Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b918c525-afac-38be-93e2-92ad979c9c3a.roa
File:                     b918c525-afac-38be-93e2-92ad979c9c3a.roa (raw, json)
Hash identifier:          3YhcOnehlGrJXrofOY2JhZJJWLoPMs9g9Fq7/pES8vc=
Subject key identifier:   A8:AE:C6:27:F1:BC:85:CC:C2:CC:56:FF:4D:C2:AF:62:A1:52:DA:B5
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EE22751CC94F4BDE5E4C8F4E0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b918c525-afac-38be-93e2-92ad979c9c3a.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        174.128.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:51:cc:94:f4:bd:e5:e4:c8:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=fb35afb0-85a5-4480-8767-6a8cbfd325ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:d1:f0:54:c5:f6:ff:4d:e1:cd:ca:f6:cb:
                    73:65:30:da:1e:71:60:70:ac:2b:c2:f1:07:9e:c5:
                    4a:17:11:85:d8:fd:8f:c3:dc:8a:f6:9f:ce:72:9a:
                    5e:f9:86:7b:8c:98:5c:e4:bf:60:4c:98:b4:ee:d4:
                    11:00:05:8e:4a:76:0c:0b:6e:a5:57:55:d3:61:42:
                    fb:48:05:d4:0c:fc:a3:02:f6:45:21:13:90:36:a9:
                    57:72:b6:89:f4:5f:3e:9d:84:74:c3:27:08:67:ad:
                    80:3c:c7:9d:1b:c7:90:5f:40:84:6b:bb:5d:21:1a:
                    67:4e:b6:72:5b:26:c2:7c:37:e8:23:09:c7:c8:c1:
                    e6:65:cf:fa:23:cc:91:fe:2a:1f:39:f3:e9:b5:54:
                    4c:82:08:5f:02:4d:41:f6:25:4c:2d:ee:a9:de:96:
                    aa:79:3b:43:da:74:1f:e6:63:f9:8e:e0:ad:a7:78:
                    bb:34:54:81:45:5a:27:7a:69:b5:08:8c:87:eb:2a:
                    ce:ce:47:72:06:53:9a:66:0a:af:85:49:7d:f8:4a:
                    65:e7:e6:ba:36:49:96:d6:4b:18:13:75:17:e4:7f:
                    2a:d6:dc:2f:94:41:53:d1:85:1c:e1:c2:1b:42:23:
                    a0:88:bb:40:8f:78:c7:77:df:c4:31:7e:b4:8b:87:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AE:C6:27:F1:BC:85:CC:C2:CC:56:FF:4D:C2:AF:62:A1:52:DA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b918c525-afac-38be-93e2-92ad979c9c3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.128.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c1:9a:65:d6:5d:92:ed:cd:b3:70:d2:e3:ea:5e:ad:6c:98:
         63:ed:bc:b9:91:d3:c5:63:0d:cc:0d:32:73:fc:90:27:96:a3:
         a4:6a:cb:06:ea:10:8e:34:77:d6:b2:e8:42:73:be:11:70:44:
         b2:79:78:5d:b6:24:d0:89:74:ad:5a:3d:da:0c:86:85:46:5b:
         96:3e:84:d4:df:95:4c:7a:8a:3d:c1:16:30:0a:e4:37:64:67:
         bf:c4:dd:26:81:f1:3e:db:77:32:2e:ff:b8:b6:a8:34:d1:f0:
         e9:d4:ee:34:f1:f8:8c:6f:4a:a7:f1:b5:a9:36:2f:72:33:0e:
         0f:25:89:05:e6:5a:36:30:ec:36:d3:8d:99:c8:39:02:c3:86:
         41:23:fb:88:8a:c1:d0:1a:36:3a:58:5b:5d:ea:33:5d:28:88:
         e2:61:d0:a1:d7:5a:57:ef:71:f2:b0:a0:a6:cd:d3:c1:c7:97:
         56:76:f9:2f:c3:e2:74:e0:65:c4:9a:5f:c8:2f:d3:c3:9f:6e:
         95:56:9c:5a:c6:c2:ff:ed:ae:86:ae:33:48:8e:b7:61:9b:7a:
         2f:3c:14:c8:68:18:f8:49:7e:71:af:79:35:1c:3d:28:93:61:
         15:99:64:29:99:bf:58:21:87:3f:48:ae:0a:8d:8d:0f:0b:4e:
         d0:c3:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:39:48 2026 by rpki-client