Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ae96225b-a1df-3a3b-8c3d-277da6e18377.roa
File:                     ae96225b-a1df-3a3b-8c3d-277da6e18377.roa (raw, json)
Hash identifier:          397u+/cFaT5zsNimm+9qtHAGtg5ZlB1w9RTwZJYjNDc=
Subject key identifier:   D3:34:C1:C6:12:C1:77:D6:35:99:91:C4:11:29:1B:32:6F:B7:02:9C
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D5FE51E65E4FE4DBCC86665C0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ae96225b-a1df-3a3b-8c3d-277da6e18377.roa
Signing time:             Thu 02 Apr 2026 16:25:01 +0000
ROA not before:           Thu 02 Apr 2026 16:25:01 +0000
ROA not after:            Wed 01 Jul 2026 16:25:01 +0000
asID:                     12025
IP address blocks:        148.51.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:e5:1e:65:e4:fe:4d:bc:c8:66:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Apr  2 16:25:01 2026 GMT
            Not After : Jul  1 16:25:01 2026 GMT
        Subject: CN=bd74642f-3ae2-45fa-a2ce-5abeb027dd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:26:ad:7d:e3:a2:e3:37:a1:2e:4b:5c:f9:
                    bf:e9:21:8b:2f:9c:58:a1:90:9c:f7:70:70:5e:67:
                    4d:1d:f8:b5:0d:9f:9d:a5:be:9b:e6:a9:a6:7a:ec:
                    a6:e1:98:03:35:e8:f7:07:41:f6:5a:e9:e7:87:f8:
                    44:e3:ee:7f:55:20:0b:1a:d0:4d:c1:38:a4:9a:d9:
                    61:77:3e:e3:97:21:a0:f3:20:f9:b5:55:81:f4:46:
                    9a:f9:47:6b:23:04:56:3f:25:42:36:5a:d8:f0:82:
                    a8:16:08:58:1b:97:c7:32:fb:3b:8b:e0:8e:b6:82:
                    34:f3:ba:67:8e:86:2f:b5:a3:5f:72:46:54:b1:fa:
                    b4:0f:bc:d1:12:13:f2:9d:14:59:34:20:31:89:10:
                    ae:69:d6:1f:dd:cb:57:24:2f:89:1a:41:20:49:26:
                    cf:92:58:8a:63:91:60:dc:27:92:b9:d6:0f:40:f4:
                    f9:1d:63:99:e4:54:f9:3c:35:d6:60:3d:22:8e:7a:
                    a1:ee:b7:43:c2:e2:84:dd:ac:72:53:c5:32:86:b0:
                    c7:18:ac:d1:9f:3d:e7:e4:d8:cd:e8:17:ba:ec:13:
                    89:ad:53:a4:9d:22:4b:ae:d9:e1:55:11:ca:19:dd:
                    6e:f2:7f:fd:7f:41:bb:a8:0d:bf:58:73:68:e4:70:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:34:C1:C6:12:C1:77:D6:35:99:91:C4:11:29:1B:32:6F:B7:02:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ae96225b-a1df-3a3b-8c3d-277da6e18377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:3e:93:41:7e:ae:c4:a8:29:4c:7a:da:01:c8:fc:4a:66:
         24:c9:3a:59:3f:de:6a:57:15:a7:21:b1:d2:79:47:e8:04:33:
         4c:f9:9e:db:c8:91:87:68:18:06:de:61:8c:f6:ff:7d:e1:f9:
         a5:2d:b9:fd:2c:bd:d0:0f:1d:9a:f3:ae:b1:fa:cd:ff:88:fc:
         2c:23:7d:59:d2:3f:af:0e:b9:a5:8f:a6:b1:9a:63:ad:d5:d1:
         66:2f:c5:99:9e:50:38:2b:59:d9:2a:40:e0:ad:66:81:47:db:
         61:4c:12:66:13:1a:a3:57:12:32:f7:81:6e:67:f8:11:cd:ff:
         e8:95:f6:c1:b7:0d:4f:c7:31:70:7f:d5:ff:29:dc:4f:e2:26:
         00:40:c7:e0:7c:07:be:ad:27:f2:b4:53:24:73:ae:b3:67:93:
         e4:f6:f2:9a:d3:10:11:eb:d9:7c:ce:10:0e:04:9b:fa:9e:98:
         9b:f9:77:f8:93:f0:5d:1c:81:2f:78:9c:49:44:9c:06:3c:9b:
         55:1f:0d:40:7e:b7:e2:b7:0e:00:f6:12:2b:43:56:d7:86:46:
         7e:17:7c:b8:12:e1:bc:53:cd:cf:4c:2a:05:3c:71:29:30:06:
         8a:9d:5d:92:e7:24:db:df:70:73:4c:f3:c4:d0:73:de:d8:74:
         ee:85:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:31 2026 by rpki-client