Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21068d7c-4bc7-3854-b1c5-4455cbce590b.roa
File:                     21068d7c-4bc7-3854-b1c5-4455cbce590b.roa (raw, json)
Hash identifier:          JGEjvPAgRyLJYAgn+0enjfhauM/ojCiSHt4Wy+gbSP8=
Subject key identifier:   75:3B:FC:57:23:66:FD:B0:18:51:4D:63:35:6A:56:33:A0:C3:CF:5B
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EE2274177ECC39B25ED422180
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21068d7c-4bc7-3854-b1c5-4455cbce590b.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        148.51.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:41:77:ec:c3:9b:25:ed:42:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=613ec7d0-cc59-4d36-8672-769c0ba341f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:5c:2e:2d:9d:7c:11:11:9a:4c:5b:fe:8b:
                    c3:03:02:d6:fe:e0:c2:58:b3:fd:35:65:19:ba:b9:
                    e0:42:83:ef:a1:4c:ac:a7:95:f5:b1:54:9b:a7:11:
                    5f:3f:2c:4f:c4:f4:1e:c5:ee:64:fb:dd:3e:2d:ad:
                    0a:d4:02:dc:70:a2:a3:37:06:9e:44:74:f1:79:03:
                    b4:6a:5e:49:1e:29:9f:a6:65:72:fa:18:55:4b:da:
                    b6:4b:84:20:9d:2a:08:e6:95:11:3b:34:0e:2c:ee:
                    13:a6:7b:bb:3f:03:0d:0d:04:52:42:af:94:8a:32:
                    8d:10:6b:4f:d6:85:b9:5a:b7:98:21:d0:91:80:de:
                    fc:df:97:9a:be:84:fd:1e:fc:32:59:a0:46:26:31:
                    58:4f:57:28:29:56:95:80:34:71:29:e4:50:ef:c2:
                    0d:59:98:51:62:59:62:0f:d0:76:89:2f:ea:f7:75:
                    c2:36:7f:36:77:49:42:6c:bf:15:9d:de:85:e5:8f:
                    51:e5:b5:39:64:56:03:29:16:47:ba:7b:39:d5:c8:
                    d2:5d:3f:49:fd:43:df:19:0f:6c:3b:9d:0c:da:26:
                    58:af:1d:9c:83:84:71:52:ea:63:8c:a8:9e:17:fd:
                    70:9d:7f:53:b9:b3:d6:ec:e0:ad:5a:fa:4f:55:38:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:FC:57:23:66:FD:B0:18:51:4D:63:35:6A:56:33:A0:C3:CF:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21068d7c-4bc7-3854-b1c5-4455cbce590b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:a9:e1:22:0c:79:d6:28:14:30:55:41:d7:29:67:49:7d:
         32:9c:86:f4:72:0a:66:6b:9a:a1:d4:e7:6f:ee:f3:47:c0:cb:
         5a:3e:97:e8:e2:67:e7:b8:d7:ff:81:77:68:b6:57:cc:ba:58:
         12:ff:f1:e8:41:dd:c6:42:f1:57:97:7e:2f:34:8c:b9:ef:47:
         a5:59:38:41:60:41:a8:aa:69:a7:76:b7:d6:12:74:05:54:9c:
         74:ff:84:67:05:4d:6d:99:36:93:1e:a1:ec:c3:99:6c:3d:38:
         da:5e:9d:eb:ce:4c:d3:ba:fa:f5:39:ce:1f:30:69:5b:77:59:
         44:9b:b0:d5:73:44:06:1c:94:92:70:70:da:82:e0:f8:78:c7:
         83:bb:d4:cc:18:ca:a9:ba:91:c3:af:f6:85:65:1e:b4:b6:45:
         85:1c:35:2d:52:cb:c3:20:74:ed:08:2f:0c:66:5f:01:50:12:
         f0:fb:09:53:6e:e3:58:87:c9:cb:02:f0:fa:85:fd:44:f4:12:
         76:4a:ec:76:e1:0d:8c:69:5f:c5:75:58:2a:6a:2c:82:32:30:
         40:43:4e:28:f4:71:28:82:95:a3:a6:c8:7c:4d:00:94:05:dc:
         b4:f7:9a:60:47:d8:fd:5d:62:ca:bb:4c:b0:55:f5:54:76:b7:
         bf:00:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:09:00 2026 by rpki-client