Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/f6772cde-e765-30ed-b3b6-01a76b0b9e3d.roa
File:                     f6772cde-e765-30ed-b3b6-01a76b0b9e3d.roa (raw, json)
Hash identifier:          ubSSYjWk3kugS2+Sb4BzjMSK0RqnDLvPC/l+wBUtTsI=
Subject key identifier:   AC:59:8E:5C:6E:FF:A6:C3:11:8D:3D:4C:68:6C:5B:7F:CE:7E:62:58
Certificate issuer:       /CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6
Certificate serial:       010D0C9F4328584D40CA5B8A9F5D87CB04CAAB80
Authority key identifier: 1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/f6772cde-e765-30ed-b3b6-01a76b0b9e3d.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     397871
IP address blocks:        148.59.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:5b:8a:9f:5d:87:cb:04:ca:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8fdf3c07-4048-4bbe-afa7-b65acf05088c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:30:91:42:af:32:f0:56:67:1a:c1:2d:23:
                    f7:7f:54:ab:d0:e1:46:c0:53:62:b5:b9:71:8f:fe:
                    6e:23:6d:63:46:0d:22:ad:98:8c:65:d5:00:84:d8:
                    ee:d3:54:98:54:a4:90:b0:91:1f:40:d9:13:62:03:
                    cf:73:af:45:60:e9:4e:74:f7:e3:58:eb:0c:b3:6a:
                    74:5e:15:16:f8:bb:4b:82:fa:1a:f3:0e:d8:52:d3:
                    f1:36:7c:0c:08:b5:a9:1b:34:46:8a:e6:76:3d:1e:
                    c6:4e:99:4f:09:7f:5f:58:5f:8c:58:28:d0:9e:30:
                    36:03:c3:c7:fc:41:9c:e7:87:39:8d:66:46:e7:d1:
                    2e:86:5f:05:83:4a:ec:01:48:8c:6b:da:9f:dd:49:
                    25:3b:6b:57:f3:79:eb:e9:85:f5:fa:52:1e:4e:ea:
                    0f:58:9f:06:4a:ab:f2:3f:38:14:63:e0:35:6c:e4:
                    2a:9f:ec:d7:23:3c:7f:4d:50:5e:d3:b2:04:b9:c5:
                    bd:ee:fc:bc:93:99:d0:fd:51:78:2c:c4:cf:45:26:
                    b1:80:33:bc:96:82:d4:8e:cf:ab:75:f0:9f:cd:ae:
                    7c:8d:de:ed:16:17:ba:87:55:1a:5c:46:1b:b8:7a:
                    70:51:67:a7:c3:83:f1:48:bd:6e:5d:4a:47:eb:f5:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:59:8E:5C:6E:FF:A6:C3:11:8D:3D:4C:68:6C:5B:7F:CE:7E:62:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/f6772cde-e765-30ed-b3b6-01a76b0b9e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fd:57:ff:19:1e:3b:2d:be:42:dc:db:ad:22:37:bb:a8:b4:
         39:fe:4f:e6:36:1c:62:f5:52:91:81:a6:ef:13:11:ae:d5:2e:
         2e:83:5b:41:99:3a:c2:83:20:cc:07:7f:a7:e0:40:0a:71:12:
         d1:fa:37:8a:09:76:fd:05:ee:c2:1b:8c:63:e0:92:f0:bf:88:
         14:d5:fe:bd:6b:ba:6e:62:3b:bd:de:f4:81:bc:37:b6:ed:a4:
         46:31:f8:46:03:b6:5a:f2:c1:6e:28:e0:76:06:82:c7:bb:77:
         f6:bb:6f:bf:44:56:c1:4d:31:fb:2a:77:a8:23:d9:9c:0e:20:
         e2:96:0a:de:46:72:77:d9:1c:83:58:aa:f9:5d:b8:b5:c1:bf:
         74:71:26:72:0c:c3:4b:94:cd:86:33:58:24:b9:6a:df:e3:ef:
         6b:24:8c:3c:4a:64:aa:8a:43:48:6b:06:55:8d:5a:ca:89:34:
         88:0a:d5:74:cc:42:2d:13:dc:f3:57:3f:11:42:b2:a5:3b:9f:
         c5:fb:89:bc:97:16:4f:e4:65:81:bb:a5:f6:7d:f5:8d:96:3c:
         8f:5c:e9:51:f5:c3:93:c4:0e:e9:58:6e:c6:06:bd:56:9e:a4:
         fe:8c:23:ed:85:10:8a:23:0b:32:b4:6f:24:22:7d:c2:93:e2:
         39:53:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:53 2026 by rpki-client