Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b228ff65-076b-350a-9bd4-34c24e093669.roa
File:                     b228ff65-076b-350a-9bd4-34c24e093669.roa (raw, json)
Hash identifier:          ZKOWEgAkVfOyzyIDf9J6/e/KROt6MRdLa0R6WATZ/zA=
Subject key identifier:   D0:7B:C1:E5:BB:7E:CE:A4:E0:CB:EA:D3:83:7F:FF:EE:4B:03:E3:51
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EE2275526BEAA3CCB5525BB80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b228ff65-076b-350a-9bd4-34c24e093669.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        174.128.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:55:26:be:aa:3c:cb:55:25:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=07eb59f6-29c6-4171-9ae4-87b19ca17b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:b1:14:d1:26:cd:ef:a4:92:4e:1d:4f:d1:
                    30:c2:c5:53:f6:0c:47:2a:d2:22:64:2a:9f:c0:59:
                    92:fd:aa:54:9f:04:2c:36:60:02:85:62:81:2b:be:
                    15:d5:03:3c:b6:a0:0f:c5:c5:0b:41:92:34:64:09:
                    ca:ac:14:be:f4:33:31:78:25:94:53:20:bd:a5:b5:
                    df:6a:2a:c5:95:33:8d:c9:d2:36:92:28:d0:64:bd:
                    01:90:b0:0a:d1:6a:de:a6:f4:ac:74:0b:59:6a:52:
                    c0:ab:b8:26:98:50:79:c7:5b:d4:45:0a:81:49:29:
                    73:fa:6c:9d:63:2e:84:b7:3a:6d:4b:a7:f4:87:07:
                    55:e6:9f:18:67:d0:b1:68:6f:9e:90:54:b1:9c:a5:
                    d6:4a:1f:37:04:c2:93:9b:a5:32:f2:90:89:ef:11:
                    63:22:55:01:41:ab:32:c3:47:a2:62:d6:70:3a:6a:
                    16:94:5d:88:fd:04:58:a2:ea:3f:ad:97:b8:d8:47:
                    65:9e:a5:5a:39:86:d1:f9:be:b4:f4:f8:ef:b3:49:
                    c4:44:20:94:ea:e8:11:f4:3c:67:6e:0d:41:01:43:
                    c9:c6:70:4f:8c:e7:c0:e1:e8:f2:25:ab:be:0f:f7:
                    b7:ce:e3:1f:53:d5:49:a1:3e:84:9b:c8:80:9e:5c:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:C1:E5:BB:7E:CE:A4:E0:CB:EA:D3:83:7F:FF:EE:4B:03:E3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b228ff65-076b-350a-9bd4-34c24e093669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.128.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:fa:dd:74:85:1d:a5:ad:55:5c:98:b0:7c:9c:b9:27:f2:
         ae:4f:9f:24:72:00:ca:40:66:36:7c:62:e7:ff:a3:bc:64:73:
         d2:01:43:b0:db:96:9a:82:2c:82:6f:d4:26:4b:60:53:06:0c:
         67:0b:5c:a9:a3:47:b4:90:0f:7e:75:01:f6:7c:70:cc:70:6a:
         cf:07:cc:b3:8b:8b:85:0e:18:93:74:91:40:79:22:db:9f:ee:
         c0:08:68:65:f9:e4:ce:80:fc:17:6d:cf:d4:d1:bd:33:6a:62:
         c2:67:c9:cc:e7:03:00:48:42:8c:f3:aa:1a:ce:08:33:c5:79:
         c7:53:05:b9:44:35:07:52:99:40:f5:ee:ad:09:30:40:cf:03:
         88:71:99:c2:5e:94:5a:5b:2b:5c:b0:20:b0:17:e6:fa:c1:68:
         b9:0a:21:94:4e:da:43:f8:b1:0c:c7:19:12:f7:4c:b0:bb:c8:
         2a:ae:f8:e7:93:44:75:80:3e:5f:18:8d:6f:f9:80:b9:95:5e:
         ec:73:b8:8f:e2:be:2c:3b:54:b9:f4:42:82:7a:52:f4:36:d7:
         ae:88:9c:64:06:8e:b6:9c:3c:8b:32:10:a6:b9:67:de:e5:a4:
         ab:16:bd:31:4a:0b:bd:b8:ff:33:6c:9a:6a:ce:be:45:36:62:
         c7:15:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:36:15 2026 by rpki-client