Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
File:                     a684e03c-762f-380d-9364-a51ce895efa3.roa (raw, json)
Hash identifier:          vOvldbj/LEzMaSTiZtemP4zCD24NxxkyBr1a6uaY00Q=
Subject key identifier:   DD:D3:74:ED:1F:6E:CA:DE:E8:B1:CE:D6:8C:75:58:E5:B7:AC:CF:FF
Certificate issuer:       /CN=7a0faf4a-643d-4023-8090-81f838253675
Certificate serial:       010D0C9F4328584F576820D27F20D6438F836A80
Authority key identifier: EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     26214
IP address blocks:        148.59.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:20:d2:7f:20:d6:43:8f:83:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0faf4a-643d-4023-8090-81f838253675
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=ab962924-94b6-4940-ab22-255c2e4e462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:92:06:9f:77:ec:64:f1:aa:93:34:72:a6:
                    ca:75:f9:9d:18:88:35:9b:88:ca:ab:0a:2f:8e:29:
                    aa:95:ff:5f:04:60:0a:ad:b2:0a:96:8e:d6:ef:b3:
                    c2:f2:20:2c:39:3c:d5:7b:7e:ba:b9:cc:cb:6f:5a:
                    8a:fc:38:35:8d:e9:38:09:67:86:b6:9d:9d:40:15:
                    d7:07:a7:e4:aa:49:15:aa:53:11:fe:f8:e4:89:ac:
                    43:27:67:59:c3:f7:a4:bd:85:6d:5e:31:4c:fe:9a:
                    5d:b1:f0:49:6c:9a:ac:ba:02:19:4e:4e:25:e6:d9:
                    fc:e5:52:b8:78:2a:e8:6b:d4:cd:9e:28:8f:f3:86:
                    97:bb:d2:e3:95:18:a8:0f:a9:07:54:8a:52:f6:49:
                    d9:67:1c:7e:54:c1:e7:a3:3a:d7:58:c5:3e:fd:51:
                    d4:0f:eb:54:4e:3c:b6:31:82:42:48:54:10:dc:37:
                    e0:22:a6:f1:6d:de:ad:97:3f:25:8c:13:30:6d:aa:
                    e5:a0:bf:e9:60:e2:e8:9a:88:55:70:35:7e:59:4e:
                    52:0a:52:44:8f:bc:17:e8:7f:62:0d:c0:32:5f:45:
                    f7:4a:b9:db:e9:ab:8e:f6:ef:90:23:b2:79:ed:d6:
                    52:28:32:70:2c:a0:64:cb:e0:3f:7a:6a:82:cd:43:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D3:74:ED:1F:6E:CA:DE:E8:B1:CE:D6:8C:75:58:E5:B7:AC:CF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl

            X509v3 Authority Key Identifier:
                keyid:EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:08:9f:ff:6d:14:6c:e9:36:7b:71:b2:45:76:18:ca:4c:00:
         63:ae:80:3f:5c:30:dc:68:e7:c6:88:5c:bb:93:42:08:b9:d5:
         b8:83:16:34:44:34:13:5d:c4:4b:7b:a7:df:2f:9b:df:db:c3:
         bf:fc:aa:e6:47:8f:5d:27:c3:cb:8b:be:09:6d:52:fc:90:01:
         88:04:d4:01:56:b8:9a:8c:31:32:96:4b:c3:f5:eb:e5:0b:f8:
         d8:d8:12:96:ee:c1:93:15:72:6c:64:5d:bd:01:13:65:1a:b4:
         ea:ea:40:16:65:05:9e:a9:bc:58:4a:88:8e:87:52:d4:ab:09:
         79:53:2c:8f:37:04:a0:ff:28:33:34:48:05:9f:a1:de:34:88:
         9a:d5:1a:36:db:11:4c:93:64:b3:bb:a9:ff:24:2c:76:91:5e:
         bb:58:57:3d:99:3d:c3:30:2c:a6:04:df:15:5c:c1:89:ab:0e:
         d4:c1:50:09:a3:73:85:81:54:41:da:95:7a:b5:59:7a:97:50:
         3e:41:8a:1e:c1:30:06:3f:4c:a2:20:37:f2:fa:f8:42:7e:0b:
         89:5c:c1:a8:fd:61:34:4f:d0:13:02:92:3c:04:3f:7a:ae:db:
         11:79:1d:e8:4e:14:c9:88:6f:e1:d9:4d:c5:30:d7:a7:1d:73:
         a7:83:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:56:53 2026 by rpki-client