Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
File:                     0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa (raw, json)
Hash identifier:          m0bkkWWdKSoCrAsEe0JHLSbVzDhKNV7QbCO/g4wOlM0=
Subject key identifier:   0D:CB:49:B0:F0:10:3C:11:7A:C4:F7:CD:0F:65:6A:DE:90:9E:FC:57
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584D2A74EE4EF169AD21F3513380
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     19605
IP address blocks:        148.59.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:ee:4e:f1:69:ad:21:f3:51:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=23abb572-b84b-488f-9e32-19a7c31e3a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:59:72:5c:f2:84:45:e5:6d:18:67:42:e0:
                    8b:25:c9:81:d4:b8:17:5a:b4:2f:bc:d9:07:22:bb:
                    b3:c1:ab:9f:40:dd:f8:ec:e7:6f:da:65:66:c8:1f:
                    9e:ae:aa:1c:c3:0b:ce:97:85:35:10:2e:31:0e:c8:
                    ec:fd:f0:12:71:20:87:7e:0f:f0:1e:82:0d:db:a5:
                    b8:8d:aa:4d:d5:53:d4:f8:3b:9a:fd:d3:b4:94:e3:
                    10:e5:6a:ae:8c:a5:a4:83:5a:ee:d7:a0:b3:a3:73:
                    ec:47:d6:c4:6f:84:b9:15:73:26:d8:4f:19:a6:74:
                    d5:51:cb:1e:72:58:14:fd:00:9d:15:9f:14:0a:7c:
                    76:c8:85:38:67:4b:7f:ef:ba:f3:a6:0e:cf:8a:47:
                    17:a7:4e:88:50:a5:12:7f:29:a1:d8:31:8c:e6:1c:
                    82:2d:8a:84:7e:e7:ed:1f:01:f7:d2:af:c1:ea:2c:
                    68:29:c0:df:b7:65:97:fd:3c:a4:c7:bb:53:b5:8b:
                    7a:1a:73:1b:25:aa:7f:d3:f7:c6:11:67:05:2d:6a:
                    6c:ec:71:5d:62:c5:43:d6:6a:47:bb:a1:1e:58:a1:
                    be:c1:ad:ff:a0:4e:86:5f:91:e3:cb:32:ad:b4:5e:
                    3e:24:1a:a6:c1:7c:30:43:46:f9:43:a6:3f:0f:27:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CB:49:B0:F0:10:3C:11:7A:C4:F7:CD:0F:65:6A:DE:90:9E:FC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:46:fc:e2:16:cd:5c:ab:1f:b7:08:f2:19:81:ea:f7:22:8e:
         6e:53:c7:24:5a:3a:bf:79:61:fa:be:cb:ca:ee:27:53:c1:c8:
         e4:93:2a:ef:57:12:cf:46:2a:e0:d9:3c:77:5b:81:63:ce:b6:
         ec:c9:b5:18:2f:e3:04:4f:69:6c:33:1c:35:73:b2:29:81:fb:
         24:a6:ee:38:18:c1:d5:f8:52:68:66:94:11:d5:08:92:f3:79:
         d2:b3:05:8a:87:71:10:4f:79:c7:41:7b:51:13:36:c3:5b:c3:
         08:b2:53:36:13:fb:d5:b0:67:3c:0f:e4:8e:fe:d1:d3:04:cd:
         6c:be:05:76:65:62:8f:9e:4f:d8:2f:8d:39:4b:c8:b8:ea:84:
         ea:3b:7c:d3:1f:5d:d4:c7:1f:3b:02:de:44:39:d5:55:cb:eb:
         74:30:36:e7:f5:03:a6:2a:84:c0:5d:72:d7:eb:ce:65:e9:fd:
         f3:83:a7:da:76:43:eb:2a:1c:f8:97:b6:54:ca:1d:ab:a9:46:
         8b:24:0a:f8:69:48:ef:4f:41:f9:4a:6f:02:74:63:e4:f9:11:
         f3:6c:40:1a:03:90:f6:e2:d3:d9:9c:ac:e5:d6:e8:5a:30:66:
         70:11:62:47:1b:fd:5b:a8:20:b4:77:8f:6b:cb:9b:2e:ad:0d:
         ba:1a:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:51:50 2026 by rpki-client