Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa
File:                     c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa (raw, json)
Hash identifier:          xqRovn88sXluFhU+pG7xFGbMiT86OaDP5igx3GhRsok=
Subject key identifier:   9E:98:79:FA:79:45:4A:D2:8E:E5:25:AA:A3:F9:7A:15:19:0C:1F:A0
Certificate issuer:       /CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
Certificate serial:       010D0C9F4328584F35E7C0E3A1E6B6C20A7C9E00
Authority key identifier: 83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     15304
IP address blocks:        148.186.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c0:e3:a1:e6:b6:c2:0a:7c:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=54a4f06e-4127-4ab7-9e6a-e9d2d0dca22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:eb:c2:46:aa:f1:55:6d:0b:2e:7a:29:88:
                    5c:e4:40:71:e0:4f:39:99:93:8c:a9:08:49:4d:87:
                    2a:fe:62:fa:97:f7:4b:02:f7:3f:1b:14:89:0e:80:
                    67:6e:9b:6e:45:f7:9a:90:c8:37:99:d8:17:cc:c2:
                    b5:26:26:31:15:0f:f4:a9:24:f2:29:8a:fe:8f:4f:
                    c4:32:43:78:0b:9b:28:5c:ff:90:33:b2:1e:e4:cc:
                    6b:e7:84:52:35:0e:df:34:6e:fb:d6:a8:34:0f:be:
                    20:4f:03:03:ad:93:26:7f:bb:43:35:7f:84:e4:76:
                    f1:d8:82:88:f1:d3:2d:c7:bc:42:fb:be:fe:8e:88:
                    7f:03:15:c7:66:c0:8d:04:e1:87:b4:a9:00:82:a2:
                    c4:41:d6:07:19:0b:44:75:f3:85:27:fd:d6:41:c6:
                    90:fd:7c:cf:31:ab:6b:35:f3:d3:a2:7f:b9:99:00:
                    3f:ad:b6:e5:7f:91:cb:b4:34:e5:17:66:79:3f:49:
                    21:8f:22:08:c0:f7:08:e9:03:49:2d:78:57:f8:4f:
                    d4:1a:3d:ab:b9:ad:91:2b:e3:5a:21:8e:c6:28:e7:
                    11:0d:de:21:52:7a:22:3e:73:98:54:b7:46:a5:50:
                    62:e4:a5:e6:4a:13:18:97:4a:e5:db:34:4f:4a:1e:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:79:FA:79:45:4A:D2:8E:E5:25:AA:A3:F9:7A:15:19:0C:1F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/c28cdddb-4f51-31f0-ac67-d2f37144fcf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl

            X509v3 Authority Key Identifier:
                keyid:83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.186.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:59:22:02:8a:90:bc:12:38:4a:c1:58:e6:1f:30:6f:0f:
         87:21:20:f1:c8:95:89:7f:0f:d8:98:a6:eb:3d:fd:56:2f:d9:
         c4:7b:1e:7a:b0:ef:53:e0:01:78:57:a7:90:25:39:93:22:98:
         85:49:00:07:32:6a:1c:ed:b8:42:e3:a4:c1:2b:6b:d4:e7:91:
         fc:87:fd:21:40:73:a5:4a:44:08:87:49:f0:d3:90:4f:df:b7:
         8a:74:c3:b8:58:45:e7:92:38:a7:24:cd:cc:a8:28:93:26:dd:
         02:3e:8c:75:e6:1e:57:04:64:fa:f4:b0:f2:8d:42:ca:0c:5e:
         9a:ee:a1:71:ae:dd:e8:03:0e:3b:b5:54:03:a5:07:40:a5:4b:
         9d:02:dd:d0:90:8a:70:c8:37:b9:74:1a:46:10:89:ff:75:7e:
         53:5d:bf:26:b9:7f:67:0d:b6:67:85:8b:1b:87:d5:7a:14:94:
         a6:99:f0:21:90:77:5f:4d:eb:61:0e:e9:94:db:80:d4:37:77:
         c2:4a:09:80:b2:a9:6e:f7:1d:b5:6a:ab:d0:aa:58:bb:1f:ba:
         e9:5f:fc:db:66:d6:37:37:e0:6f:86:a2:d0:e7:55:67:38:d3:
         2f:cd:b0:03:d6:47:21:1f:05:14:5a:c2:c4:8f:85:e8:2c:f2:
         32:64:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:58:42 2026 by rpki-client