Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/917859a9-2c64-30cf-9114-5fa227785182.roa
File:                     917859a9-2c64-30cf-9114-5fa227785182.roa (raw, json)
Hash identifier:          wGA8sZZDIndKkn1AoadKa8EAjopGdSdYg0EA5KZOLkQ=
Subject key identifier:   82:BF:DC:BA:E3:B3:CB:18:6F:51:F3:A6:F6:68:28:D1:1B:F1:8C:DD
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F0C0780DE9DE0B02730D2C480
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/917859a9-2c64-30cf-9114-5fa227785182.roa
Signing time:             Thu 03 Sep 2026 01:00:12 +0000
ROA not before:           Thu 03 Sep 2026 01:00:12 +0000
ROA not after:            Wed 02 Dec 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        148.51.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:07:80:de:9d:e0:b0:27:30:d2:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Sep  3 01:00:12 2026 GMT
            Not After : Dec  2 02:00:12 2026 GMT
        Subject: CN=d5bda011-fb42-4c03-88e3-f6fa52f78edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:c8:73:bf:98:bd:c3:cc:af:51:c6:e7:84:
                    64:96:0f:c2:9f:5d:1b:52:a3:b5:68:a6:76:b1:0e:
                    b8:b9:7c:34:05:c8:d1:ce:06:52:37:6f:c0:98:1f:
                    09:dd:6c:c3:09:0e:0c:ac:f6:15:e3:70:4c:9c:de:
                    0c:52:c9:dd:af:2d:e9:ad:15:c1:d0:ea:90:3d:80:
                    f2:e1:01:53:a3:9b:b8:42:aa:46:06:6a:d9:68:3c:
                    5e:04:18:22:d8:42:b7:58:55:94:14:fa:92:8a:e4:
                    4d:b9:f7:2a:53:12:8f:5e:85:75:1b:cc:60:9d:1c:
                    6d:cf:42:aa:8d:5c:dc:28:19:ba:28:8c:16:65:f6:
                    aa:9e:01:37:17:46:19:04:73:52:01:f4:da:16:42:
                    4b:00:ba:a3:75:a9:3c:9b:93:a4:e4:5b:09:0c:83:
                    21:84:a6:83:c9:79:1b:cc:71:f5:80:a8:7a:32:d6:
                    df:c7:fd:63:9b:a0:90:ab:e0:be:1a:06:17:90:74:
                    45:a6:1c:9a:d4:8a:fb:d7:1d:5b:6f:58:96:51:79:
                    12:fe:82:a4:30:6d:55:d8:d1:c9:d5:72:9a:a7:21:
                    df:69:46:98:5c:bc:49:0d:71:94:04:b7:9b:02:e8:
                    95:f5:f1:75:6d:b9:02:e1:3f:3d:9d:c4:4f:bd:c7:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:DC:BA:E3:B3:CB:18:6F:51:F3:A6:F6:68:28:D1:1B:F1:8C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/917859a9-2c64-30cf-9114-5fa227785182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:98:83:1c:88:63:e0:2a:c5:83:d2:e9:c0:15:e6:16:93:
         50:c6:80:91:01:f3:43:0f:0f:f8:13:4a:01:71:c4:e7:04:df:
         01:be:29:18:58:0a:95:ec:e3:49:3d:ee:a2:5a:1f:b6:c5:b5:
         aa:ba:4f:63:8c:ae:fc:9e:ed:9f:07:af:1f:38:d7:0c:69:0c:
         a3:16:4c:60:54:2b:3a:8d:76:4c:f7:9b:9b:db:b1:c9:30:c8:
         3b:cd:98:36:b8:3a:4e:e0:85:ce:90:1c:6c:5f:82:b8:ad:c7:
         ec:2c:b4:c7:56:85:e6:05:93:77:40:aa:73:ea:e4:e5:c7:12:
         0d:9c:f9:0e:36:fa:36:b5:30:08:83:6a:9b:80:4b:52:d2:a2:
         eb:3f:b2:7c:49:21:c0:85:a9:c3:81:a7:ef:24:b9:0d:46:87:
         64:02:04:a7:88:73:5f:21:22:fb:d0:0b:d6:3d:e2:79:d7:45:
         3d:17:2f:80:b9:70:25:fd:c0:ce:4d:85:2d:82:60:19:de:ac:
         4a:bf:4c:1b:5b:93:40:81:64:9b:ac:f2:78:3d:4b:aa:2e:a6:
         82:eb:2f:d5:a9:e4:ce:48:7b:ec:b1:7e:05:ac:28:7f:41:1f:
         f2:90:2a:26:ef:8a:8e:66:89:47:c0:27:79:56:7c:25:06:ef:
         fb:9e:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:30:19 2026 by rpki-client