Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa
File:                     f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (raw, json)
Hash identifier:          8v0Ur7iSMKGI8RInaZjZof+yRoIiD//sF0+spmmGItE=
Subject key identifier:   03:51:B3:67:CE:23:AF:D1:42:6F:2C:1F:41:31:E9:A6:A4:35:2B:48
Certificate issuer:       /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe
Certificate serial:       010D0C9F4328584EA78829636B3F136FADE9D600
Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54542
IP address blocks:        148.59.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:29:63:6b:3f:13:6f:ad:e9:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6dd07c82-0ec2-4107-973a-53fe85b8fd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:c7:87:90:87:88:b8:85:d7:20:c9:3a:6b:
                    70:5b:87:74:63:d2:a4:8c:13:06:07:96:f4:77:21:
                    d6:7c:75:7f:11:a3:7b:3b:56:b6:42:a2:17:53:5d:
                    6b:bd:19:6b:55:b8:89:31:ec:1e:7a:bf:a7:55:0b:
                    d4:a9:67:c6:0c:d5:b4:39:b8:f9:af:45:07:3b:e3:
                    ca:ec:f9:fe:81:83:0f:ee:1f:a3:88:b4:e0:94:fc:
                    ba:48:5b:64:28:04:2d:0e:b2:04:8f:a6:d0:2b:89:
                    c3:a6:8b:98:d2:ec:70:ae:8a:fd:54:19:f7:22:3a:
                    76:08:b0:63:3b:e7:8b:e4:ac:b7:d5:63:af:99:cd:
                    82:46:9c:50:c3:25:96:30:32:8b:a3:94:3b:f4:41:
                    42:6b:5f:8c:3f:c5:38:5c:16:e7:4a:9e:69:ee:31:
                    b4:54:d8:b1:86:91:36:fd:3d:1b:3b:dd:b0:d1:0a:
                    1a:1e:42:c5:8d:1e:c8:9c:42:86:a8:89:1a:20:cb:
                    30:b5:ff:05:92:9c:ee:4f:82:de:d7:ba:fc:e8:d1:
                    fb:bb:85:68:43:fb:4b:f6:f0:7e:5e:e0:bd:ad:41:
                    e6:ac:0e:32:c3:5b:82:a9:ee:44:a2:9e:ba:5c:61:
                    67:59:0e:0b:72:d4:7f:3a:d0:99:71:a6:ba:63:70:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:51:B3:67:CE:23:AF:D1:42:6F:2C:1F:41:31:E9:A6:A4:35:2B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:d3:ac:e2:85:34:e2:39:47:e4:83:4b:23:e8:27:03:fa:
         fd:fd:f6:06:b2:50:39:a8:da:6d:bd:19:69:ff:31:5a:57:ca:
         8b:93:13:62:09:67:94:b7:62:bc:6c:aa:88:e7:e5:9e:54:2d:
         a7:57:e7:bd:fc:e6:ea:2d:1f:fd:2e:16:ae:2e:ad:b1:21:32:
         4f:4f:f7:09:25:ed:c9:f7:83:a2:46:23:55:e4:8f:b2:34:17:
         b8:95:77:fd:4c:9a:6f:58:3c:ca:d6:ac:21:45:a6:fd:28:94:
         9d:77:bb:61:7c:f2:29:a3:25:c5:4a:d8:f7:79:15:42:bb:bb:
         b3:9a:b6:75:cb:da:cf:24:4f:3a:8b:f2:3e:30:37:e3:3f:58:
         81:54:9c:2b:92:62:77:9c:aa:b7:26:0b:b9:3f:bd:43:f6:22:
         6e:cf:e9:5c:fa:9b:07:62:ec:ea:5c:3c:a4:cd:48:37:81:93:
         4f:e5:40:ba:69:04:f7:e7:3f:75:40:e4:96:54:a5:25:5e:74:
         dc:57:67:3d:05:d3:3a:b1:12:b5:ef:b9:1d:5d:3f:79:ec:a1:
         53:23:9a:bd:ab:f4:78:0c:5f:73:d9:db:c3:45:de:29:be:81:
         18:07:84:6c:4b:db:ce:05:31:93:27:a3:ed:df:c2:d6:c7:8b:
         f0:69:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:33 2026 by rpki-client