Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5db6969d-67a3-3925-aa91-5cd42fe537ca.roa
File:                     5db6969d-67a3-3925-aa91-5cd42fe537ca.roa (raw, json)
Hash identifier:          Q8idlaaDxhIGjnL5o/YMltcv6lxQuYUTCXfJiVa/hi0=
Subject key identifier:   09:92:01:2E:3D:05:34:5A:C9:26:74:39:CA:ED:69:1A:73:2E:5C:09
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E059BC0A8FC5C94AB92580900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5db6969d-67a3-3925-aa91-5cd42fe537ca.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        146.148.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:c0:a8:fc:5c:94:ab:92:58:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=fa75bb87-cd5f-40b9-b25c-ad014d579b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:bc:e9:bc:42:62:ed:6d:ee:56:43:ff:d1:
                    a2:ee:2f:76:d3:99:a0:95:14:47:da:27:9c:1f:34:
                    03:d8:d7:04:70:0b:bf:c7:27:1c:eb:79:dc:6d:9d:
                    ca:06:94:45:67:85:fd:02:aa:3e:c7:81:d9:8c:9f:
                    3f:98:b4:bf:d2:cb:3d:9a:45:25:4a:99:29:38:7d:
                    6f:95:4b:52:75:ec:70:2f:ea:89:c6:02:5d:e1:b0:
                    0b:87:6d:d6:c2:c4:4e:91:ec:69:7b:76:11:63:e7:
                    71:60:7e:a4:26:05:0f:07:ee:13:6f:31:b8:de:6a:
                    c0:9a:ac:5f:2d:1e:a3:f2:0d:03:fa:af:4a:05:30:
                    39:6c:91:6d:87:c9:3a:80:52:be:2c:ce:f5:e8:68:
                    fe:bf:41:20:f0:8e:0a:de:47:02:85:a3:48:59:75:
                    56:52:68:ad:95:10:0f:85:28:03:7b:bf:3c:32:03:
                    55:20:c2:b3:e6:9a:6c:01:15:00:0a:a8:a9:32:19:
                    af:8f:c8:cb:8d:e1:37:42:2c:97:84:2c:10:b7:82:
                    ff:b7:fc:44:08:96:38:cf:28:9d:ff:48:cd:24:c1:
                    d9:91:24:70:db:ec:b1:94:54:33:01:65:59:7b:b6:
                    bb:ac:1a:ea:72:09:ea:dc:e5:1a:a6:db:74:de:33:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:92:01:2E:3D:05:34:5A:C9:26:74:39:CA:ED:69:1A:73:2E:5C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5db6969d-67a3-3925-aa91-5cd42fe537ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:80:83:18:66:7e:e9:21:cd:ab:54:ba:d8:48:97:d6:3d:
         86:65:ac:c9:2a:44:af:b5:80:36:fe:27:c0:e1:98:03:75:ac:
         4f:4a:59:6c:f4:e4:15:dc:81:a9:b2:94:31:9e:30:12:55:c0:
         1e:0e:37:09:44:86:b9:29:4c:85:74:82:41:cd:ec:37:5e:41:
         59:ea:71:68:0d:a3:9e:b2:7e:30:0b:94:db:b2:d5:dc:ab:de:
         aa:f9:bb:b8:51:df:54:c2:2f:50:02:2d:c0:e7:65:08:19:13:
         a0:aa:b2:c6:32:34:93:f0:90:98:74:ff:a6:7d:e7:3e:f2:7b:
         10:18:34:04:74:da:73:fc:57:0b:b1:2e:eb:36:34:c6:51:59:
         46:76:f2:73:5c:8d:b1:5a:a1:f4:ed:2b:dc:7c:23:4c:70:c2:
         8c:37:da:80:03:e1:44:43:9c:9b:6f:bf:02:b1:9e:e5:74:31:
         03:f5:ae:91:b8:d1:03:62:82:a2:63:a9:1a:3c:c8:8e:b0:4f:
         51:0f:0e:cf:3a:b1:68:ac:20:77:63:b9:2a:03:a0:5b:3f:58:
         5a:2a:2e:31:c7:7a:53:0b:3a:f9:13:7b:77:f5:a6:3f:48:b7:
         11:cd:47:d1:d2:22:b6:f4:df:c1:f5:2b:d9:5a:98:02:37:75:
         e6:33:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:42:39 2026 by rpki-client