Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0ce9dfb5-c57a-3929-969b-7f6743c41acb.roa
File:                     0ce9dfb5-c57a-3929-969b-7f6743c41acb.roa (raw, json)
Hash identifier:          Goi48pSsoi62UHG48PJCUu7B8RzPOFOVQO2cYQVu+ZU=
Subject key identifier:   57:F4:93:07:B6:EC:20:67:35:ED:63:53:1D:A2:81:49:AC:D0:8B:6B
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E3FC47A648174F4A5A0068AA0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0ce9dfb5-c57a-3929-969b-7f6743c41acb.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     12025
IP address blocks:        148.51.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:7a:64:81:74:f4:a5:a0:06:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=03c9e27a-cc9a-41b6-a48d-7b283d6689e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:e3:6f:80:1d:cc:3d:04:d9:5a:19:84:1a:
                    9d:a4:e4:d2:10:a7:8b:8e:06:6b:a8:a1:74:27:96:
                    5c:4c:3e:29:1d:82:7a:b6:6e:0b:af:76:00:d3:0c:
                    c8:91:1a:22:ae:ff:bc:d2:54:c5:d1:86:5f:bd:c9:
                    0d:47:60:7b:52:c8:fd:88:da:a7:d4:54:08:03:6d:
                    6f:05:41:d7:3d:60:4e:88:ab:f2:ac:ba:43:06:39:
                    e2:43:62:29:10:b8:b2:89:e7:59:71:16:92:7f:32:
                    55:5c:b8:7c:38:b5:23:53:f7:35:4f:49:d5:31:5e:
                    ac:1a:cb:c3:16:ac:bd:60:3c:52:97:53:b4:50:55:
                    26:1f:e4:52:41:dc:35:1a:5c:61:d6:07:9b:6b:22:
                    55:56:22:fc:13:78:2d:fe:ba:d0:e5:56:f4:1b:39:
                    d4:f3:c8:ba:fc:b6:f5:73:50:c5:18:b6:ac:eb:4d:
                    b1:b2:db:e9:b1:2c:90:23:66:25:a2:73:60:1b:79:
                    a7:89:d0:5c:34:90:3b:65:b2:3e:03:db:75:65:54:
                    56:e8:ab:ef:16:06:f2:14:19:21:21:da:5a:61:13:
                    ac:e1:de:68:1a:82:ef:2e:a0:61:cb:92:4b:d2:31:
                    58:f8:c9:b3:d2:d6:48:51:d2:da:6a:0e:eb:e6:81:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F4:93:07:B6:EC:20:67:35:ED:63:53:1D:A2:81:49:AC:D0:8B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0ce9dfb5-c57a-3929-969b-7f6743c41acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:17:b0:b2:a4:80:db:a9:9a:9b:c3:ee:4b:20:b4:33:b4:
         92:aa:b7:f6:6d:27:60:bb:24:f9:ba:72:99:ea:85:2f:83:67:
         0e:26:fc:1b:29:22:77:f0:77:d1:d1:5c:15:07:b4:bd:a5:a2:
         99:db:84:b0:2f:c4:8d:c3:db:3a:ab:4d:b4:a1:82:14:f4:cd:
         7c:82:b4:a9:53:73:aa:8c:24:bb:90:92:e8:65:75:14:1c:5f:
         41:eb:7a:2a:1c:d0:7f:e9:c1:9d:ef:6f:07:f4:61:a4:3c:7d:
         1f:81:82:08:82:1c:16:3e:c3:17:18:cf:83:c9:8b:a4:7d:5f:
         a2:a9:e6:4a:58:c9:52:c7:db:9f:83:18:64:92:a9:4e:40:48:
         e9:36:a4:60:fc:92:2a:19:31:a1:c8:28:cf:f8:18:43:3a:ba:
         58:b3:af:3d:b5:b0:89:52:de:2b:74:ed:1e:0b:4a:1d:ca:68:
         d9:ca:e3:04:06:2d:52:9a:5a:60:c4:8f:40:c5:e5:82:28:76:
         dd:bb:91:a5:06:c3:9d:0a:15:96:2b:46:6f:3a:84:96:b9:6c:
         4f:fd:57:be:8b:5a:25:fb:56:80:1d:78:c4:2c:64:a8:c0:be:
         b5:b2:e6:d7:73:0e:d4:bf:a5:1c:57:10:cf:fe:c3:3b:60:ad:
         1a:13:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:33 2026 by rpki-client