Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/08c6fc14-0fb4-3f7d-bd13-fc9cebefe285.roa
File:                     08c6fc14-0fb4-3f7d-bd13-fc9cebefe285.roa (raw, json)
Hash identifier:          hjDEpMobtPcH8OJKn1CpGkxGBfFatM/TYfBWsMDXFAs=
Subject key identifier:   BB:07:D7:34:56:A7:99:6D:EB:B7:34:04:B5:28:F8:B9:70:12:E1:08
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F7352DBFCD0E8449460E76D00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/08c6fc14-0fb4-3f7d-bd13-fc9cebefe285.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     12025
IP address blocks:        148.51.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:db:fc:d0:e8:44:94:60:e7:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=15faad8a-b94d-45f9-beaa-8a9f94e72681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:ec:d0:be:69:6b:5c:fd:c2:3a:32:28:36:
                    b3:5b:32:15:92:d7:f3:ce:5c:a1:10:47:88:99:99:
                    2f:9d:7d:28:0e:b0:0a:9f:b3:16:e7:16:a4:d5:ea:
                    de:ec:69:14:18:5f:08:6a:b9:0f:78:b9:6f:ea:73:
                    1a:f8:b2:79:ad:2f:53:67:53:7c:e1:90:6e:7b:f6:
                    a6:ba:3e:51:32:bf:29:43:61:12:5e:c8:7d:c8:3a:
                    2f:9d:aa:98:ae:59:6b:35:f2:e0:07:eb:ed:93:b4:
                    14:13:c4:a0:59:05:27:b2:33:e0:c5:0d:48:dc:c7:
                    96:ae:ba:c7:6b:0f:90:69:66:ba:ad:19:5d:42:ec:
                    38:aa:07:f7:75:59:98:44:a9:5b:9e:08:f9:09:be:
                    d7:54:32:7d:96:61:eb:59:31:10:d3:ad:ee:69:db:
                    5c:0e:bc:a9:25:37:cc:be:a6:bb:13:75:6a:42:b5:
                    c6:81:29:82:c5:e4:9a:1c:69:f4:90:da:eb:3d:0c:
                    58:52:56:53:68:0a:d0:c5:c7:37:54:1f:af:f6:cc:
                    7f:fa:74:95:67:5c:55:a9:53:b7:6b:5f:0d:18:56:
                    5b:8c:5d:b7:57:e3:1e:72:4b:de:38:e6:a9:dc:fb:
                    50:89:a7:bc:b8:39:69:9c:3e:26:a6:d4:85:ca:4e:
                    24:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:D7:34:56:A7:99:6D:EB:B7:34:04:B5:28:F8:B9:70:12:E1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/08c6fc14-0fb4-3f7d-bd13-fc9cebefe285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:79:4c:96:00:53:bf:69:dc:d5:2f:46:0f:9e:05:51:bd:
         cf:a3:f6:56:00:fd:c2:04:32:98:d2:76:d2:ba:ad:0a:62:39:
         c5:10:22:c1:94:a4:3f:14:0c:b0:d9:bf:5d:c7:f0:fa:9c:b0:
         d1:c1:f2:30:83:32:f0:66:04:e6:8e:bd:92:82:89:fe:9e:e4:
         61:2d:66:77:98:a5:87:5b:2e:0b:6b:fe:72:38:1a:fb:b3:4b:
         d9:fc:64:57:0e:f2:6d:e3:c6:a8:45:a5:12:47:f8:4c:12:15:
         02:87:32:7a:41:2d:40:7c:3f:a9:de:7e:1f:3e:8e:8f:f4:e8:
         e5:d1:64:78:bb:e4:3c:67:dd:65:44:d7:87:82:9b:ec:c8:33:
         46:f0:e6:a9:00:49:7a:5a:e6:ba:bd:58:15:d3:06:cf:6a:17:
         c2:36:4e:f7:e3:e6:17:cd:56:10:c9:55:7d:79:30:39:79:d0:
         7f:dc:a2:8a:2e:10:8e:31:d8:0f:ab:82:a9:61:15:b0:36:97:
         f1:7b:dc:ce:51:a7:80:0a:b6:ef:19:c5:6f:7c:fa:d1:50:37:
         2d:ba:55:6c:24:f7:22:3b:9d:ca:53:73:1c:ef:90:fa:44:79:
         03:66:45:0b:c9:a7:aa:6d:be:00:3c:6c:62:f3:05:f1:4a:50:
         6f:94:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:06:47 2026 by rpki-client