Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3cc624d0-49a9-30f3-a569-3f978f07eb55.roa
File:                     3cc624d0-49a9-30f3-a569-3f978f07eb55.roa (raw, json)
Hash identifier:          CkNn5ANab4ZWTyGo1T83ruj2rGxQmNOZQ77U+OHeiFg=
Subject key identifier:   F6:93:F5:AA:58:1E:64:37:A9:F1:60:C1:90:C2:C0:AB:D2:C3:7C:6F
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F7352D68C240C8DFC527854C0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3cc624d0-49a9-30f3-a569-3f978f07eb55.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     12025
IP address blocks:        148.51.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:d6:8c:24:0c:8d:fc:52:78:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=d87e766d-4b87-4eb0-b356-47616d393f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:ea:5f:18:7d:7d:5d:71:c4:72:98:79:eb:
                    a0:85:b0:78:e4:0d:7c:c1:ec:e7:83:06:44:06:3a:
                    97:cf:ae:b7:83:9d:aa:24:ef:74:c4:54:99:95:f9:
                    2b:ea:28:c8:54:29:44:5a:a5:c0:69:c3:0d:9c:00:
                    5f:60:2f:e6:fa:7a:37:04:42:c3:40:65:39:5a:f6:
                    8f:f1:0d:a4:a6:80:7a:0a:ef:40:d5:ad:62:01:50:
                    38:15:1f:29:87:cf:a4:6f:46:5d:89:c9:60:26:ff:
                    71:26:39:50:6c:1a:e3:4f:b7:34:24:4c:4e:6b:4b:
                    5e:a7:da:94:aa:7f:ed:89:27:33:15:15:1c:5b:9a:
                    29:c4:05:0a:22:a7:41:b6:7f:4d:bd:b3:15:03:37:
                    7d:1d:c8:51:c2:27:cf:09:0f:65:3c:72:ff:98:f0:
                    9e:33:8e:73:93:4b:ea:97:48:3d:8f:50:cd:06:01:
                    86:1f:b4:fc:d6:82:b0:73:b7:65:38:70:c9:1c:eb:
                    5c:5c:0f:06:a6:98:e2:d0:7e:4e:93:79:41:cb:65:
                    a7:ce:fd:41:f8:bb:62:00:63:6a:0e:4d:64:dc:45:
                    e5:51:08:2c:99:60:fa:97:0b:e6:3b:e6:7c:ee:b0:
                    70:f8:14:10:09:d2:cc:e6:dd:27:a1:20:5c:d5:14:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:F5:AA:58:1E:64:37:A9:F1:60:C1:90:C2:C0:AB:D2:C3:7C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3cc624d0-49a9-30f3-a569-3f978f07eb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:87:a5:f5:ab:29:50:6e:cb:6a:76:6b:2e:83:39:a3:77:21:
         6d:10:a6:cb:2b:b6:4d:41:44:3f:7e:a6:1f:ea:01:9c:4c:7b:
         55:2c:e5:12:82:c3:fc:4e:8f:b7:dd:e5:6a:df:51:b8:7a:bd:
         d3:27:05:c3:c4:91:96:8b:b4:a1:ad:fd:25:14:df:9a:69:16:
         77:cc:32:3b:e0:73:8e:23:8b:22:56:55:3d:99:9f:de:65:82:
         3a:c2:63:06:0e:a3:93:19:bc:17:ca:42:1d:88:e2:1d:0a:d3:
         37:96:77:5c:cf:d2:a9:2b:e1:5e:62:cc:5c:27:26:db:2f:f6:
         23:39:98:27:1c:72:b0:c3:bb:f5:a7:8b:0a:8b:83:35:d7:f8:
         e0:34:2c:97:03:84:8f:da:3d:b0:41:cf:7d:c8:be:99:2c:fe:
         0e:62:bb:c1:64:1f:12:bd:47:11:92:96:60:74:b3:93:1f:db:
         8d:6c:90:70:b4:db:35:c3:10:c9:9e:95:89:13:1b:13:34:0e:
         76:06:cc:55:09:1b:af:df:07:c2:e3:df:93:7d:fb:c4:52:2a:
         1d:6e:20:9b:b1:ab:22:0a:0b:82:8d:aa:16:06:6e:01:50:d3:
         7a:0f:0b:bd:38:5a:06:ae:23:0e:33:c4:01:be:da:20:54:53:
         b6:5d:76:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:49:31 2026 by rpki-client