Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/16b9e310-27d3-3465-afa7-e60f473a417e.roa
File:                     16b9e310-27d3-3465-afa7-e60f473a417e.roa (raw, json)
Hash identifier:          Pg8pwFuW5FhUfl9RMW+YYpqaZU81SXw/Is4XK/PC1js=
Subject key identifier:   FD:95:40:63:2D:5C:52:D1:B9:F5:25:60:CF:1B:10:9F:75:27:47:54
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584ED002092AA1ED8009DFE663E0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/16b9e310-27d3-3465-afa7-e60f473a417e.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     395174
IP address blocks:        148.51.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:09:2a:a1:ed:80:09:df:e6:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=8fe83f28-071d-43d2-a709-b834d7a1eb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:ed:89:57:42:b7:af:a3:ff:91:ff:b7:ee:
                    07:55:85:b6:d5:d0:e5:39:9a:c8:60:d5:d1:ce:8d:
                    bd:58:c3:56:ad:b2:0e:69:2c:22:98:79:21:0a:15:
                    2b:3f:61:25:78:17:a9:08:81:81:16:84:b3:96:9c:
                    ff:78:d5:d2:e9:ee:c0:9c:80:5f:2b:ef:5b:3e:1a:
                    c2:49:38:8f:09:8a:dc:7b:c5:05:41:d1:4f:44:c9:
                    70:2c:b7:87:25:02:37:1a:6a:a4:67:07:1f:1a:b3:
                    55:07:b4:4c:95:8d:98:f2:46:bf:26:4f:14:c2:f0:
                    d9:e4:ba:32:ee:ba:9d:57:97:e3:7d:aa:f7:d6:1a:
                    8f:88:b2:5f:15:b4:33:3d:3d:54:b1:86:bb:7a:bc:
                    a8:ba:6b:2b:9a:d4:2c:46:a7:42:45:09:1a:32:2c:
                    16:e1:d9:cf:4c:9b:8b:15:a0:a2:72:84:fa:86:91:
                    b7:7d:11:f5:dd:fc:e0:1e:a2:35:2c:45:b5:1f:0d:
                    2f:b6:9e:44:3a:46:19:fc:54:3c:01:9f:98:11:4e:
                    5b:8b:36:7e:23:e9:b5:02:5e:21:9f:05:56:a2:dc:
                    61:63:26:c8:52:81:40:97:19:16:53:20:e0:57:7f:
                    1c:87:70:60:cd:df:6e:d6:1e:f2:89:87:38:f8:63:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:95:40:63:2D:5C:52:D1:B9:F5:25:60:CF:1B:10:9F:75:27:47:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/16b9e310-27d3-3465-afa7-e60f473a417e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:6c:b3:86:7a:6e:24:22:de:bd:c6:12:ee:6e:d7:2c:46:56:
         92:d2:93:21:5b:48:dc:b0:ed:18:7f:db:04:71:df:c9:90:4b:
         bf:32:6f:01:a3:92:b8:c7:8f:e9:3f:fa:00:a5:b3:ac:8c:68:
         fa:d4:f3:37:ac:fe:77:aa:68:92:9c:26:0c:27:c5:c4:aa:16:
         f5:3d:d0:ec:e7:17:2b:3e:5e:36:c2:47:56:e9:64:a0:4f:94:
         86:87:a6:c4:60:05:5f:35:5a:0d:40:5c:0f:e6:43:72:9f:46:
         ae:f8:47:87:56:37:ad:7b:7c:bd:95:a5:a4:13:3c:5c:ef:9f:
         e8:33:6a:1a:03:74:c1:8a:d7:66:a7:bf:15:83:4f:a3:46:07:
         af:02:79:f1:11:58:28:aa:82:b7:6d:21:4f:86:f4:4f:89:6d:
         c0:b5:6d:ea:23:f2:7c:2d:9c:89:9f:8e:4c:33:15:75:a6:dc:
         d2:38:71:9d:88:95:a6:e0:4d:70:6f:07:fc:b8:65:36:41:44:
         bb:f8:70:c4:6d:d9:73:12:e7:9c:c9:3f:e6:90:1d:af:09:48:
         6a:64:72:fe:1b:fd:b4:ac:3c:13:80:cc:d8:91:12:15:24:e0:
         04:9c:48:b4:71:0b:19:ff:dd:58:07:ae:06:13:d8:0f:e2:18:
         eb:3d:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 07:22:16 2026 by rpki-client