Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/0695405f-cab2-3ced-b90a-839f4ae4640c.roa
File:                     0695405f-cab2-3ced-b90a-839f4ae4640c.roa (raw, json)
Hash identifier:          TwBGRWl13ZQgt2u3hFAB5KmdD6pfzfvDKVbmDHz+0nk=
Subject key identifier:   19:7C:45:C1:AC:4A:F5:90:5C:20:09:E8:DA:EA:C0:D8:11:00:9A:E1
Certificate issuer:       /CN=aed2676f-2a52-4e10-9b06-0b423a5503c5
Certificate serial:       010D0C9F4328584EA79C68DFD1945EB4F8BF7E00
Authority key identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/0695405f-cab2-3ced-b90a-839f4ae4640c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11452
IP address blocks:        146.203.136.0/21 maxlen: 24
                          146.203.144.0/22 maxlen: 24
                          146.203.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:68:df:d1:94:5e:b4:f8:bf:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed2676f-2a52-4e10-9b06-0b423a5503c5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fa443bd8-9fb7-44e0-8b7e-90829ec1286f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:17:7e:cc:c0:37:fc:bb:d1:3c:b8:1b:74:
                    40:27:f4:ee:1a:10:0a:77:17:03:a1:68:8c:bc:3a:
                    6a:53:e5:ce:63:ab:ec:06:7b:c3:d3:ab:6f:73:75:
                    4d:b4:c3:7d:8a:26:8b:f9:c8:b2:75:0a:fc:1a:aa:
                    06:92:9e:dd:b0:f1:a3:f1:14:7e:6c:ba:f8:c6:81:
                    3f:ca:79:77:76:d0:62:90:df:da:50:ab:83:05:68:
                    6e:7c:16:e4:6b:b2:6f:74:01:44:9c:09:c3:21:1e:
                    bf:42:e7:1b:49:9f:f3:c5:84:68:38:a7:fc:da:f1:
                    da:ed:26:94:fe:38:be:9f:f6:f6:f0:a5:92:d7:eb:
                    fc:9d:30:5b:35:a1:cc:bc:d6:56:c1:a0:1f:59:05:
                    00:ed:d6:38:7d:58:62:6e:6b:09:55:7c:f2:4a:f1:
                    c5:ab:33:4c:69:09:0b:03:0a:b8:26:58:97:a2:d7:
                    bc:b5:a8:98:92:db:38:ee:44:b0:46:31:14:84:cc:
                    37:68:d7:38:bf:23:8f:ff:1d:9c:e6:01:e1:bd:6e:
                    b3:c3:c3:67:50:fb:8e:ea:c2:3f:7a:ab:91:3c:fd:
                    ed:95:eb:c2:3b:72:d7:0b:02:f4:d6:22:90:98:d0:
                    88:48:26:bc:75:47:b5:4d:ed:bb:34:26:db:4e:20:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7C:45:C1:AC:4A:F5:90:5C:20:09:E8:DA:EA:C0:D8:11:00:9A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/0695405f-cab2-3ced-b90a-839f4ae4640c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl

            X509v3 Authority Key Identifier:
                keyid:C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.203.136.0-146.203.151.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:cb:ed:4a:c2:bf:dd:0b:af:53:58:f6:70:60:0d:69:51:
         40:57:8b:82:f7:62:bf:27:4c:a2:66:8b:d7:b0:c5:46:55:c4:
         db:25:6b:9c:98:0b:11:aa:ad:cb:13:da:42:08:00:20:2a:84:
         a6:da:c3:1f:d9:13:37:53:db:b1:a1:21:2a:c4:87:53:c8:7c:
         b0:d3:db:17:4f:45:d4:b1:ad:50:eb:fb:ca:36:bd:ad:34:a3:
         86:88:26:93:37:6d:e2:cd:2f:2e:ea:96:d5:28:86:aa:56:66:
         29:47:cd:1b:f9:8d:59:4d:68:53:90:90:05:a3:78:7a:2b:78:
         90:0e:a0:a7:74:a3:17:b7:d7:b7:53:db:7d:1b:97:27:5e:33:
         86:b9:14:ae:af:b3:d6:db:d5:1a:ae:80:8e:36:e3:12:26:ae:
         28:d0:dd:f2:58:3e:38:5b:70:90:3b:c8:0d:dc:9e:dd:bd:c0:
         9e:ec:17:4c:c3:09:3d:d2:35:28:d4:d3:df:27:27:48:81:3d:
         42:55:1e:ba:86:8d:6c:30:45:4d:a3:9e:2d:55:4d:00:dd:b8:
         e1:44:a9:4c:be:3a:7b:1a:fc:22:65:dd:88:1b:dc:99:a0:bf:
         bf:c0:93:55:a0:86:de:12:40:2c:de:af:10:56:bc:26:15:e7:
         b6:fa:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:32 2026 by rpki-client