Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ad2259c1-8f36-3544-8021-b448d5b373ab.roa
File:                     ad2259c1-8f36-3544-8021-b448d5b373ab.roa (raw, json)
Hash identifier:          nP8kfKykNiZbKolkUW6iATxEJOX/uqs7JqxgMYZv/Zk=
Subject key identifier:   73:BF:34:BF:B1:7A:4F:BA:A1:7B:3F:18:C9:8C:89:0D:FC:B5:D9:CA
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584ED001CAF32D02F7E91202D6C0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ad2259c1-8f36-3544-8021-b448d5b373ab.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     401026
IP address blocks:        148.51.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ca:f3:2d:02:f7:e9:12:02:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=e623963a-3bd5-4145-a0b5-11ded51ca5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:58:c8:6f:7c:f6:7a:25:9e:1d:66:db:a8:
                    e1:5c:36:87:a4:ef:37:c7:ac:a5:9a:01:a4:cc:be:
                    54:90:60:61:79:c1:d2:b0:46:fd:ab:75:26:d7:a1:
                    ff:ff:c3:1d:3d:e2:b4:15:9c:fd:c6:02:47:65:fd:
                    6e:25:f0:5e:19:69:13:61:24:e8:22:41:87:d9:04:
                    a5:74:95:a4:03:12:9f:d0:61:a5:4d:62:23:5f:27:
                    9a:38:e8:48:5b:fa:d5:8a:78:d4:f1:c5:c7:9e:d4:
                    9d:fb:cd:87:18:f9:6c:53:19:17:80:e6:c7:3f:b8:
                    67:7d:c2:87:7f:81:4a:8b:22:8c:06:22:c5:0b:3a:
                    ba:f5:ba:f8:ef:cd:2c:e8:16:6b:96:8b:4a:d1:37:
                    8b:95:f3:a8:6c:93:90:92:17:91:0a:15:f9:09:7e:
                    01:19:27:3f:ea:ae:c7:02:6f:bd:76:99:42:10:92:
                    0b:ae:b6:93:9a:78:64:67:c8:6f:53:b7:2f:cf:84:
                    75:2d:c9:c3:ca:07:ea:2e:cf:b3:57:56:e9:be:6a:
                    71:0f:a5:e8:b6:f3:a1:43:68:6a:93:0f:03:82:1a:
                    5c:d8:2b:e3:81:8f:9e:08:2a:44:7b:c6:73:ae:64:
                    6a:bb:ee:d9:61:4e:34:d2:be:01:37:e3:9e:42:97:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:34:BF:B1:7A:4F:BA:A1:7B:3F:18:C9:8C:89:0D:FC:B5:D9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ad2259c1-8f36-3544-8021-b448d5b373ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:54:c0:e2:b7:55:65:62:79:21:1c:00:d3:c6:c1:21:e9:6c:
         4d:d2:7c:3b:27:75:f3:f8:34:56:25:70:63:ea:dc:25:78:d6:
         fb:f2:ba:70:9e:43:04:03:87:14:70:6f:8f:52:9e:f7:be:86:
         05:7f:17:d8:aa:f7:b9:57:38:2e:59:23:a2:37:49:d8:a4:b3:
         5a:12:70:68:f2:03:c1:cc:97:7f:66:99:cc:8e:6f:40:54:95:
         f1:83:73:b4:5b:a3:6f:eb:c5:1b:bd:74:c8:46:1f:22:3d:92:
         70:96:e7:bd:70:7f:bf:96:dd:5b:4c:23:0f:b4:e2:59:86:e9:
         d3:e4:45:d8:91:a4:48:92:56:c8:03:c2:44:18:95:2f:c3:36:
         7b:8f:ff:96:16:b7:8b:44:bd:6f:28:82:a0:12:55:76:5a:46:
         f7:1a:b4:06:54:6f:58:e4:4a:ba:72:37:70:3a:51:63:50:f0:
         33:19:b6:d6:03:74:c1:36:a5:4e:c1:a6:0f:81:fd:64:86:2c:
         d8:0e:fc:51:63:50:51:2b:91:8f:df:26:5a:67:2a:5f:cb:63:
         25:1a:c5:35:24:bf:52:1c:1b:0c:ed:d7:5d:97:6b:4b:28:62:
         67:75:ab:fc:07:4d:51:89:58:10:06:b2:7b:c3:0e:86:8e:26:
         f8:b4:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 07:25:58 2026 by rpki-client