Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/f7aeb03d-c46a-3002-a857-0cfb32b3dfd7.roa
File:                     f7aeb03d-c46a-3002-a857-0cfb32b3dfd7.roa (raw, json)
Hash identifier:          duwA+v7sThT7ssMP6ji5b63gb70phbETrPv8AhAewto=
Subject key identifier:   F3:BA:36:D4:93:E7:70:04:95:2A:28:58:4D:AD:26:46:32:47:0C:E6
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E3FC487CFD8E572567ABAA700
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/f7aeb03d-c46a-3002-a857-0cfb32b3dfd7.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     12025
IP address blocks:        148.51.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:87:cf:d8:e5:72:56:7a:ba:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=e02c284f-989d-4450-9f73-f9779fd7f903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:25:5e:90:27:b3:3c:f1:6d:55:c0:45:f6:
                    22:7e:7f:38:b4:c2:14:ba:81:b9:69:14:48:31:fe:
                    62:ff:9d:d8:b9:e4:a5:12:b5:e6:bf:9b:2f:ac:9a:
                    0b:29:ff:26:67:5d:dc:80:8b:cd:c4:89:64:e9:dc:
                    f9:11:95:de:d7:1f:40:11:41:0b:f6:25:e9:1e:13:
                    e2:1f:6b:63:95:12:7c:87:2a:b1:df:73:e7:19:9b:
                    39:ac:95:7f:f3:33:d0:ab:19:0c:a3:b9:91:94:02:
                    ea:3f:44:38:02:a2:c1:0a:db:f8:d2:5c:7a:74:62:
                    81:c8:ad:e5:4d:cb:9a:91:b8:82:91:df:b8:83:7b:
                    f8:36:8e:ff:1c:e6:ce:d1:a1:ed:4a:bc:1c:2b:7f:
                    32:d1:69:05:7f:d4:25:a5:52:dd:e4:8d:46:8f:ec:
                    f0:bf:71:37:f3:e9:c9:ea:9c:44:34:be:26:fd:81:
                    aa:1a:93:b0:b3:b8:e2:93:75:9c:35:64:21:1b:91:
                    7b:a7:a8:1a:51:a4:91:d2:7e:8c:ac:c5:59:f4:14:
                    5c:ad:00:98:00:d8:1f:94:2d:a1:87:b4:b7:04:4a:
                    b2:46:21:34:76:29:dc:32:2b:e8:9e:b3:fd:6b:1e:
                    83:48:be:62:cb:53:3b:f3:ad:db:76:24:f5:67:d5:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BA:36:D4:93:E7:70:04:95:2A:28:58:4D:AD:26:46:32:47:0C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/f7aeb03d-c46a-3002-a857-0cfb32b3dfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:54:c0:24:51:df:f5:0f:94:28:f9:b4:dd:28:31:ff:73:ad:
         e9:7f:4b:c0:47:13:f9:99:1d:cd:9f:e8:45:94:42:a5:d3:cd:
         b9:09:82:b0:92:ab:85:71:5c:93:3a:10:32:b5:66:f8:ea:31:
         20:6f:6c:b5:73:00:32:7c:4a:fc:15:04:37:e8:58:72:57:54:
         62:10:89:36:f4:aa:5a:10:e9:b3:58:ce:e2:a1:80:78:b3:69:
         b1:93:64:ad:8f:5a:a5:0f:c0:17:1b:54:38:69:1a:3d:39:c6:
         8e:ae:91:a1:2d:75:3b:5f:0d:ae:92:3d:50:bc:9d:0c:04:b6:
         b8:02:e2:b5:af:31:9c:19:08:0c:00:70:54:eb:9b:2e:be:ae:
         f6:bd:d5:f6:c0:bd:ee:6b:0f:1b:97:d1:17:3e:93:ec:c8:96:
         5c:3c:21:6b:60:4d:ad:76:ae:af:8e:1b:b5:2f:03:b7:8d:dd:
         0b:c9:34:e6:c7:1b:ea:e7:68:3b:e4:ea:19:3a:29:db:65:f3:
         22:01:42:f7:c6:dc:d0:44:b5:7f:df:22:e8:19:fe:e0:08:f0:
         12:82:26:0f:04:76:32:67:b4:1e:e6:32:2a:49:71:94:56:79:
         28:32:43:18:71:a5:0c:a5:6c:b0:42:01:50:b0:18:80:c2:c4:
         ce:35:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:44 2026 by rpki-client