Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa
File:                     146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa (raw, json)
Hash identifier:          EMFWnxUJpHz5Aesqd685JsKwwrVuRC9QIfip8Iozwf0=
Subject key identifier:   D8:90:EB:E2:B7:B1:46:45:53:93:F8:4A:40:6B:88:95:EC:ED:F0:98
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584F497673CD0DDA41B8AE9DA780
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27321
IP address blocks:        149.20.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:73:cd:0d:da:41:b8:ae:9d:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8be4a65f-09df-4477-a00a-9aea95eb852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:e3:55:73:8f:ea:05:c4:a6:28:6b:8a:54:
                    d7:01:79:83:54:0a:34:37:a5:60:3a:97:12:38:82:
                    83:5b:ca:25:fe:7b:fd:91:9a:1e:13:1f:09:7c:de:
                    b3:3b:0f:25:a2:32:b0:83:88:cb:a9:34:aa:9c:73:
                    c6:cc:80:dd:11:08:d5:df:99:62:33:e1:d8:99:bb:
                    c1:ba:70:3e:4c:07:3c:06:e3:77:07:bc:ad:83:ff:
                    ba:da:4e:27:71:38:af:4d:1b:31:cc:57:4e:12:49:
                    42:0d:f5:15:eb:dc:f2:92:50:3d:44:aa:3e:57:2e:
                    ea:20:ae:4e:ff:af:46:74:d8:5b:70:f3:d2:58:79:
                    79:85:32:8b:85:4d:6a:02:c6:bf:39:3e:01:08:73:
                    c0:61:96:6d:66:55:fe:26:a7:c6:a2:12:21:48:80:
                    58:b4:5f:21:76:27:93:42:61:82:0e:14:91:3e:3e:
                    52:72:67:2b:3c:44:5a:72:9d:0b:55:94:18:09:7d:
                    bd:9f:72:1c:79:12:8b:60:68:f2:62:04:31:b2:c2:
                    42:05:2d:4f:f8:70:11:11:ed:78:f1:d9:31:e1:f1:
                    78:d0:84:bf:95:fd:ca:34:da:db:fa:e6:bc:68:b0:
                    4f:20:71:d0:6d:53:ae:5c:6d:60:f1:45:f9:1b:53:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:EB:E2:B7:B1:46:45:53:93:F8:4A:40:6B:88:95:EC:ED:F0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/146e5fc4-91b0-37d5-bddc-8ae821bfe7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:32:f8:ea:92:eb:bf:59:d7:a1:08:80:9e:70:58:1f:67:70:
         28:2b:52:b8:45:d2:b9:ce:3f:75:d6:eb:71:48:65:44:b7:51:
         52:12:3c:3a:64:2e:2f:29:da:d4:7b:2f:be:83:8f:a1:06:19:
         29:b3:e2:e9:b9:26:48:87:11:fc:91:fa:f0:a7:22:40:06:ec:
         60:23:7e:d2:dd:9b:23:48:d3:f9:ca:be:da:96:57:1c:4c:81:
         95:f8:0c:01:67:db:cd:22:64:1c:0e:1e:61:45:a4:e8:13:63:
         b4:92:88:70:85:3f:0b:a4:d7:fa:47:38:7d:2c:71:f5:bc:6e:
         d8:49:c6:de:b8:8a:76:bf:6f:a2:d9:8c:bc:0b:4f:16:0b:be:
         f8:39:b9:20:8f:69:81:8c:3e:01:ba:5a:08:09:89:cc:ce:aa:
         be:ca:d8:fc:2f:05:89:03:72:b1:b3:32:92:53:c3:60:3b:ef:
         5d:d2:bf:20:81:ed:58:0e:18:6e:e5:31:1d:2b:09:5c:93:fa:
         5b:7d:5f:a4:b9:58:a7:e6:50:62:c4:07:17:57:c2:e5:d0:79:
         04:5d:08:4f:62:36:96:51:44:0a:ab:d4:b7:4b:fc:ee:de:cb:
         af:05:d7:07:23:64:15:41:b5:61:03:ec:d9:08:98:ec:09:9b:
         ca:ef:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:04:01 2026 by rpki-client