Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa
File:                     81bb65a3-069f-3f93-a8c2-2b32b151491a.roa (raw, json)
Hash identifier:          5Ol8B+DTBXK3MtLeHXSlkwP9Oa+vYJLm779kjddTwRw=
Subject key identifier:   23:01:20:82:3B:56:04:37:FF:2D:71:00:52:79:B8:E3:E8:E7:0A:AA
Certificate issuer:       /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
Certificate serial:       010D0C9F4328584F3482750972CD7313A19A5D80
Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        148.59.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:75:09:72:cd:73:13:a1:9a:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=33ba7467-5f05-4bcb-bb57-a5798a4f8ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:24:00:d9:97:75:95:a5:89:f4:93:7e:a4:9e:
                    6c:0e:c3:5c:d7:39:2d:3d:7a:eb:b4:06:78:df:b6:
                    04:02:9f:78:9a:3b:7f:31:4d:f7:c7:55:19:35:1a:
                    79:e9:69:20:ad:b6:dc:b0:c5:4c:d7:eb:37:6a:ab:
                    cd:be:e8:f6:98:a2:8b:9c:9f:ec:7d:cf:89:f7:ec:
                    df:59:78:d2:ec:d0:f2:18:06:37:1a:98:46:0a:b0:
                    ff:98:da:b6:4f:a1:c1:78:ff:53:02:67:4c:6f:9a:
                    9f:58:ca:fa:12:39:1c:54:bf:01:2d:fa:b2:7a:98:
                    c9:d9:4e:43:fb:27:d9:4d:18:65:aa:6b:21:d9:e8:
                    67:3d:31:62:bd:09:72:17:11:a7:86:37:9c:4a:02:
                    68:47:17:66:78:68:d0:82:db:b4:1d:94:93:53:b2:
                    c7:fa:09:85:c7:86:66:b6:96:d2:5f:ab:20:4f:b2:
                    db:4f:87:cf:3d:63:93:18:0f:e6:9d:aa:61:45:34:
                    e6:a5:14:37:8a:3b:8d:66:c1:87:7f:e9:20:bf:c0:
                    76:18:c7:fa:47:7c:2a:21:f8:e7:3b:58:0f:12:a5:
                    13:a8:60:1e:c8:3a:1e:8f:3b:28:77:bd:0d:2a:42:
                    31:47:29:a4:3e:fd:ab:a8:dc:ff:df:af:c0:70:b5:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:01:20:82:3B:56:04:37:FF:2D:71:00:52:79:B8:E3:E8:E7:0A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl

            X509v3 Authority Key Identifier:
                keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:0b:ee:29:07:5f:18:bf:fd:56:76:c9:39:68:0c:43:7a:
         d6:4f:4d:f7:68:5c:8c:33:57:af:7a:90:c9:af:18:7f:aa:6a:
         f7:56:91:f1:14:42:2d:1d:28:57:bb:ac:6c:76:ba:8e:4a:35:
         eb:73:d9:c1:25:18:0e:49:3f:b1:40:86:02:fc:ac:ea:3f:dd:
         94:9d:1f:c7:55:11:c4:18:75:14:e6:5d:f1:e6:72:bf:aa:d7:
         42:4b:8f:0a:96:69:d4:34:d7:70:c1:9e:f2:12:45:c4:c8:05:
         c0:c7:9a:87:1a:58:23:00:5e:f9:67:ca:1d:98:1f:de:01:11:
         88:a1:17:bb:d5:57:4c:7c:4e:63:be:ba:08:0d:82:80:49:c8:
         b0:d5:d2:02:ec:d6:af:ee:fd:cd:5a:49:2e:b8:9e:9a:76:89:
         a1:3a:54:fe:eb:b3:6b:f2:71:15:9a:6f:16:23:a6:30:3c:89:
         d5:c5:85:5c:ff:91:f4:50:c8:da:aa:73:c5:84:45:71:b7:d8:
         0a:28:e6:e1:c2:f5:2f:45:66:05:c8:e5:89:23:69:d6:4b:83:
         08:a8:e3:cf:f4:22:f5:42:73:6b:68:97:f3:5e:ff:5d:f5:87:
         0d:bc:1f:56:85:a9:2c:b2:25:c6:85:96:18:c7:fa:eb:6c:a6:
         fa:bf:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:52:22 2026 by rpki-client