Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b918c525-afac-38be-93e2-92ad979c9c3a.roa
File:                     b918c525-afac-38be-93e2-92ad979c9c3a.roa (raw, json)
Hash identifier:          1y2BfggKwQ3nAxBKf8ADBT1bY6O1aRKDvE83XGGM5Hw=
Subject key identifier:   D5:7A:5B:2C:56:AF:99:B3:59:CD:B3:2E:32:22:12:4F:E1:41:2E:6E
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E3FC46C2B3D1B255BF4CF5480
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b918c525-afac-38be-93e2-92ad979c9c3a.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     12025
IP address blocks:        174.128.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:6c:2b:3d:1b:25:5b:f4:cf:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=e0ba170b-f55a-41f0-afda-3e93539733f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:4b:e5:1f:82:26:ab:c9:3f:3d:c4:c8:2a:
                    96:3e:b7:8b:2b:cb:31:a8:ac:dd:eb:3f:75:19:0a:
                    26:4b:bb:ce:e4:2d:88:4a:97:5a:11:87:88:ab:0a:
                    d1:3c:a6:77:e1:94:cd:7b:64:88:53:af:cd:a9:f4:
                    a0:00:97:a9:0f:fa:6c:8a:d1:48:d1:db:e6:93:8a:
                    c2:72:e6:08:e8:a0:d9:fb:bc:4c:a0:f8:5c:0b:47:
                    ef:07:5b:5b:3c:1f:bd:31:55:b9:69:41:6c:ec:50:
                    f0:6a:bc:76:55:55:87:d6:8f:a7:55:18:0d:eb:58:
                    89:de:11:43:00:0f:7e:e0:0e:64:47:2d:aa:31:a4:
                    0c:a7:07:55:92:2b:a3:03:54:ab:8b:ad:e9:63:a7:
                    68:1c:c0:a1:dd:ff:54:bd:04:6c:92:fd:61:f7:d5:
                    54:74:4a:00:b7:83:af:b3:a2:a2:99:68:72:40:09:
                    c0:47:ac:87:21:d4:a2:77:56:b2:30:df:df:c8:8a:
                    da:4d:1d:d6:60:e1:f6:f3:4f:50:8b:85:8f:10:6f:
                    24:79:e7:e2:c0:eb:90:5e:0c:75:f4:1c:24:43:74:
                    b0:47:0c:4e:74:41:fc:29:fd:6f:55:ce:db:d7:ef:
                    65:f6:e6:01:3e:b4:50:5c:1f:8e:d8:f3:24:ae:3a:
                    8a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:5B:2C:56:AF:99:B3:59:CD:B3:2E:32:22:12:4F:E1:41:2E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b918c525-afac-38be-93e2-92ad979c9c3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.128.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7b:67:20:51:6d:1b:60:8f:64:75:69:d1:40:78:3f:f0:92:
         c0:89:f8:a8:6c:92:c9:0b:f7:f6:2c:2e:fd:49:f0:46:6d:50:
         f3:c9:b9:d3:75:fe:0e:5c:80:60:aa:11:15:48:97:bf:82:61:
         90:03:0f:e9:3d:45:37:4b:6b:73:07:45:8b:42:8a:72:23:59:
         4e:53:f9:8c:a5:2d:3c:60:fc:0b:ed:6b:b0:e4:ec:bf:11:21:
         cd:b6:a5:8f:cc:7c:35:c0:a8:01:3b:71:0d:45:ea:87:6d:fb:
         24:08:c5:f5:d2:ec:48:9c:11:4a:1e:68:33:c0:63:8d:46:56:
         82:dd:b0:f3:5f:c9:b9:dc:84:6b:c8:0d:0c:c4:21:73:f8:54:
         89:43:1f:d0:5b:0f:d2:ca:98:fc:6e:a1:a2:83:c5:e8:08:7f:
         1f:8c:89:36:68:7f:96:84:53:bb:39:d7:28:61:d8:ee:fd:0d:
         cd:11:58:08:90:91:20:0c:1b:6d:f3:35:99:3f:b3:e2:d6:fb:
         a8:8b:ce:f9:56:58:fb:3a:8b:a6:8e:43:a7:9f:2d:93:1e:35:
         ce:6a:48:b9:dc:64:26:ac:64:43:19:49:2e:95:ec:4b:5b:39:
         84:c8:ae:a8:28:6e:95:25:0e:5b:2b:e9:a8:0d:b0:68:42:5e:
         10:93:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:16 2026 by rpki-client