Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/05ebf755-cf01-3957-85c0-e52b2398f8fc.roa
File:                     05ebf755-cf01-3957-85c0-e52b2398f8fc.roa (raw, json)
Hash identifier:          Suy1dmfMq1BWt3xls2bgRZFaw3Lbf/PeVMiPutC25xU=
Subject key identifier:   0C:47:81:48:FD:25:B4:1B:4B:D8:48:68:EA:81:86:A7:9F:38:ED:1F
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584CF5879F49584E00D57F275300
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/05ebf755-cf01-3957-85c0-e52b2398f8fc.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     63199
IP address blocks:        148.153.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:9f:49:58:4e:00:d5:7f:27:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=4af0ee5e-24a2-404f-a88e-b67e9eb94011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:79:cf:69:0e:d9:a5:f8:19:aa:c7:f3:3e:
                    12:43:04:fc:0a:bf:1b:2f:d3:d0:36:16:9c:2d:8a:
                    bd:fc:da:0d:6b:35:21:50:07:b9:c7:8e:7a:e4:5c:
                    33:a2:78:cf:b8:f5:1b:99:b0:af:b3:6e:35:41:d7:
                    c6:7f:bb:ad:94:ec:27:67:fc:e2:85:12:b2:2e:08:
                    a7:83:b2:9a:94:9b:2c:1e:fe:bf:45:43:04:fe:91:
                    2d:51:71:6a:ad:9b:d0:47:d5:ca:dc:7a:e9:ed:a6:
                    0f:4a:dc:d2:99:45:6e:cb:58:7e:08:a6:d1:93:fe:
                    c6:bf:cd:8a:3a:0f:97:c6:46:ac:5b:0c:a3:a0:f8:
                    27:e3:a9:0a:6f:0d:15:3b:25:f7:98:23:49:2e:e8:
                    c0:47:40:22:d9:4b:d6:39:d3:b0:91:cd:55:96:d0:
                    d5:a1:6c:81:1d:51:07:00:c2:3d:12:07:e9:80:e3:
                    57:3c:52:72:98:82:b2:df:6a:ca:97:14:21:bf:71:
                    b1:11:38:0a:b6:d5:db:c4:3d:87:35:d4:70:16:47:
                    ae:2d:ff:91:1c:f8:a4:da:ab:a1:5a:95:c9:44:5f:
                    45:8f:2a:29:67:b1:3b:59:03:ae:1b:c4:56:f3:1a:
                    41:06:21:d6:22:c9:9b:ea:cb:ec:e1:43:6b:2e:ae:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:47:81:48:FD:25:B4:1B:4B:D8:48:68:EA:81:86:A7:9F:38:ED:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/05ebf755-cf01-3957-85c0-e52b2398f8fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:19:f7:25:03:d3:93:08:11:a1:4b:df:73:a8:34:eb:97:ec:
         d2:17:84:9f:79:0f:5c:ad:ed:25:48:d6:c4:3e:94:5f:1f:7c:
         3a:fb:64:72:df:fd:08:0d:00:54:ee:a4:56:6c:93:01:c5:d6:
         a1:2f:2a:36:c4:77:1c:d2:35:b8:bf:38:52:1b:68:86:c9:d1:
         2a:ea:3a:da:0f:5a:e0:c8:cd:d1:7e:aa:a5:27:fc:99:4a:5b:
         c8:a4:32:fa:a5:58:93:6d:59:80:b0:1a:15:a2:53:0f:49:9c:
         43:7f:ed:26:ca:40:3c:ed:04:af:b1:cf:89:85:14:a1:94:de:
         55:02:37:5d:a8:c0:e7:5b:b2:21:f3:12:74:c8:aa:4b:01:67:
         f7:d7:70:ff:99:2d:b0:a1:65:1a:38:25:a9:63:59:51:15:ef:
         9a:b0:a7:0c:42:6a:86:56:4d:80:4f:27:70:b0:64:80:1a:11:
         b4:fe:2d:b1:50:b5:78:f2:8c:e6:32:24:ee:d8:15:07:39:fc:
         0a:4c:f8:f4:8f:c0:7b:b5:ca:59:e6:a0:aa:8d:3c:dd:10:c3:
         b9:fe:5a:44:66:92:b2:ff:14:94:13:21:f6:b3:c7:6b:98:5c:
         72:f7:89:bc:77:7c:ce:ed:7a:7f:52:5d:ce:7d:99:61:69:b2:
         de:72:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:00 2026 by rpki-client