Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/162ea406-fd01-3a03-b6f9-5a10206d2395.roa
File:                     162ea406-fd01-3a03-b6f9-5a10206d2395.roa (raw, json)
Hash identifier:          lIf2J9hWRTbPSrIVW2qz5rGzcOV2iHpmoPzmAvX1FwY=
Subject key identifier:   5D:63:DF:16:19:0B:3C:EB:91:9A:01:64:61:AD:F1:9D:A1:93:09:1C
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E3FC488E10CD4D65EBFD43480
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/162ea406-fd01-3a03-b6f9-5a10206d2395.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     12025
IP address blocks:        148.51.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:88:e1:0c:d4:d6:5e:bf:d4:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=2fe4ae89-d7c5-4f73-9ac8-38cb34fdb511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:23:3f:83:5b:d3:da:b2:da:68:05:fd:67:
                    dd:81:ea:8c:33:c5:95:12:94:14:67:49:2b:b2:35:
                    07:74:58:5e:47:0e:5e:3b:91:c5:a2:07:ba:83:5b:
                    69:8d:25:b7:1d:85:31:5e:2b:c2:2f:f3:f6:1c:93:
                    b9:e5:99:d0:b9:69:3b:16:5c:d9:38:43:41:92:0b:
                    dc:56:52:c8:f8:d2:3f:92:85:bd:49:48:c4:9e:1d:
                    00:e0:d7:19:3c:ef:9b:dc:e3:6c:2a:93:e2:49:7f:
                    2d:d6:61:ae:17:78:07:40:0d:bd:05:d7:28:71:17:
                    31:d7:8b:14:a1:bb:93:e2:3d:f9:56:8d:f7:3d:05:
                    10:11:ca:33:bd:fd:8d:4a:98:84:01:61:1b:f8:40:
                    4a:f0:62:17:aa:59:bc:13:a7:24:80:8b:34:d0:31:
                    ab:06:d5:73:18:d3:1b:30:3f:01:e8:5b:01:24:1a:
                    ab:3a:ea:f1:42:ca:fe:e1:9c:86:ae:f0:63:d1:41:
                    5c:ca:d0:58:21:8b:e3:ef:fc:64:73:36:4e:a6:17:
                    d9:e1:9c:5f:bc:69:25:79:9c:7f:b7:6e:c3:57:48:
                    81:34:8c:f4:fb:7e:3e:85:f2:30:98:cf:3e:d7:a5:
                    7c:80:0f:97:b9:f3:aa:93:8e:39:03:88:bd:7c:3c:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:63:DF:16:19:0B:3C:EB:91:9A:01:64:61:AD:F1:9D:A1:93:09:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/162ea406-fd01-3a03-b6f9-5a10206d2395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:41:9b:a8:78:df:9d:33:e5:b0:c2:30:24:7f:45:ec:ff:
         ad:92:84:df:5a:f0:56:36:c2:18:9f:dc:37:10:4b:cc:f5:a9:
         1c:c9:f2:a0:70:d3:90:4a:90:45:39:34:f1:3d:64:42:53:d0:
         59:e5:fc:fa:0a:b5:66:fd:1d:ba:d7:f2:23:e7:1c:d6:ac:b6:
         b6:6d:ce:e8:07:98:d2:e4:4b:c6:c5:ec:43:7f:99:29:4f:0e:
         66:93:07:4d:e0:cd:8b:c1:2a:e5:2d:e4:2d:02:6f:8d:78:26:
         21:45:a1:d2:59:8a:07:59:69:d1:50:8a:23:d6:01:4f:19:53:
         6d:b2:6d:a5:91:96:1f:92:53:de:59:17:61:70:08:6c:ba:92:
         da:64:60:dd:a4:20:ff:0b:16:52:b4:d6:9d:96:c8:6d:d1:36:
         19:24:5c:e1:fc:89:d1:6f:5e:8d:72:0f:ac:46:4c:56:05:09:
         92:75:a8:1c:ec:a6:81:78:af:64:94:a3:8b:94:3a:c6:5c:76:
         15:e4:99:25:ef:48:4b:80:66:0f:53:e6:2d:40:aa:15:85:c6:
         a4:80:e7:f7:86:47:a0:2d:bd:ac:0e:2a:5e:8c:94:b5:0e:79:
         09:72:34:aa:15:56:3a:e7:2a:ba:8c:0e:55:57:37:90:7e:17:
         90:f1:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:34:46 2026 by rpki-client