Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/84461a22-ce4a-3071-a847-2931402f768f.roa
File:                     84461a22-ce4a-3071-a847-2931402f768f.roa (raw, json)
Hash identifier:          gCtJ5ThIdiFQFzFVjp9SPbxnDDCo32IDKjBttMzWWro=
Subject key identifier:   0F:6F:CD:85:A0:11:4B:A8:39:A4:3F:81:34:E0:89:71:A7:14:01:A2
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EE2273CE46913D331C3A982F8
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/84461a22-ce4a-3071-a847-2931402f768f.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        148.51.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:3c:e4:69:13:d3:31:c3:a9:82:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=fa276bb3-c1b5-4765-9239-b6dd8aa400e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:b3:63:99:0f:0d:3d:82:fb:22:29:40:d6:
                    83:bc:9f:d2:9d:b5:e5:e2:89:db:86:70:bb:ed:04:
                    89:6c:b5:c6:bb:ef:e1:2a:bd:ab:25:01:6d:9f:16:
                    2f:5c:7b:ca:73:c8:ce:1b:d3:2c:ea:fd:a1:c6:5d:
                    57:ae:54:9d:8a:02:08:ec:ec:23:4a:d0:ea:a2:7d:
                    6c:cc:04:2a:9b:16:cf:de:3c:de:7d:17:76:6e:87:
                    38:df:61:90:04:ce:4f:b0:82:07:f2:af:02:b6:0f:
                    e0:c4:76:89:7e:17:6c:a8:e4:ff:0a:ef:17:a7:d1:
                    cb:9b:d7:b6:5e:58:ea:ad:b2:48:e2:5c:c2:7f:c4:
                    d9:64:c6:8a:ae:26:2c:a0:e0:30:8f:2d:25:a1:3d:
                    bb:3e:4c:63:48:b0:77:07:f5:be:ca:6e:7e:0c:15:
                    68:23:56:0c:b1:db:04:7d:fa:bd:17:4b:1a:81:e4:
                    cf:3e:64:3f:b5:c5:58:cf:9b:02:a7:10:cb:e5:60:
                    b8:13:4b:1c:2f:f1:4b:16:a0:ee:e6:6f:f0:1c:d4:
                    96:aa:9c:69:0f:46:4e:e3:1e:ba:64:60:70:7e:2d:
                    23:b0:df:ae:74:0e:f5:3c:ad:99:7f:58:87:0b:4e:
                    02:53:a5:ce:b2:54:dd:66:61:ff:fb:68:88:0e:7a:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6F:CD:85:A0:11:4B:A8:39:A4:3F:81:34:E0:89:71:A7:14:01:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/84461a22-ce4a-3071-a847-2931402f768f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c3:f3:9d:25:29:dd:a2:08:79:27:76:e5:91:02:36:34:61:
         b9:b5:92:af:c6:3f:a1:46:78:56:29:38:32:62:ef:e2:a9:f7:
         e3:75:e8:64:ad:7c:80:90:83:20:7b:9b:b5:46:0f:7a:6e:96:
         67:cc:74:bd:7b:2c:08:8c:6e:d1:bd:21:84:10:c6:5f:75:51:
         da:4c:f3:ac:2f:91:6e:b8:02:59:1e:d5:12:44:02:d8:c7:3e:
         bc:ef:43:c7:e2:93:1e:a7:46:95:db:51:fb:01:39:42:59:b9:
         56:29:0b:9f:60:dd:d6:19:ea:29:01:04:66:9e:67:eb:b9:72:
         dc:7d:54:14:0d:b7:2d:62:62:d5:17:93:c6:9c:e1:83:f9:83:
         38:86:5b:17:2c:73:69:45:e7:14:7c:92:43:9b:b1:8e:41:f0:
         4b:27:cd:48:a8:04:cc:84:96:7d:63:cd:ca:d5:e6:2f:78:29:
         18:4b:c0:c8:d9:5f:3d:78:8d:dd:6a:97:9d:d8:c9:48:af:c0:
         6f:9c:37:0a:18:ce:33:b9:17:5c:7f:ff:fe:9e:c0:08:9b:32:
         e9:7a:85:7c:46:4a:38:ab:12:a6:73:03:a1:77:b3:c0:5e:9d:
         a5:03:e4:76:b5:e7:68:84:e7:f3:47:46:a3:79:36:55:ce:ab:
         51:f0:14:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJzzkaRPTMcOpgvgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZmEyNzZiYjMtYzFiNS00NzY1LTkyMzktYjZkZDhhYTQwMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx+zY5kPDT2C+yIpQNaDvJ/SnbXl4onbhnC7
7QSJbLXGu+/hKr2rJQFtnxYvXHvKc8jOG9Ms6v2hxl1XrlSdigII7OwjStDqon1s
zAQqmxbP3jzefRd2boc432GQBM5PsIIH8q8Ctg/gxHaJfhdsqOT/Cu8Xp9HLm9e2
XljqrbJI4lzCf8TZZMaKriYsoOAwjy0loT27PkxjSLB3B/W+ym5+DBVoI1YMsdsE
ffq9F0sageTPPmQ/tcVYz5sCpxDL5WC4E0scL/FLFqDu5m/wHNSWqpxpD0ZO4x66
ZGBwfi0jsN+udA71PK2Zf1iHC04CU6XOslTdZmH/+2iIDnpuywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9vzYWgEUuoOaQ/gTTgiXGnFAGiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvODQ0NjFhMjItY2U0YS0z
MDcxLWE4NDctMjkzMTQwMmY3NjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlDPMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPD850lKd2iCHknduWRAjY0Ybm1kq/GP6FGeFYpODJi7+Kp9+N16GSt
fICQgyB7m7VGD3pulmfMdL17LAiMbtG9IYQQxl91UdpM86wvkW64Alke1RJEAtjH
PrzvQ8fikx6nRpXbUfsBOUJZuVYpC59g3dYZ6ikBBGaeZ+u5ctx9VBQNty1iYtUX
k8ac4YP5gziGWxcsc2lF5xR8kkObsY5B8EsnzUioBMyEln1jzcrV5i94KRhLwMjZ
Xz14jd1ql53YyUivwG+cNwoYzjO5F1x///6ewAibMul6hXxGSjirEqZzA6F3s8Be
naUD5Ha152iE5/NHRqN5NlXOq1HwFDY=
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:45:00 2026 by rpki-client