Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa
File:                     90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa (raw, json)
Hash identifier:          z5MtoDQ150i+tcWy6cdQZVIlcnAdYGERmmAcizTsgPU=
Subject key identifier:   5B:CD:00:17:A1:A6:A2:75:87:1F:06:FB:D7:8F:A2:86:36:C5:1A:B3
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D5E1A632E7F5F23FBFED6A0A0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16696
IP address blocks:        148.59.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:63:2e:7f:5f:23:fb:fe:d6:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=02290250-087c-42ba-b8c1-a10e826dadae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:60:f2:90:b9:a5:d5:d5:a4:21:9a:16:2c:
                    d4:5b:2f:ed:fb:10:e3:85:69:58:98:02:b6:92:d7:
                    3e:87:57:93:8b:26:09:05:82:b0:81:43:be:c0:d1:
                    40:30:4d:be:2e:48:34:25:3b:37:67:08:27:9a:e1:
                    3a:ad:bc:26:ed:a5:50:2c:35:72:cb:cd:69:9a:58:
                    1f:02:8e:82:29:c9:69:49:95:fd:8a:53:83:ba:56:
                    43:b8:71:c7:a0:61:8f:cf:dc:14:3a:62:20:d8:a4:
                    39:06:00:a6:62:a8:4d:8f:5c:8d:07:be:94:8f:5d:
                    86:e2:75:51:26:b2:7b:68:da:96:72:e2:ed:8d:4c:
                    aa:a8:98:d3:a3:23:7b:1b:9d:c8:0d:5f:0d:9c:31:
                    76:10:f5:fa:b5:92:21:3b:5f:9a:c0:04:ac:9d:fe:
                    d2:b6:24:9e:f1:98:e2:a7:47:8c:09:57:07:39:5b:
                    55:3e:dd:d5:88:4a:78:9f:7a:8f:31:fb:f4:5c:d0:
                    f7:00:5e:f3:50:01:48:e2:c9:47:91:bd:49:6d:dc:
                    0f:67:4f:cd:c3:ac:83:d8:e2:e0:73:f3:9a:db:11:
                    1e:52:57:83:fa:69:eb:f9:5a:33:6a:0a:08:14:86:
                    39:19:04:55:7e:82:7e:6d:8a:77:6f:44:24:18:2f:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:00:17:A1:A6:A2:75:87:1F:06:FB:D7:8F:A2:86:36:C5:1A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/90c60f0f-d8db-3da6-acb4-14bcf68f1184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:c7:13:ae:a1:42:dc:71:5a:d2:71:ac:8c:70:08:6b:99:
         d2:54:19:de:de:88:c7:2d:1d:32:53:27:a2:bb:cd:1e:d4:4d:
         e8:4f:ce:95:41:ad:dd:cc:74:a5:fb:51:11:0f:04:c2:ef:f6:
         14:8f:0f:1f:b0:98:6e:20:31:d4:6e:b1:fd:2e:48:e3:1e:29:
         db:4f:27:98:21:17:e5:ce:5f:36:69:11:e1:dd:6c:66:af:7b:
         88:f5:ba:ae:67:03:c7:ac:4f:0b:2c:1b:0a:56:5c:52:1d:0c:
         0e:48:81:14:d0:b8:d3:78:a7:f2:1a:52:52:1f:a1:34:51:b9:
         07:54:e9:16:92:18:a0:ec:af:84:52:0f:58:50:ec:be:70:8b:
         69:0d:8d:5a:1b:d1:1f:f2:cc:ef:f8:f8:c6:e0:33:97:b0:a4:
         59:34:3d:4b:3a:5f:65:72:ac:74:58:a5:fc:5f:47:e4:9a:eb:
         2e:bd:07:78:d5:4f:99:0e:e5:4c:4f:21:d9:c0:24:91:a3:80:
         ae:ec:11:b5:71:32:2a:23:e5:05:1c:03:a8:99:a3:3e:73:97:
         4e:4a:8d:37:4e:73:08:7c:59:83:de:9f:d0:88:60:8d:fa:1c:
         51:e1:46:cb:d5:4f:f5:67:f5:a7:df:8e:1c:e4:29:30:e0:9b:
         4a:cf:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:36:06 2026 by rpki-client