Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6c51f4dc-a251-362d-b53f-6d6c842044e3.roa
File:                     6c51f4dc-a251-362d-b53f-6d6c842044e3.roa (raw, json)
Hash identifier:          Uc/FiMWh+j80GFqSmHsA8YCn6HwJea0h23ExoEurlcE=
Subject key identifier:   83:8A:5C:5C:BC:5F:60:AC:1D:91:76:02:62:4A:56:C6:32:2F:CA:98
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F70882545DEFB459BE7ECF380
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6c51f4dc-a251-362d-b53f-6d6c842044e3.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     12025
IP address blocks:        138.207.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:25:45:de:fb:45:9b:e7:ec:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=c4c2e1ce-1a0d-4332-aa26-81b47ca2bac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:9f:3b:e1:f0:cb:14:87:ce:00:8c:4f:c2:
                    c6:b5:5e:be:8b:1a:62:a1:e0:71:12:d1:12:85:31:
                    05:b5:83:ff:e0:74:5b:91:89:bd:44:3b:9c:64:fb:
                    c3:d2:58:1a:6a:16:63:fc:4d:42:37:f3:72:95:fe:
                    30:02:c5:2d:da:32:79:81:9a:64:21:63:cd:67:3c:
                    bf:fc:c7:f3:4e:d1:b3:b7:e4:05:a5:45:4d:25:08:
                    41:5f:d7:44:b3:2c:4f:01:15:25:ea:f7:81:03:d5:
                    19:53:f5:65:2e:b2:4b:37:ca:76:28:f6:10:cd:a1:
                    04:db:1b:ea:3e:01:3a:c6:ec:1f:5f:da:0d:d2:1b:
                    67:85:d6:2d:63:a1:9d:58:11:60:0f:34:2e:03:d6:
                    a1:46:55:d1:87:76:dc:f1:31:84:79:7f:d7:36:9d:
                    25:e0:e8:4a:e5:9d:61:2a:ee:ce:0f:af:e3:58:ab:
                    3e:f7:4f:9e:d1:a4:30:75:3b:f6:5c:e6:47:fd:30:
                    07:fb:3f:c0:4f:8e:e8:21:a4:5d:94:37:e7:52:b1:
                    66:55:64:3a:64:d8:57:47:49:89:a6:7d:bd:a3:40:
                    3a:1d:a5:16:e7:60:19:e7:8a:35:77:0e:04:37:df:
                    a3:64:18:71:ce:a9:56:f3:56:31:a7:8f:42:86:c4:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:5C:5C:BC:5F:60:AC:1D:91:76:02:62:4A:56:C6:32:2F:CA:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/6c51f4dc-a251-362d-b53f-6d6c842044e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:57:83:fe:19:f8:43:0b:fc:d0:fb:ef:51:c8:e4:4b:fd:e0:
         30:5a:96:47:76:9d:3f:25:cb:b4:5a:5f:08:0b:4c:f5:df:ee:
         d1:ce:51:43:f8:c8:69:b5:70:c2:a6:85:f3:06:ae:da:85:29:
         ee:63:86:bf:f3:4e:57:ba:3d:9b:d7:df:fa:9b:2e:fd:12:50:
         54:dc:54:0d:a7:0c:e5:ea:c6:ac:e2:38:fc:28:fd:ab:42:90:
         c6:bf:36:91:8f:48:b6:80:5a:ed:2f:fc:56:38:ed:6f:ad:32:
         82:5a:b5:21:05:1d:cc:2e:2b:a7:ec:41:31:f0:fd:17:d3:91:
         79:c7:95:3b:24:47:0b:a6:dc:d2:a0:66:af:f1:38:35:d8:1f:
         39:e2:eb:eb:2e:a3:1c:11:d9:82:a6:b1:c1:c6:1c:05:72:c1:
         ec:2b:45:c9:69:18:87:ad:06:b6:0a:ed:27:b8:f6:e6:b1:ea:
         68:6e:0c:df:6c:81:99:62:bc:68:1b:71:18:bb:57:d3:50:34:
         e0:c6:5f:78:02:93:05:93:b4:dc:df:6b:69:e5:be:d4:72:76:
         93:4f:10:2a:8f:e9:2e:2c:b6:6b:11:2c:64:3c:c9:97:84:00:
         04:7f:9d:b4:9f:bb:ea:d8:9f:e4:a0:6c:b8:40:56:ad:3a:fa:
         78:bc:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:55:09 2026 by rpki-client