32:af:a8:99:99:2a:ca:3b:12:a3:
                    cb:07:d0:9c:fe:aa:0d:cd:29:b4:95:bd:60:a1:54:
                    ec:4b:3f:f0:bd:1c:9a:b7:3e:1e:20:aa:0f:4c:e9:
                    7c:e2:91:5f:75:e8:af:84:02:a8:5c:ec:0d:2d:26:
                    cd:e9:ff:4b:dd:9f:c9:f5:f1:d0:c0:69:ac:07:c8:
                    cb:0e:d2:e3:de:d3:e6:79:3c:5e:69:19:c1:ce:b6:
                    7f:fc:ec:fc:23:c4:86:b6:72:ff:65:d0:3a:b2:b9:
                    3f:74:b6:b2:a3:bb:b5:13:5d:62:ab:05:cf:f8:c9:
                    c2:8b:6b:a8:2e:47:6f:ce:1f:36:63:9b:6d:ee:8e:
                    95:0b:01:bf:02:0f:c8:03:96:1f:a1:fb:e3:8e:ed:
                    d4:7b:22:4d:2c:67:de:82:7b:92:5e:b8:33:c5:e6:
                    be:63:d1:bc:8d:65:c3:ce:25:82:d2:1d:4c:15:9b:
                    20:6b:0c:a3:ad:53:a7:17:a0:8a:6f:bc:99:d3:76:
                    3e:eb:e3:23:62:27:32:04:ca:7d:54:ab:f7:15:d7:
                    6b:42:19:5b:2f:6b:f0:4d:8f:35:ab:d5:a5:ac:57:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:49:D4:0A:91:8F:96:3F:85:40:04:BD:5B:9D:49:59:3D:30:AF:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:c9:3c:9c:9d:5f:12:51:9f:54:b9:95:ed:8d:a4:73:a2:
         42:d7:7f:2c:13:4f:3c:b6:1d:5f:40:98:df:c9:2a:56:f5:15:
         6c:a2:33:0f:d6:a8:87:5c:52:99:e5:18:df:09:75:2c:45:b5:
         a0:e3:b0:73:f3:d2:4f:dd:0c:7c:70:73:74:80:33:c5:5c:d2:
         02:a7:f0:66:e2:c3:b6:35:6a:af:a8:cc:3c:97:18:23:cf:f7:
         d6:d5:42:dd:dc:32:ca:8c:c7:fb:ab:b5:cd:ed:a5:df:bc:03:
         05:f7:a3:e4:e2:ac:78:2a:4a:3c:85:55:fe:b9:8a:a1:b6:e1:
         fc:b2:39:09:a5:e2:21:86:13:d4:a5:09:ea:5b:8f:c8:d5:45:
         8c:3e:48:2e:5e:fe:68:97:7d:b1:b2:0e:56:14:68:69:a9:50:
         04:b7:6d:37:f5:1e:ec:22:37:4e:df:e1:7b:8a:cd:99:0d:73:
         31:71:18:65:fd:01:a8:85:74:3a:a1:c4:87:18:86:5e:16:12:
         ab:13:d4:c6:f8:0f:c4:1e:3b:9d:4e:bd:3f:d2:40:e4:a6:9e:
         45:ce:46:6b:fb:7c:76:43:7c:f5:be:06:3e:a6:cc:8d:fa:92:
         7b:30:f6:20:1a:39:89:8c:00:dc:bf:1d:5f:e6:89:04:b5:6d:
         65:c4:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:57 2026 by rpki-client