Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
File:                     da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa (raw, json)
Hash identifier:          +SOj3g+9gRBfJGHVs+HiVfmtfENIXtEXPydKO1Ukq4U=
Subject key identifier:   DC:F2:FC:FE:19:28:E2:63:15:B8:B3:8A:0A:64:B5:EF:95:3E:46:3D
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584E11B42F1FCA4E986FA7BA75E0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     63199
IP address blocks:        148.153.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:2f:1f:ca:4e:98:6f:a7:ba:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=a5e4f824-555e-40a5-9301-83410121087e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:88:4a:dd:7c:4d:93:04:ad:aa:4f:dc:57:
                    ce:9d:b5:de:01:00:01:91:67:5d:b3:c9:71:9a:4e:
                    a0:51:97:7c:01:37:68:53:65:61:e4:9e:d6:4e:f5:
                    4d:17:ec:15:d1:0a:2a:96:0e:89:18:4d:9c:c6:7e:
                    cb:90:bf:f8:65:6f:89:07:46:fa:dd:29:66:30:ca:
                    6f:ca:d5:b7:8d:3f:52:91:dd:85:a3:b0:02:91:fc:
                    13:7f:c2:ea:b2:9b:b0:91:93:35:45:55:da:b6:7b:
                    ee:49:c8:95:ba:27:9d:cd:69:5b:9f:f0:ed:bf:ab:
                    be:45:44:a5:9b:11:b5:3a:3e:d0:4d:6b:7f:a5:49:
                    eb:9b:43:9f:43:7e:57:a1:f7:5a:24:31:a6:93:07:
                    73:da:86:2e:6f:07:5e:12:89:d4:ba:73:fe:bc:61:
                    66:4f:b5:ef:17:4e:dd:24:cb:e9:ba:be:0a:50:25:
                    b8:0d:30:e4:0f:9a:87:18:71:08:7f:7e:9d:3d:dc:
                    8a:5a:be:70:54:54:e5:63:70:f0:33:14:0d:9c:29:
                    f9:07:d2:6a:85:15:7d:cf:3d:30:51:a4:52:44:69:
                    34:4b:7d:57:a6:4a:ca:d4:72:70:38:70:9a:49:a2:
                    df:1d:13:7b:e1:df:28:67:45:57:9d:8e:7f:ca:dc:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:FC:FE:19:28:E2:63:15:B8:B3:8A:0A:64:B5:EF:95:3E:46:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0d:26:57:f7:e2:cc:bb:0d:5e:24:fe:d1:53:f3:0c:cd:9e:
         98:0e:c9:0b:45:62:65:61:20:33:b2:58:5c:9d:60:ae:58:cb:
         58:c3:05:2d:ac:5e:8c:70:a0:98:5c:71:ac:b0:00:fb:27:5b:
         0e:dd:ab:20:57:e3:96:c3:38:21:27:5e:6b:2a:9a:ae:86:b2:
         42:df:77:8e:67:c5:fc:11:00:a7:74:d9:bf:5d:06:34:1e:29:
         1c:d2:65:aa:c9:e4:45:6a:39:55:ff:7d:44:03:1c:7e:4b:f6:
         62:bc:20:a5:d0:4d:fe:9e:da:bc:f1:37:7f:ce:9f:e0:aa:a9:
         a3:56:6d:7d:37:61:f9:8c:b3:03:4d:75:d0:e0:5c:06:74:62:
         0b:bd:b0:01:7e:09:46:8d:d5:71:b8:86:99:c8:b3:81:a2:2f:
         68:dc:15:b9:58:72:be:00:72:7f:e6:47:d3:0c:ab:74:cd:30:
         b6:06:e3:d6:50:f7:f9:8a:42:e2:13:2e:57:a3:9a:1d:08:f6:
         27:5e:4d:62:fb:ea:9e:de:3b:75:1d:62:f7:8d:de:91:c8:97:
         98:40:30:1d:d9:59:c9:1b:99:ae:cf:55:7d:d1:98:c3:ae:d9:
         6e:cf:72:05:8e:b0:d2:09:9b:1f:52:b4:ce:37:bb:d0:ee:0b:
         ac:e4:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:50:11 2026 by rpki-client