Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b7a49887-5403-382c-b016-5f45518bbfe3.roa
File:                     b7a49887-5403-382c-b016-5f45518bbfe3.roa (raw, json)
Hash identifier:          MGB7H3PJZjijkBE27rALyj8oAYKxy3cv2kL1OEXISPs=
Subject key identifier:   1E:FB:AB:7A:0B:34:D5:09:2E:B1:52:67:EC:0F:5B:51:6A:B4:EE:E0
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EC63C757755C0AA751E7876F8
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b7a49887-5403-382c-b016-5f45518bbfe3.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     396930
IP address blocks:        148.51.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:75:77:55:c0:aa:75:1e:78:76:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=2d503348-9809-4734-bb23-9adb5dda6be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:b1:70:61:48:86:e7:95:0a:4e:30:cc:58:
                    95:eb:f9:0a:9c:20:2f:c5:66:9f:f7:64:ae:04:87:
                    2d:57:23:dd:33:9d:33:08:0f:84:c1:62:04:ca:90:
                    a9:78:9f:e0:90:83:43:95:e4:0c:f1:3f:86:0f:a4:
                    b9:41:9f:83:98:34:62:b2:a2:dc:68:60:04:c0:3b:
                    6e:ea:15:8f:8b:83:06:df:ba:4a:f1:c0:7d:23:ae:
                    d6:f5:54:ee:2e:10:84:e7:1c:74:21:09:9f:b1:df:
                    f7:f8:f1:ce:49:2f:6b:5e:bc:78:56:0b:a4:85:da:
                    48:6a:51:70:ab:6c:30:5c:5d:b0:e6:f3:83:8c:e2:
                    9e:da:ca:27:c0:f5:37:d1:2a:e6:c7:80:fd:77:83:
                    58:62:7a:03:61:c5:50:37:bd:91:1c:5a:d3:65:2d:
                    03:6b:b1:95:a9:85:b8:3a:4f:d2:1c:14:e0:b1:77:
                    96:3f:a4:4b:75:fe:e4:7a:e2:51:3d:18:98:54:84:
                    3d:56:60:62:4c:22:f6:f4:05:99:b8:84:ed:9a:12:
                    45:af:d8:97:8f:01:7b:5e:07:f9:5d:b2:79:ee:8d:
                    d8:85:45:5c:a6:19:70:0c:c2:61:56:93:2b:82:db:
                    a1:c6:52:2c:b6:24:09:37:ca:3b:ca:34:e8:21:27:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FB:AB:7A:0B:34:D5:09:2E:B1:52:67:EC:0F:5B:51:6A:B4:EE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b7a49887-5403-382c-b016-5f45518bbfe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.51.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:65:c5:92:05:01:01:04:87:4a:50:da:12:9b:57:8c:92:
         10:90:3e:a7:db:79:1f:d2:55:2f:29:27:20:13:f1:08:71:64:
         8e:fc:a9:e9:94:49:e2:42:d5:63:91:01:0a:bc:ca:68:2f:ae:
         c9:37:be:71:e5:1d:a0:5f:2d:71:e8:79:28:22:2c:ed:0b:0a:
         cc:bd:f8:8f:24:9a:63:aa:04:dd:12:36:80:ab:e7:5a:04:e0:
         6e:e0:e6:be:ab:aa:6e:22:00:fe:6a:0b:b4:30:b7:08:6a:a9:
         6b:3c:f2:fb:f3:c6:d5:cd:e7:80:87:0e:d2:42:ef:3a:de:4b:
         f9:e6:bb:99:7e:61:77:a4:13:a5:ce:c7:f2:ae:15:08:89:b6:
         7e:1a:fb:ad:e5:12:e4:01:9c:6f:27:1a:e4:74:88:b6:4f:ab:
         b6:55:1a:0a:1e:86:f4:a7:20:d1:f2:ab:3b:67:95:99:61:9f:
         ed:a6:de:2c:2f:e6:ec:5b:a8:c8:91:72:03:3d:59:5e:5b:d8:
         64:a2:6e:56:51:0e:da:72:3d:7d:1f:99:8a:6b:b4:9e:7d:e3:
         e3:57:5b:0d:db:e5:7c:6b:0e:e3:fe:5f:c7:51:ab:78:c9:d8:
         a2:81:21:ee:88:cd:dd:61:ad:66:ca:84:9d:61:0e:52:4a:39:
         8e:dc:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:36:40 2026 by rpki-client