Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8bd7bbce-f38d-3791-bf15-9627c07de294.roa
File:                     8bd7bbce-f38d-3791-bf15-9627c07de294.roa (raw, json)
Hash identifier:          tlfVRLXRGWvmYpQhutRzicK7USfnF9plUTQEcuQOwmM=
Subject key identifier:   D4:3B:9B:01:6C:25:10:5F:07:91:35:90:BC:C7:AB:F8:88:81:55:CD
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D4E4452B264804DB302CF3600
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8bd7bbce-f38d-3791-bf15-9627c07de294.roa
Signing time:             Fri 27 Mar 2026 08:52:17 +0000
ROA not before:           Fri 27 Mar 2026 08:52:17 +0000
ROA not after:            Thu 25 Jun 2026 08:52:17 +0000
asID:                     12025
IP address blocks:        148.51.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:44:52:b2:64:80:4d:b3:02:cf:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 27 08:52:17 2026 GMT
            Not After : Jun 25 08:52:17 2026 GMT
        Subject: CN=029a05ec-948b-4ce0-a10a-249fcf5ad417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:c5:33:67:62:ee:42:45:56:24:bd:6a:eb:
                    dd:cb:fa:62:00:03:9b:4a:e9:d3:6b:00:e8:36:e0:
                    2d:93:99:99:4e:bb:95:7d:3f:43:ca:3f:80:54:5d:
                    a2:fc:a5:3c:0c:f6:22:4d:8d:11:22:8b:53:15:71:
                    29:22:e3:75:a6:92:12:39:57:a4:52:1f:0c:56:aa:
                    5a:cf:4d:6d:c7:e8:5f:f3:50:79:75:76:a9:b1:d5:
                    4e:c7:5c:46:77:83:b4:2d:8c:81:b4:bf:78:ae:30:
                    90:8a:3d:92:25:72:78:6d:cf:6c:a1:cb:f4:66:07:
                    a2:11:3b:21:c6:6f:ec:3b:ae:d4:dc:66:d3:0d:6e:
                    3c:a2:47:c2:fe:a4:66:d2:c5:69:b2:83:9b:bb:e8:
                    fa:06:ac:96:e8:a7:21:18:84:b0:06:0c:11:af:83:
                    65:35:05:2f:fa:5b:12:ec:4b:6d:d6:e5:42:3f:92:
                    82:ac:64:ef:54:c9:92:27:88:33:26:f5:63:b8:09:
                    69:e0:70:81:30:40:7a:16:00:9b:20:08:3b:ff:0c:
                    15:0b:bd:e7:6e:8a:28:17:c4:ff:d4:5c:7b:4e:f3:
                    68:3a:9b:d6:b8:bf:5f:df:17:2c:b6:aa:05:38:8f:
                    fb:24:5a:0e:71:20:42:d9:59:f0:ce:45:cb:e3:ca:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3B:9B:01:6C:25:10:5F:07:91:35:90:BC:C7:AB:F8:88:81:55:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8bd7bbce-f38d-3791-bf15-9627c07de294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:80:fd:55:eb:8b:15:fc:f6:f6:23:da:8b:2a:77:df:f5:f4:
         1a:f1:c1:3f:8e:6b:6d:ab:09:99:02:d3:f5:ba:79:3d:73:18:
         4e:20:6e:db:a9:73:13:2f:bb:94:20:8f:81:ec:5d:e0:c7:ca:
         ed:4d:a0:36:a7:45:7b:ad:b9:8a:76:c7:14:84:00:fa:00:9a:
         49:48:fe:8b:1c:ed:42:d7:2f:03:a7:3e:04:c3:65:97:5f:5a:
         96:6a:4e:46:5e:62:9e:3b:98:2c:16:12:1c:46:b3:56:c6:e8:
         5b:a4:79:b3:6d:1d:e3:a4:ec:33:b0:3e:96:b4:2a:a6:05:a7:
         b7:a5:b5:bb:46:45:a1:fc:31:2f:a4:15:53:a5:57:19:a1:93:
         1d:fe:5c:33:3b:1d:92:a9:35:5a:60:63:0c:c7:56:17:6e:3a:
         93:f3:79:96:46:7b:62:39:aa:df:5f:da:e8:c6:16:70:b7:bf:
         e3:81:dc:30:fd:35:99:51:90:2b:72:c8:5b:ce:8f:a1:8d:5b:
         c4:28:7b:53:50:64:72:33:56:56:5f:03:e3:ff:6c:6f:68:ce:
         6a:93:57:ad:28:ce:80:c9:bc:48:81:fd:b4:84:ab:51:fe:e7:
         4c:3a:49:ba:77:fe:2a:21:35:e6:73:cc:e8:7e:22:93:31:af:
         b6:96:39:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ORFKyZIBNswLPNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDMyNzA4NTIxN1oXDTI2MDYyNTA4NTIxN1owLzEtMCsGA1UEAxMk
MDI5YTA1ZWMtOTQ4Yi00Y2UwLWExMGEtMjQ5ZmNmNWFkNDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBXFM2di7kJFViS9auvdy/piAAObSunTawDo
NuAtk5mZTruVfT9Dyj+AVF2i/KU8DPYiTY0RIotTFXEpIuN1ppISOVekUh8MVqpa
z01tx+hf81B5dXapsdVOx1xGd4O0LYyBtL94rjCQij2SJXJ4bc9socv0ZgeiETsh
xm/sO67U3GbTDW48okfC/qRm0sVpsoObu+j6BqyW6KchGISwBgwRr4NlNQUv+lsS
7Ett1uVCP5KCrGTvVMmSJ4gzJvVjuAlp4HCBMEB6FgCbIAg7/wwVC73nboooF8T/
1Fx7TvNoOpvWuL9f3xcstqoFOI/7JFoOcSBC2VnwzkXL48oJsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQ7mwFsJRBfB5E1kLzHq/iIgVXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvOGJkN2JiY2UtZjM4ZC0z
NzkxLWJmMTUtOTYyN2MwN2RlMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDPnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiA/VXrixX89vYj2osqd9/19BrxwT+Oa22rCZkC0/W6eT1zGE4gbtup
cxMvu5Qgj4HsXeDHyu1NoDanRXutuYp2xxSEAPoAmklI/osc7ULXLwOnPgTDZZdf
WpZqTkZeYp47mCwWEhxGs1bG6FukebNtHeOk7DOwPpa0KqYFp7eltbtGRaH8MS+k
FVOlVxmhkx3+XDM7HZKpNVpgYwzHVhduOpPzeZZGe2I5qt9f2ujGFnC3v+OB3DD9
NZlRkCtyyFvOj6GNW8Qoe1NQZHIzVlZfA+P/bG9ozmqTV60ozoDJvEiB/bSEq1H+
50w6Sbp3/iohNeZzzOh+IpMxr7aWORY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:53 2026 by rpki-client