Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8425c416-c582-30df-8eca-87ca198a0f53.roa
File:                     8425c416-c582-30df-8eca-87ca198a0f53.roa (raw, json)
Hash identifier:          ooR4M+S8aGo3aDgQh7zCjXOZZ3iy4wO1Jirn5DsdwUY=
Subject key identifier:   25:9D:A9:9F:C9:13:A5:10:76:F8:EF:B9:26:66:2F:96:D0:64:07:A3
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EE2274C0D50317C5AB8B55948
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8425c416-c582-30df-8eca-87ca198a0f53.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        148.51.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4c:0d:50:31:7c:5a:b8:b5:59:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=356c04f5-4baa-416a-a545-aa396aabfef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bc:f5:ea:7b:5e:7a:e4:e2:42:48:e9:97:83:
                    51:a8:d6:75:51:b7:45:50:0d:82:92:ff:ee:ca:7b:
                    1c:a7:9d:52:35:6f:e9:47:3f:ce:99:03:4a:e7:39:
                    7a:4c:8e:04:34:32:a9:f1:70:b1:bb:8a:ee:f0:f9:
                    91:e3:03:f7:ad:23:4f:7e:82:9b:17:48:37:db:30:
                    8d:e3:7a:f5:dd:82:c6:c0:0b:54:8f:d7:59:9e:26:
                    c8:59:6d:69:98:90:48:08:cd:e4:74:9c:d8:8a:d4:
                    26:af:7a:c7:e0:c9:31:63:0c:47:bc:2c:d8:f1:83:
                    14:7a:bc:6e:b4:ef:ad:91:1b:af:0d:11:91:0f:ef:
                    30:32:f0:26:4f:2e:47:b3:b7:2f:ea:42:2d:58:8a:
                    31:24:f0:2c:aa:6b:88:f4:ad:bf:f0:6f:42:c3:ac:
                    ff:b2:ab:3d:d3:c0:24:16:60:a8:20:c6:ad:62:5f:
                    fa:60:3f:a3:c0:41:36:68:40:f7:65:6e:84:82:16:
                    1c:42:f6:c2:ee:be:c4:07:92:b1:32:93:93:60:ae:
                    4e:23:d6:11:61:af:20:eb:38:a4:f4:ba:bd:26:63:
                    1e:4b:0d:9a:85:cd:85:56:a2:9d:d0:86:81:d5:7a:
                    59:36:da:74:54:62:21:95:4f:58:fb:b0:1d:0c:72:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9D:A9:9F:C9:13:A5:10:76:F8:EF:B9:26:66:2F:96:D0:64:07:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8425c416-c582-30df-8eca-87ca198a0f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:a4:a7:4f:b8:16:10:37:46:a9:62:c9:1b:02:67:91:9c:
         11:6c:a1:d4:a4:73:85:8c:2a:35:ed:da:c5:c2:a1:6c:82:09:
         34:99:08:69:53:ff:65:72:0a:76:d8:7e:6c:42:24:83:a1:65:
         a8:17:5d:b1:eb:3d:19:f4:28:b9:3c:f1:4d:8a:af:ee:7f:7d:
         c8:6c:bd:ee:e8:e8:a2:d4:48:3c:0e:f9:3b:de:02:43:9b:c4:
         a2:c0:50:90:ad:e0:a0:e9:37:8d:e6:47:de:65:33:95:bc:4b:
         8e:a4:24:fc:58:c0:5f:73:8c:ab:b9:2c:e4:8e:8f:1f:11:a6:
         48:a8:18:50:ac:33:d3:63:2b:16:82:39:f1:82:fc:f5:38:b1:
         ef:39:a6:27:60:ea:08:d5:0f:b5:2d:90:f1:7a:1f:3e:ae:08:
         a3:19:ba:08:15:cb:3e:b8:0f:e9:82:47:ad:9e:06:d2:0d:e9:
         e4:0b:8d:56:47:8f:31:58:b0:fd:05:3b:32:ca:d3:ba:55:4f:
         b9:46:1f:43:e8:69:bc:93:97:6d:80:f9:b4:e6:ab:0a:f2:1f:
         07:13:f2:2b:f2:b9:67:4f:1d:75:4b:36:26:b9:a5:3f:0b:af:
         96:4a:fd:6d:34:cf:5f:f7:93:35:71:01:aa:df:98:19:eb:d7:
         41:05:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:15:22 2026 by rpki-client