Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b/7e519424-767e-3641-ac08-5ff248aa1c6d.roa
File:                     7e519424-767e-3641-ac08-5ff248aa1c6d.roa (raw, json)
Hash identifier:          GCK/kSvwliy9Bk0CcCrCG8rgnFcTm9/nxR+eCFYmMYM=
Subject key identifier:   1E:03:D7:14:81:C2:91:A5:AA:2A:31:D6:AF:90:84:0A:7F:06:0A:F7
Certificate issuer:       /CN=13069ef4-9649-42de-9074-bebe86a9d90b
Certificate serial:       010D0C9F4328584D83CB10A2B24EB91702B36900
Authority key identifier: 60:DA:BF:7E:A0:9F:DC:CA:73:00:68:AF:99:AF:F7:89:A0:83:09:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b/7e519424-767e-3641-ac08-5ff248aa1c6d.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     395612
IP address blocks:        148.59.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b/13069ef4-9649-42de-9074-bebe86a9d90b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b/13069ef4-9649-42de-9074-bebe86a9d90b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:10:a2:b2:4e:b9:17:02:b3:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13069ef4-9649-42de-9074-bebe86a9d90b
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=88d3c0c7-3ab7-4bfa-8b90-89020fc08ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:67:22:e2:1a:b6:f8:69:69:a0:e8:6d:13:
                    f8:6c:35:08:71:98:b8:12:e3:99:7b:09:e9:2f:8f:
                    9d:f1:37:fb:d9:15:43:22:de:7a:62:25:21:49:1e:
                    41:60:b2:57:11:8d:cb:82:65:be:55:3d:28:fd:f3:
                    d7:ac:82:e4:b1:14:9f:26:f9:e8:14:4d:2f:cc:9c:
                    59:e3:37:d5:11:7b:67:ba:fd:ca:8b:27:80:13:e3:
                    d7:80:9f:c4:ad:87:fe:23:06:92:e7:03:50:6b:24:
                    e1:6d:a1:cc:e1:25:3e:7c:8f:5c:ff:41:9c:6a:b9:
                    d7:c7:29:6f:09:c9:8c:dd:ef:be:d5:b9:74:8c:05:
                    64:be:47:37:59:3d:db:81:73:7d:a6:a6:62:27:48:
                    d9:b7:00:73:fe:73:7b:5b:fd:71:a6:a0:f3:3a:1d:
                    32:2d:eb:b7:4e:16:56:f9:94:fa:dd:0e:20:fa:3e:
                    d9:82:bb:e9:03:d0:7a:bd:d4:ac:01:18:1a:2b:26:
                    90:a3:39:b7:9a:f7:b6:c1:ed:02:86:d0:d6:78:99:
                    b6:a7:42:96:2d:9f:c0:fc:e4:24:58:3c:1a:b9:a5:
                    8a:0a:56:03:e7:e1:7f:8a:c0:68:3c:7f:fe:56:78:
                    53:cc:c9:e3:c6:a0:75:ae:ad:cf:d8:17:c4:41:d4:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:03:D7:14:81:C2:91:A5:AA:2A:31:D6:AF:90:84:0A:7F:06:0A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b/7e519424-767e-3641-ac08-5ff248aa1c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b/13069ef4-9649-42de-9074-bebe86a9d90b.crl

            X509v3 Authority Key Identifier:
                keyid:60:DA:BF:7E:A0:9F:DC:CA:73:00:68:AF:99:AF:F7:89:A0:83:09:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13069ef4-9649-42de-9074-bebe86a9d90b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f4:6d:d2:66:50:f8:34:ac:65:03:cb:ec:ee:f9:c7:22:9f:
         67:19:c4:08:58:d5:d9:21:c3:86:24:36:12:ba:9d:21:ba:71:
         c9:70:67:53:da:7b:cd:de:3d:4e:f7:5d:b5:50:44:22:af:e9:
         ff:ce:aa:16:61:65:9a:46:0c:d6:a8:38:0a:c6:b9:fc:2a:a1:
         83:02:06:e3:2b:bd:b6:5c:8f:57:0d:d7:8e:f1:f6:ac:c1:03:
         de:ef:77:e7:cd:50:45:f8:6a:e6:56:2e:fe:f9:4a:36:15:8b:
         f6:57:3e:12:45:cd:14:6c:5d:a3:f6:24:f1:19:55:f6:e2:6a:
         ce:77:80:ff:ea:74:ec:01:0e:cb:92:60:f0:47:fa:68:52:2f:
         d7:e8:34:9e:2e:22:e4:65:48:bf:aa:c3:49:50:d4:6a:59:a7:
         e0:ee:4e:22:d8:ed:ab:d6:bb:26:71:c5:33:7e:34:de:90:2f:
         9b:24:cb:2b:05:70:26:18:30:5a:bd:75:d7:d0:f6:69:ba:53:
         20:b7:d1:fc:b5:b7:09:28:c8:97:48:69:14:e1:2f:f2:10:b8:
         8c:e5:19:36:5d:f6:3b:92:9a:d8:f1:2b:40:c1:45:5e:99:de:
         4f:08:fe:3a:cc:c3:1e:d5:f3:db:2c:6b:9d:d1:69:47:ce:e8:
         fa:31:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:07 2026 by rpki-client