Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6247698e-a6a4-33c2-be62-645eeb096591.roa
File:                     6247698e-a6a4-33c2-be62-645eeb096591.roa (raw, json)
Hash identifier:          +1k643OJbIq0uEiLqOTumtYt7adPcbkh4dR47FlwdcY=
Subject key identifier:   C5:8C:53:42:47:20:B9:24:7E:31:FE:29:53:86:91:47:5A:F7:92:18
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D89CA22A7D09EF4D6DEB51B80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6247698e-a6a4-33c2-be62-645eeb096591.roa
Signing time:             Fri 17 Apr 2026 16:34:36 +0000
ROA not before:           Fri 17 Apr 2026 16:34:36 +0000
ROA not after:            Thu 16 Jul 2026 16:34:36 +0000
asID:                     12025
IP address blocks:        148.51.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:ca:22:a7:d0:9e:f4:d6:de:b5:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Apr 17 16:34:36 2026 GMT
            Not After : Jul 16 16:34:36 2026 GMT
        Subject: CN=eea784ba-0a31-4e76-ba03-107fee192a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:6a:61:46:7d:c3:3c:7d:6e:ed:2e:07:f1:
                    ba:00:ce:e4:4d:76:a2:20:78:5f:43:a2:1e:25:1e:
                    85:59:6f:86:16:59:5c:dd:cb:a5:98:04:73:8e:58:
                    f9:41:c5:42:40:1d:1f:60:83:b3:9e:d0:44:09:3f:
                    fb:46:0b:46:c9:fc:7f:0c:e7:41:8f:e5:f4:d1:e7:
                    25:d2:ea:d1:53:95:87:c5:b2:45:b2:57:9d:31:ee:
                    1f:a1:92:6a:3b:c1:bb:a7:72:33:60:a2:01:8f:86:
                    b9:14:8a:da:2a:a1:99:c4:1f:16:a3:8e:96:e7:6e:
                    29:63:92:4b:b4:a3:c2:12:6a:e6:72:a4:03:d8:fc:
                    e8:f1:60:e3:3c:5e:7c:d3:da:63:e2:80:87:0e:76:
                    1e:4e:88:34:95:3f:a5:64:2e:a5:5d:d9:4a:d5:16:
                    6e:cd:02:59:d7:2a:a5:ed:bc:b1:6c:48:fb:a7:25:
                    f6:b3:15:65:9f:54:6b:9c:98:78:bf:c1:88:04:ab:
                    53:c8:f4:8f:76:c0:06:51:88:b0:c6:9a:4f:a7:37:
                    d7:b3:dc:c3:bb:10:9d:cd:aa:16:e1:1c:b7:41:42:
                    f0:b0:72:e8:a8:28:fe:c1:24:95:f1:3b:aa:5b:0c:
                    90:f8:a7:ee:c6:20:87:1f:4a:33:e6:b8:69:09:05:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8C:53:42:47:20:B9:24:7E:31:FE:29:53:86:91:47:5A:F7:92:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6247698e-a6a4-33c2-be62-645eeb096591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:d5:dd:6d:f1:f9:bb:f1:87:0a:f3:78:c3:57:65:fb:85:
         49:1e:ae:cd:ab:21:45:c5:a6:b0:69:e2:e4:4f:e9:a8:d4:5f:
         c0:99:5f:58:64:b1:4b:a9:cf:8b:df:03:ef:0d:4f:2e:e7:d4:
         cd:2c:16:66:c8:dc:e5:88:fa:b4:64:02:1a:2e:ff:45:bf:a2:
         4b:b0:86:c8:94:7d:5b:64:ee:c8:f0:6f:37:28:95:bc:c7:72:
         51:69:86:9f:57:9e:52:02:c7:32:a9:a1:89:14:98:56:96:7a:
         72:eb:69:37:43:27:b3:26:e9:2f:24:cf:fc:44:2d:03:3d:d0:
         fc:df:03:8b:49:7a:1a:fb:e0:64:f4:01:1b:ff:04:6f:e3:c8:
         d7:4d:ee:f0:00:36:f1:40:82:5a:5a:04:ec:11:c5:ce:12:e6:
         69:12:f4:e4:32:c3:3f:57:86:85:9e:f2:6b:08:b4:99:23:a4:
         86:3b:5b:68:9f:2a:40:9b:b8:b3:f7:43:22:03:33:ba:e6:62:
         0a:77:7e:0a:d0:92:00:6d:5a:aa:4f:9c:4a:43:a9:49:87:c5:
         62:ce:34:cc:a0:fc:db:79:91:4b:36:da:0b:6d:03:fd:b1:71:
         5e:7e:bb:36:2f:d3:f0:5e:e2:ac:ea:60:27:35:6c:b4:1a:5a:
         60:72:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 16:07:31 2026 by rpki-client