Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/a6a3748b-1802-3ca7-86a5-726487b797af.roa
File:                     a6a3748b-1802-3ca7-86a5-726487b797af.roa (raw, json)
Hash identifier:          I27cKxKnAn3xcBdg6r+zUX1s0Bhr46HLStZ3onyAl5w=
Subject key identifier:   6D:45:74:83:06:23:6D:46:2B:76:43:A6:FE:D0:E7:81:33:67:CD:49
Certificate issuer:       /CN=fb48c1ae-9017-45de-bb5d-a4edbfb66faf
Certificate serial:       010D0C9F4328584D00B25A30B29EE6E704BCF280
Authority key identifier: C2:DA:66:D4:34:E4:7C:59:0A:8E:F7:B4:D2:7C:07:41:49:3B:36:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/a6a3748b-1802-3ca7-86a5-726487b797af.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     18934
IP address blocks:        148.59.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:5a:30:b2:9e:e6:e7:04:bc:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb48c1ae-9017-45de-bb5d-a4edbfb66faf
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=5ba9a268-d7cd-40ab-b10d-015f236706e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:91:88:e5:8c:97:1a:d9:c5:19:47:bf:d3:
                    c9:ec:fb:85:91:da:ef:b3:37:a2:27:eb:f4:57:19:
                    7f:98:15:2b:9d:51:7c:ee:bc:4f:bc:af:f4:53:c2:
                    6c:b9:b2:7e:f0:0d:d9:b6:33:b2:e5:e9:57:9e:c8:
                    d0:27:83:6e:43:c6:1c:85:ff:97:86:a3:0b:45:9f:
                    64:4e:68:00:94:dc:42:12:f2:fb:0a:f3:d2:7d:43:
                    a7:de:1e:06:30:bf:ea:16:85:a4:81:56:c6:01:7e:
                    d9:bd:36:e3:db:fb:cd:a4:4b:26:11:9b:60:8a:6e:
                    14:3b:5c:5d:cd:20:c1:b4:2a:98:06:1e:2d:83:39:
                    7e:d8:62:35:c5:84:aa:09:fb:a3:aa:3b:62:7e:80:
                    c0:cf:65:04:24:b1:6c:6f:f8:3f:94:ba:94:f2:64:
                    03:b7:c2:8c:e3:10:e3:2b:f7:6c:3e:c4:88:fe:a6:
                    ab:c9:e9:40:47:1f:a8:0c:a5:34:a6:e1:45:09:fa:
                    c2:d5:39:8d:12:23:18:02:1d:6a:47:5a:b1:98:b0:
                    3a:a8:04:df:ea:13:3c:3d:41:51:ba:a4:fb:39:8f:
                    03:2f:7c:57:ea:b1:31:b6:67:08:ff:67:b4:8e:51:
                    1f:7e:f9:a4:a7:52:7f:7a:7b:0a:a9:b4:8e:17:85:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:45:74:83:06:23:6D:46:2B:76:43:A6:FE:D0:E7:81:33:67:CD:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/a6a3748b-1802-3ca7-86a5-726487b797af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.crl

            X509v3 Authority Key Identifier:
                keyid:C2:DA:66:D4:34:E4:7C:59:0A:8E:F7:B4:D2:7C:07:41:49:3B:36:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:a7:a9:d5:58:d7:82:fe:87:a4:ac:1f:d1:bb:98:9c:2f:
         c2:01:15:c7:4b:e9:bb:30:d5:2d:e9:0a:74:a1:10:9f:64:f0:
         cc:a0:e3:d8:15:14:5e:3f:a5:5a:e8:0b:8b:1e:65:1a:97:a9:
         8d:1f:81:df:9e:7e:59:e3:fe:2e:d4:ab:c4:6e:15:fe:31:d6:
         cd:13:08:4a:76:0f:77:77:57:2d:dc:54:de:4e:e3:9d:71:67:
         90:38:0d:8e:e1:77:54:ea:ef:26:9b:bd:24:1a:d1:a5:f1:3b:
         e4:83:ee:17:d0:13:9a:f8:69:aa:f4:87:8e:a5:af:cb:6c:8f:
         8f:24:c0:4c:b8:6b:6c:99:eb:3c:da:b2:02:92:d5:39:4b:0b:
         9d:b6:30:0e:0d:e7:0d:c6:af:03:49:8f:41:23:b2:9b:fe:b9:
         c0:e8:6e:f6:22:aa:e1:71:69:17:28:68:dc:4c:ad:53:66:48:
         6e:cb:f0:37:c0:60:9a:2c:a8:3f:ef:ea:70:11:28:cf:b7:04:
         db:8d:9e:69:86:10:76:90:50:9b:f0:2c:9b:8d:31:20:4e:15:
         d1:9e:f3:7d:99:ff:e4:12:31:b3:9c:83:9c:ef:52:54:ea:76:
         e4:5e:51:fa:d8:5d:82:cf:6c:b5:80:ad:8e:e2:1c:b2:58:60:
         0a:1f:b6:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Aslowsp7m5wS88oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmI0OGMxYWUtOTAxNy00NWRlLWJiNWQtYTRlZGJmYjY2
ZmFmMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
NWJhOWEyNjgtZDdjZC00MGFiLWIxMGQtMDE1ZjIzNjcwNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuESRiOWMlxrZxRlHv9PJ7PuFkdrvszeiJ+v0
Vxl/mBUrnVF87rxPvK/0U8JsubJ+8A3ZtjOy5elXnsjQJ4NuQ8Ychf+XhqMLRZ9k
TmgAlNxCEvL7CvPSfUOn3h4GML/qFoWkgVbGAX7ZvTbj2/vNpEsmEZtgim4UO1xd
zSDBtCqYBh4tgzl+2GI1xYSqCfujqjtifoDAz2UEJLFsb/g/lLqU8mQDt8KM4xDj
K/dsPsSI/qaryelARx+oDKU0puFFCfrC1TmNEiMYAh1qR1qxmLA6qATf6hM8PUFR
uqT7OY8DL3xX6rExtmcI/2e0jlEffvmkp1J/ensKqbSOF4XViwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1FdIMGI21GK3ZDpv7Q54EzZ81JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYjQ4
YzFhZS05MDE3LTQ1ZGUtYmI1ZC1hNGVkYmZiNjZmYWYvYTZhMzc0OGItMTgwMi0z
Y2E3LTg2YTUtNzI2NDg3Yjc5N2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmI0OGMxYWUtOTAxNy00NWRlLWJi
NWQtYTRlZGJmYjY2ZmFmL2ZiNDhjMWFlLTkwMTctNDVkZS1iYjVkLWE0ZWRiZmI2
NmZhZi5jcmwwHwYDVR0jBBgwFoAUwtpm1DTkfFkKjve00nwHQUk7NlgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYjQ4YzFhZS05MDE3LTQ1ZGUtYmI1ZC1hNGVk
YmZiNjZmYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK/p6nVWNeC/oekrB/Ru5icL8IBFcdL6bsw1S3pCnShEJ9k8Myg49gV
FF4/pVroC4seZRqXqY0fgd+eflnj/i7Uq8RuFf4x1s0TCEp2D3d3Vy3cVN5O451x
Z5A4DY7hd1Tq7yabvSQa0aXxO+SD7hfQE5r4aar0h46lr8tsj48kwEy4a2yZ6zza
sgKS1TlLC522MA4N5w3GrwNJj0Ejspv+ucDobvYiquFxaRcoaNxMrVNmSG7L8DfA
YJosqD/v6nARKM+3BNuNnmmGEHaQUJvwLJuNMSBOFdGe832Z/+QSMbOcg5zvUlTq
duReUfrYXYLPbLWArY7iHLJYYAoftsA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:25 2026 by rpki-client