Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/cf64f8f6-f081-3acb-ae53-0d3f78ac9474.roa
File:                     cf64f8f6-f081-3acb-ae53-0d3f78ac9474.roa (raw, json)
Hash identifier:          Cm7A6OnWvFzXTk/nMKqpBe1bbIqz8KW7eG8Punk/c8E=
Subject key identifier:   15:30:B7:55:6C:C5:17:7D:EB:F6:7E:DB:75:75:C0:A3:30:00:51:2B
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EE2274EBF7596224C24FECD00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/cf64f8f6-f081-3acb-ae53-0d3f78ac9474.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        148.51.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4e:bf:75:96:22:4c:24:fe:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=a0dfc926-b53b-47aa-ba4b-d7af3551ae40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:a5:37:e6:f6:69:d0:83:b6:c1:a0:7f:b4:
                    9d:6d:5d:ee:b9:9b:bf:85:46:2c:ff:53:82:26:c8:
                    80:6e:48:56:7f:c9:61:c9:fa:6a:50:ce:dd:0d:25:
                    b2:c5:ec:0d:98:b9:9b:77:bb:b3:04:a1:3f:a8:b4:
                    c5:d7:51:0f:ed:ed:1e:24:da:ae:f1:40:67:79:29:
                    08:19:2b:44:87:cb:e3:af:6d:a1:9c:bb:58:6e:4a:
                    4c:dd:b7:91:8b:cd:97:64:27:73:38:a4:74:2e:2c:
                    07:89:3f:05:32:db:9e:12:60:d0:60:53:e3:98:88:
                    e5:ea:e7:69:c6:69:38:e9:fd:e3:70:e1:01:ab:36:
                    09:ad:c1:2a:ec:42:75:36:1f:cb:99:12:7b:01:aa:
                    c9:e3:d7:36:04:08:42:ff:b9:37:49:b8:31:d7:e5:
                    50:8b:d1:11:3f:fe:8e:28:61:1b:7a:a1:62:99:69:
                    58:16:77:3d:5f:81:12:6f:13:27:c8:f4:b2:c3:a4:
                    e9:06:29:77:96:ac:b1:6d:ae:e4:fe:a6:d2:81:0d:
                    54:0a:d5:d0:69:a9:0d:d7:a1:3c:7b:9e:dc:db:ca:
                    3c:a5:92:74:c5:96:d4:52:32:53:85:54:8e:b6:25:
                    b8:fa:12:51:4b:cb:af:e2:70:66:2e:96:07:4c:90:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:30:B7:55:6C:C5:17:7D:EB:F6:7E:DB:75:75:C0:A3:30:00:51:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/cf64f8f6-f081-3acb-ae53-0d3f78ac9474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c9:95:5d:d3:67:f5:ab:51:a9:4d:fb:46:78:da:22:45:ef:
         ce:32:87:40:35:58:0a:17:d7:52:e3:65:2c:c5:73:cc:2f:82:
         11:5e:6a:48:e6:f5:72:21:ac:df:7f:1e:8f:4a:ad:30:fe:a1:
         ea:12:3b:fd:91:11:b4:af:9f:41:f9:45:a8:37:dd:ae:44:bb:
         3b:dc:5b:c2:91:8e:70:d6:86:ad:79:bb:4c:b5:e6:af:54:60:
         bc:93:cf:ba:93:f8:a6:9a:c7:e1:82:27:bb:43:56:6b:2d:9d:
         ff:d1:77:11:32:b8:80:8e:9c:e8:f7:c6:9e:2b:f3:1b:80:da:
         b7:76:95:af:56:f3:e5:0f:70:36:a7:d0:c2:58:a9:1f:18:db:
         20:e3:cf:20:45:2f:63:09:33:04:fc:6a:b9:a3:dc:18:72:6f:
         af:92:25:31:a4:ac:76:04:cc:d9:3b:ba:19:dc:0e:8a:c7:08:
         a3:0a:d7:1e:f5:25:44:69:98:cb:d9:a5:df:92:25:ce:29:3c:
         6b:60:b7:ed:17:f1:9d:62:84:8c:e7:a8:27:03:3f:4c:fb:72:
         f5:f9:7e:79:5a:a4:ff:bc:ad:43:e7:94:e5:60:be:93:20:78:
         5d:15:af:f0:0f:6a:d0:9c:fc:f3:bb:32:b3:d1:cc:50:9a:03:
         1c:e8:f0:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ06/dZYiTCT+zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
YTBkZmM5MjYtYjUzYi00N2FhLWJhNGItZDdhZjM1NTFhZTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljGlN+b2adCDtsGgf7SdbV3uuZu/hUYs/1OC
JsiAbkhWf8lhyfpqUM7dDSWyxewNmLmbd7uzBKE/qLTF11EP7e0eJNqu8UBneSkI
GStEh8vjr22hnLtYbkpM3beRi82XZCdzOKR0LiwHiT8FMtueEmDQYFPjmIjl6udp
xmk46f3jcOEBqzYJrcEq7EJ1Nh/LmRJ7AarJ49c2BAhC/7k3Sbgx1+VQi9ERP/6O
KGEbeqFimWlYFnc9X4ESbxMnyPSyw6TpBil3lqyxba7k/qbSgQ1UCtXQaakN16E8
e57c28o8pZJ0xZbUUjJThVSOtiW4+hJRS8uv4nBmLpYHTJCyzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBUwt1VsxRd96/Z+23V1wKMwAFErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvY2Y2NGY4ZjYtZjA4MS0z
YWNiLWFlNTMtMGQzZjc4YWM5NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrJlV3TZ/WrUalN+0Z42iJF784yh0A1WAoX11LjZSzFc8wvghFeakjm
9XIhrN9/Ho9KrTD+oeoSO/2REbSvn0H5Rag33a5EuzvcW8KRjnDWhq15u0y15q9U
YLyTz7qT+Kaax+GCJ7tDVmstnf/RdxEyuICOnOj3xp4r8xuA2rd2la9W8+UPcDan
0MJYqR8Y2yDjzyBFL2MJMwT8armj3Bhyb6+SJTGkrHYEzNk7uhncDorHCKMK1x71
JURpmMvZpd+SJc4pPGtgt+0X8Z1ihIznqCcDP0z7cvX5fnlapP+8rUPnlOVgvpMg
eF0Vr/APatCc/PO7MrPRzFCaAxzo8Ic=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:37:10 2026 by rpki-client