Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6edf7679-8362-3465-99a2-5d69b793fb8e.roa
File:                     6edf7679-8362-3465-99a2-5d69b793fb8e.roa (raw, json)
Hash identifier:          7Mi0fFXqZMeSuAD7cUdsCSlOQ1bKczIdvoOPCl598K8=
Subject key identifier:   2B:48:97:5B:B6:C5:D2:85:05:1B:46:FC:40:F7:38:1C:01:CE:84:93
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D4E6FFAC7AB523D5D6EEE3500
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6edf7679-8362-3465-99a2-5d69b793fb8e.roa
Signing time:             Fri 27 Mar 2026 10:20:15 +0000
ROA not before:           Fri 27 Mar 2026 10:20:15 +0000
ROA not after:            Thu 25 Jun 2026 10:20:15 +0000
asID:                     12025
IP address blocks:        148.51.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:6f:fa:c7:ab:52:3d:5d:6e:ee:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 27 10:20:15 2026 GMT
            Not After : Jun 25 10:20:15 2026 GMT
        Subject: CN=318f5d2c-fafb-43db-b7a2-4c2092515cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:e6:bc:9d:bb:d6:46:19:c9:39:78:06:26:
                    99:0f:7d:4b:2e:bd:4d:0d:26:9a:7a:2e:a6:8c:d2:
                    8c:89:27:37:fd:2a:4d:da:86:5d:d5:9a:89:57:e1:
                    89:79:c3:fd:f6:46:92:6f:f8:1a:3f:9f:3e:09:36:
                    47:f8:10:7f:2c:03:f8:16:ae:55:ca:d6:02:d7:37:
                    e8:dd:34:68:08:00:d5:36:fc:5f:b9:af:50:c9:5e:
                    c5:f9:f0:09:88:ab:64:20:71:60:39:04:5d:45:59:
                    63:97:e9:7f:a4:77:ac:e4:b4:cb:a2:c8:30:ef:ac:
                    64:9d:7f:5b:7a:b8:af:8b:ab:95:5d:62:b1:79:6a:
                    a5:67:76:8b:1c:71:8c:c5:2b:d0:1c:a7:31:a8:d5:
                    cd:07:5b:f4:b2:9c:4b:08:f2:9c:08:ef:9a:19:0d:
                    32:83:ff:17:76:d0:da:6c:3a:fb:ea:8c:88:e4:60:
                    a8:6a:13:15:93:1c:cb:90:d6:c5:da:59:f2:66:c4:
                    cd:08:6b:21:1a:ef:41:c3:ca:38:8d:0d:15:fc:56:
                    bb:4f:48:32:cd:da:dd:f4:e4:43:ac:35:96:f2:96:
                    df:5c:b4:a7:b6:1d:0c:f4:8b:37:75:e6:93:b5:a2:
                    dc:a8:c7:a5:ea:77:af:d7:68:e9:09:76:a2:a1:7f:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:97:5B:B6:C5:D2:85:05:1B:46:FC:40:F7:38:1C:01:CE:84:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6edf7679-8362-3465-99a2-5d69b793fb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:13:1d:e7:ef:e9:c4:f8:d4:8d:3d:88:38:44:94:61:eb:95:
         59:67:b4:79:2c:88:ac:d3:21:99:7b:9c:75:38:04:32:fa:2a:
         15:5f:54:df:75:de:52:6a:61:c9:e2:c2:cd:d6:2b:14:25:df:
         b7:d9:3e:b1:64:f5:ff:ac:74:07:c5:c8:7c:02:d2:d2:67:55:
         fd:42:b3:4e:24:7a:2c:5e:c8:db:80:fa:97:b0:8b:0f:f7:c9:
         d4:21:4c:cf:4e:4c:df:2f:e4:b7:7a:0f:64:19:d8:48:05:ba:
         09:d9:67:6c:22:87:c6:27:c2:c3:eb:41:8c:17:f5:aa:4c:76:
         50:e3:1d:2e:6f:16:2e:0a:22:1f:12:28:49:60:7d:bc:f3:7f:
         93:dc:f6:d5:9b:c0:41:81:55:b3:cb:bc:2c:04:ea:c2:20:d5:
         ae:94:25:0f:ed:e3:80:31:aa:0b:eb:76:2e:ee:bc:80:20:f2:
         0b:c9:05:27:b5:8b:6f:d0:c9:34:97:59:bb:d9:0d:46:df:ba:
         5d:2e:34:20:80:40:de:87:be:82:de:82:1e:2b:67:e9:07:09:
         f9:3c:25:c3:0b:cd:ee:f5:eb:cd:7f:31:78:66:8c:1f:74:38:
         f4:7a:33:4f:01:df:0e:71:9f:30:fa:9d:b6:64:bb:69:ff:8b:
         f1:5d:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:41 2026 by rpki-client