Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/aeddebc4-4e80-3718-a3bb-842b53b59b63.roa
File:                     aeddebc4-4e80-3718-a3bb-842b53b59b63.roa (raw, json)
Hash identifier:          pl4Pm4QdGjSdA8hD57hLGGGGv7EHgHpP7Y7yOBHgGG8=
Subject key identifier:   2A:8D:E1:27:5E:38:84:0F:37:41:1A:75:73:1B:B2:5A:B3:50:C7:B8
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D5F8CA963296BB6E2C6024B80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/aeddebc4-4e80-3718-a3bb-842b53b59b63.roa
Signing time:             Thu 02 Apr 2026 13:26:47 +0000
ROA not before:           Thu 02 Apr 2026 13:26:47 +0000
ROA not after:            Wed 01 Jul 2026 13:26:47 +0000
asID:                     12025
IP address blocks:        148.51.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:8c:a9:63:29:6b:b6:e2:c6:02:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Apr  2 13:26:47 2026 GMT
            Not After : Jul  1 13:26:47 2026 GMT
        Subject: CN=92da17e1-fda9-47aa-a851-c21e591583b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:75:fc:95:2a:af:d0:32:a8:cd:dc:ae:03:
                    fb:9a:47:3a:57:a2:7c:07:4d:60:94:6e:b8:a9:fa:
                    5e:0a:1c:d7:f1:8c:0e:d2:e8:ee:ca:2a:92:8d:f5:
                    bb:a2:2a:84:1e:8f:4b:48:1a:da:fc:82:2d:1f:b6:
                    51:fa:78:c1:d9:b5:74:46:b8:69:b6:1d:3e:82:45:
                    ec:cd:aa:c2:e6:98:56:2b:cc:8b:e3:8a:c6:cd:e7:
                    67:af:68:a3:ff:97:db:8a:0d:ac:3a:57:fa:c1:c7:
                    3d:d4:07:f2:0e:8d:0f:dc:61:54:c9:0f:62:9f:27:
                    9d:a1:17:2a:14:73:b1:08:e9:bb:80:4a:96:98:d8:
                    14:d6:b0:79:96:04:f8:64:07:5f:49:2b:4b:4f:71:
                    ca:e5:55:5d:b3:7c:39:e5:3f:03:57:84:1b:e1:9e:
                    01:d5:bc:c2:90:0c:4c:ce:ac:80:2f:39:9b:1a:26:
                    a1:6d:d7:c2:21:c1:08:ac:6b:bf:86:44:f0:51:f9:
                    f1:b7:8f:7d:40:26:5a:3d:e2:2d:a6:62:bf:7e:9b:
                    d3:93:0a:ab:4e:0a:70:50:13:3d:87:5f:da:02:28:
                    5d:25:63:33:60:8e:b3:3a:92:37:7d:ee:65:86:6d:
                    cd:8e:56:f1:4a:a5:fd:e0:ce:54:68:20:3f:ac:b9:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8D:E1:27:5E:38:84:0F:37:41:1A:75:73:1B:B2:5A:B3:50:C7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/aeddebc4-4e80-3718-a3bb-842b53b59b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:65:63:e5:02:3c:9a:2b:a7:1e:4c:c8:44:c0:51:ae:92:eb:
         60:16:12:43:25:3f:b2:88:86:bf:62:dc:4d:92:9e:4b:3e:5f:
         19:92:b1:34:66:3e:ed:db:2b:92:a6:7c:fa:b1:cf:43:55:63:
         b2:ae:c9:9e:8a:0a:eb:46:ed:62:50:7c:e8:fa:5e:f2:8b:a0:
         5e:44:a7:dc:4c:d0:89:31:c8:6d:c6:db:a6:fd:17:e4:9b:0c:
         45:12:26:e1:40:93:5f:e1:e8:e3:40:10:a4:62:c9:90:cf:b4:
         e8:e5:0f:ae:00:19:f3:a8:2d:7e:8e:6a:7e:d8:d6:35:69:a3:
         37:29:38:09:4b:66:32:80:31:b3:44:18:bf:26:db:6f:a1:8c:
         bf:8c:4a:99:90:39:0b:00:f0:f2:2e:bb:0b:22:fd:b2:0a:b2:
         ff:cf:58:d1:19:cf:97:8b:d5:08:d1:7c:23:35:ad:05:7e:ec:
         9b:cc:5d:b0:fb:76:cf:c8:30:88:2a:3e:88:35:33:b1:82:ed:
         1d:19:d5:6f:3b:1b:73:2f:a4:7a:61:be:f3:6d:3a:9b:9a:3c:
         b4:93:e6:1c:70:c5:a3:8e:93:23:6f:6d:64:d6:56:06:21:d6:
         98:7f:d3:ce:2e:b3:5b:55:1f:69:84:9a:2e:12:2b:6d:e9:a3:
         01:28:0b:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fjKljKWu24sYCS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDQwMjEzMjY0N1oXDTI2MDcwMTEzMjY0N1owLzEtMCsGA1UEAxMk
OTJkYTE3ZTEtZmRhOS00N2FhLWE4NTEtYzIxZTU5MTU4M2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf11/JUqr9AyqM3crgP7mkc6V6J8B01glG64
qfpeChzX8YwO0ujuyiqSjfW7oiqEHo9LSBra/IItH7ZR+njB2bV0Rrhpth0+gkXs
zarC5phWK8yL44rGzednr2ij/5fbig2sOlf6wcc91AfyDo0P3GFUyQ9inyedoRcq
FHOxCOm7gEqWmNgU1rB5lgT4ZAdfSStLT3HK5VVds3w55T8DV4Qb4Z4B1bzCkAxM
zqyALzmbGiahbdfCIcEIrGu/hkTwUfnxt499QCZaPeItpmK/fpvTkwqrTgpwUBM9
h1/aAihdJWMzYI6zOpI3fe5lhm3NjlbxSqX94M5UaCA/rLmrYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqN4SdeOIQPN0EadXMbslqzUMe4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvYWVkZGViYzQtNGU4MC0z
NzE4LWEzYmItODQyYjUzYjU5YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlDPGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdlY+UCPJorpx5MyETAUa6S62AWEkMlP7KIhr9i3E2Snks+XxmSsTRm
Pu3bK5KmfPqxz0NVY7KuyZ6KCutG7WJQfOj6XvKLoF5Ep9xM0IkxyG3G26b9F+Sb
DEUSJuFAk1/h6ONAEKRiyZDPtOjlD64AGfOoLX6Oan7Y1jVpozcpOAlLZjKAMbNE
GL8m22+hjL+MSpmQOQsA8PIuuwsi/bIKsv/PWNEZz5eL1QjRfCM1rQV+7JvMXbD7
ds/IMIgqPog1M7GC7R0Z1W87G3MvpHphvvNtOpuaPLST5hxwxaOOkyNvbWTWVgYh
1ph/084us1tVH2mEmi4SK23powEoC48=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:18 2026 by rpki-client