Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/846b67b0-81ee-37d9-b377-203fb4c00ae7.roa
File:                     846b67b0-81ee-37d9-b377-203fb4c00ae7.roa (raw, json)
Hash identifier:          tpRIfcgoTKJZdFb1egOPgo58YvrHBBBvHOOayAHiGl4=
Subject key identifier:   39:B8:D7:6A:E5:DE:04:29:BA:4B:1A:32:E6:54:74:3E:4E:10:24:F3
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E2D9F44991CA21A3B7AEDD480
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/846b67b0-81ee-37d9-b377-203fb4c00ae7.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     12025
IP address blocks:        148.51.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:44:99:1c:a2:1a:3b:7a:ed:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=de50229a-2e68-49ac-aefb-c8588adfcbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:b2:31:63:6d:da:87:4f:ff:19:f4:88:9d:
                    91:af:34:7b:70:71:8b:3e:c2:5c:a6:a2:4b:be:7e:
                    d9:70:dc:a5:e0:36:90:dc:fb:e2:df:37:e2:2b:ab:
                    c4:6c:40:5f:89:df:ac:db:46:3f:9b:47:bd:ca:a3:
                    73:2c:fd:9c:aa:2b:09:0b:94:a8:96:a3:a3:2b:6c:
                    bc:7e:5a:f9:f5:76:81:ac:01:de:b9:20:0e:3e:f8:
                    30:e3:4c:9f:78:d3:c5:d1:7b:44:7d:5a:c3:79:4a:
                    0d:30:64:aa:ae:cb:35:df:dd:63:d8:a4:57:bc:70:
                    f6:2f:87:37:91:ce:aa:61:40:f8:47:ff:36:61:27:
                    a5:eb:12:9d:eb:a3:1b:c1:21:2c:e1:7b:10:b1:aa:
                    99:57:f7:a1:68:22:66:17:32:6c:55:d8:e7:38:4b:
                    45:0e:da:ff:a0:5e:93:c5:c1:45:99:23:c6:fd:e3:
                    ae:62:c4:91:03:e3:22:4c:d4:fe:ef:ae:d7:3d:9e:
                    89:f3:55:e1:40:bd:4f:5e:7b:4c:3c:27:4a:b5:7f:
                    85:64:18:d8:44:6a:c8:7a:0b:0f:c4:b0:cc:70:5d:
                    12:68:35:0e:a2:46:89:8a:af:0c:49:c5:d5:d8:84:
                    92:c7:8e:f6:a5:b0:0e:19:8e:2e:63:0a:18:b9:e8:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:D7:6A:E5:DE:04:29:BA:4B:1A:32:E6:54:74:3E:4E:10:24:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/846b67b0-81ee-37d9-b377-203fb4c00ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c9:20:c2:70:f3:24:fb:09:d2:7b:1f:99:0b:0c:8e:80:34:
         6d:f5:e5:6b:9e:0c:48:b0:87:5c:71:64:b5:ea:a1:d2:09:5d:
         5f:0c:ff:5b:77:8a:d9:56:07:d7:26:c0:8b:52:62:b9:d1:0f:
         d6:bd:46:59:db:c5:95:e5:6d:c2:9d:ca:ee:c6:1f:97:e2:c8:
         5e:43:86:82:5e:ed:59:0b:ae:0f:0e:18:77:5b:55:a1:28:54:
         ea:b0:3c:e0:da:af:c9:7a:77:13:4e:b7:91:25:80:ae:cd:82:
         3c:a5:7d:9f:29:db:4e:42:59:38:ed:a5:a7:73:f3:a2:66:82:
         56:fc:d9:3a:2a:93:23:c3:49:61:88:49:82:34:95:ea:a6:3a:
         20:7b:c6:bf:93:ae:b5:45:c8:4f:1b:bb:6b:86:92:85:9f:6f:
         2f:5c:c2:e6:7c:52:d1:0f:4e:45:f5:60:e0:58:9d:3e:8e:00:
         99:0e:46:62:8b:90:e1:ee:2c:e5:a8:0d:fb:18:23:04:5c:c3:
         12:9e:ff:30:41:23:55:25:7a:3e:ab:97:fc:0a:06:81:1d:08:
         b4:06:13:75:2e:b0:8d:06:c8:bd:93:9b:ea:f2:cf:20:3c:96:
         56:2e:95:2d:7b:ba:b3:d4:d4:71:12:8d:b5:92:01:2b:f2:7d:
         62:c3:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:02 2026 by rpki-client