Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21068d7c-4bc7-3854-b1c5-4455cbce590b.roa
File:                     21068d7c-4bc7-3854-b1c5-4455cbce590b.roa (raw, json)
Hash identifier:          kVK0QbiiX/Xv5lPUNHG5LKRI1lyd8tjWObnPMwz+HfE=
Subject key identifier:   13:67:A8:D6:BB:A9:0B:76:85:F4:79:5B:98:66:74:83:79:59:B5:B4
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D5FDD9229DB1E7248DEA61040
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21068d7c-4bc7-3854-b1c5-4455cbce590b.roa
Signing time:             Thu 02 Apr 2026 16:09:48 +0000
ROA not before:           Thu 02 Apr 2026 16:09:48 +0000
ROA not after:            Wed 01 Jul 2026 16:09:48 +0000
asID:                     12025
IP address blocks:        148.51.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:dd:92:29:db:1e:72:48:de:a6:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Apr  2 16:09:48 2026 GMT
            Not After : Jul  1 16:09:48 2026 GMT
        Subject: CN=ca75aa11-2df7-437f-a7cd-935a54fe7a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:b9:da:75:12:41:43:76:d5:69:a8:a2:ca:
                    d8:8a:29:87:7d:cb:8d:8b:53:50:d3:de:08:89:cd:
                    ee:76:d6:ec:78:5f:9d:e7:b5:79:08:56:7a:01:40:
                    e4:81:75:43:8a:8e:45:ff:7b:74:d0:c8:c4:0f:84:
                    4c:4b:33:a4:7a:92:f5:0b:6a:11:9c:d4:d1:c6:c4:
                    b7:a9:62:dd:4d:d1:59:32:5f:08:ba:ac:9e:da:1a:
                    24:ac:89:6d:02:aa:b1:34:2c:d8:e9:ab:94:39:aa:
                    6c:77:e4:bd:ab:7b:0c:f0:2c:8d:27:7b:2f:f5:74:
                    63:81:d5:42:be:9c:da:f4:bf:a3:43:2d:12:0e:6b:
                    78:fe:23:2d:e1:ed:6d:0d:07:6f:78:dd:38:a7:11:
                    cf:73:2a:be:8b:43:4e:f5:5d:2a:c6:53:4b:9e:e7:
                    ae:91:ab:35:f3:3e:a7:6a:36:1d:69:4d:ab:e4:88:
                    4d:45:a5:0a:3b:6b:0f:17:48:33:8f:10:db:b2:de:
                    d9:95:67:ce:0c:a1:18:92:e9:fb:fd:d7:b6:12:93:
                    64:d3:a1:e2:46:d5:5a:b0:22:de:a3:5f:c4:a8:d8:
                    58:d1:9e:e2:e2:9a:9a:e2:99:dc:96:61:80:c5:cd:
                    f5:1f:8e:1c:31:41:c3:ab:60:65:84:6b:e1:5b:aa:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:67:A8:D6:BB:A9:0B:76:85:F4:79:5B:98:66:74:83:79:59:B5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21068d7c-4bc7-3854-b1c5-4455cbce590b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:62:07:e7:73:03:94:35:59:72:43:eb:cf:d4:1e:cc:32:ef:
         e2:9d:fc:e5:98:5e:3c:6f:4e:3b:39:b5:5f:97:10:6b:1b:12:
         0b:de:84:0b:1d:4a:ab:95:b7:34:79:21:69:3f:a0:0c:4b:00:
         44:9d:7f:3f:2c:9c:98:56:14:6e:c8:d6:a2:e2:67:b9:63:01:
         19:83:9e:20:f2:64:d4:46:99:fd:e3:8f:cf:7c:26:ff:c0:b3:
         d5:7d:59:b5:79:35:07:6b:4e:4a:12:32:9d:38:3d:f2:d4:80:
         07:ae:71:e5:51:57:c2:5b:4b:cf:60:c4:98:a2:9d:e7:a1:ca:
         fd:e9:5e:03:bf:4e:a2:be:7f:ec:d2:74:7e:26:da:30:17:b8:
         d2:df:03:70:c1:cd:b4:e8:b8:33:cc:d2:bf:86:7b:56:2a:86:
         63:ba:6c:71:18:12:3f:da:f5:d4:81:4c:e2:6b:fb:7e:35:07:
         f4:24:e4:90:c2:45:3d:66:0c:03:70:63:6a:9e:14:f4:2a:14:
         02:dd:c2:f8:ec:2e:08:80:ae:7d:ae:de:df:6a:a5:f3:5a:8f:
         ad:1d:eb:48:e4:ee:93:d2:05:49:0e:71:31:58:23:14:20:1f:
         4e:84:93:42:b7:4b:a3:c7:5e:1e:e7:0d:96:1a:d9:2e:27:0a:
         d0:c7:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:58 2026 by rpki-client