Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491/8960633e-5554-34a0-bdfd-63c2beef0418.roa
File:                     8960633e-5554-34a0-bdfd-63c2beef0418.roa (raw, json)
Hash identifier:          2UbtY+heVjd9o7HIoQVhrQBXGl/7Vo6JMvNR7dqF1Gs=
Subject key identifier:   54:CA:C3:50:3A:B7:19:C8:C5:74:89:B9:33:77:35:58:23:AB:92:D6
Certificate issuer:       /CN=f25fe3b5-6325-49db-a2c3-423aaed81491
Certificate serial:       010D0C9F4328584EA6A15AD86E449E0BE4441900
Authority key identifier: F7:60:AE:AC:36:BC:78:34:93:AF:AF:A7:9D:CD:50:7B:9A:01:F2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491/8960633e-5554-34a0-bdfd-63c2beef0418.roa
Signing time:             Tue 28 Jul 2026 17:17:49 +0000
ROA not before:           Tue 28 Jul 2026 17:17:49 +0000
ROA not after:            Mon 26 Oct 2026 17:17:49 +0000
asID:                     39959
IP address blocks:        148.59.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491/f25fe3b5-6325-49db-a2c3-423aaed81491.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491/f25fe3b5-6325-49db-a2c3-423aaed81491.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:a1:5a:d8:6e:44:9e:0b:e4:44:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25fe3b5-6325-49db-a2c3-423aaed81491
        Validity
            Not Before: Jul 28 17:17:49 2026 GMT
            Not After : Oct 26 17:17:49 2026 GMT
        Subject: CN=ff4ba965-3aa4-4da9-b7dd-e424cedfa1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:0f:ca:8d:ae:8c:f1:8e:01:67:f1:10:06:
                    cb:46:44:5c:24:53:72:e3:67:72:24:12:3b:31:f8:
                    cd:f2:e9:5a:f9:b1:11:41:3b:0b:74:b1:de:09:a3:
                    57:be:a0:31:cc:ea:99:1b:82:06:c9:b9:9a:15:10:
                    b3:bd:0b:ff:e5:33:b4:1e:64:2c:d2:09:d7:72:40:
                    54:62:99:e2:be:d3:64:ce:50:22:ed:27:27:1a:50:
                    bb:99:64:63:26:6f:d0:e9:3d:2f:f0:a3:5d:b9:81:
                    16:19:7b:13:6f:77:54:79:a4:9a:13:29:42:0c:38:
                    a7:7e:5f:d5:1e:2b:21:4e:8b:74:cf:3e:ad:b2:90:
                    9c:9e:96:f3:89:44:35:e5:00:6e:e1:ee:bd:fd:31:
                    f9:ad:36:d6:4f:b8:01:18:47:fd:0b:cc:99:0d:0c:
                    90:4f:cb:c9:e2:10:78:0d:12:61:4f:2f:7e:b3:d9:
                    01:48:de:63:74:a8:b0:b3:11:22:10:85:26:ee:22:
                    71:aa:67:6c:fb:f2:db:2c:2d:d6:75:c7:54:0d:6e:
                    e1:76:1f:da:c1:bc:d7:4b:3d:03:97:5c:40:1a:84:
                    d6:33:3b:ba:ec:1b:df:a8:f5:08:03:e1:fc:e6:45:
                    6e:5e:df:b6:c6:4a:e5:ca:8f:32:3f:ea:c7:b4:e9:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:C3:50:3A:B7:19:C8:C5:74:89:B9:33:77:35:58:23:AB:92:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491/8960633e-5554-34a0-bdfd-63c2beef0418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491/f25fe3b5-6325-49db-a2c3-423aaed81491.crl

            X509v3 Authority Key Identifier:
                keyid:F7:60:AE:AC:36:BC:78:34:93:AF:AF:A7:9D:CD:50:7B:9A:01:F2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f25fe3b5-6325-49db-a2c3-423aaed81491.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:23:7a:78:6e:2c:c4:72:c7:e5:25:e4:bd:e3:da:8c:3c:69:
         1f:4c:6d:be:8b:66:6c:8e:83:69:ce:84:4f:fd:8f:73:af:8d:
         85:cf:ff:21:6d:2a:3d:62:35:85:bc:9e:a4:03:93:6f:35:37:
         be:cf:38:98:da:44:fd:41:bd:a6:59:33:3f:3d:6a:d9:de:4c:
         11:ac:ff:fb:a5:9e:75:52:80:5d:98:f5:37:32:b8:79:7b:ec:
         8d:ef:b5:4c:54:48:c8:f6:56:19:8c:2e:95:7e:fc:a7:16:13:
         09:5a:52:86:54:5c:fd:d5:ec:9a:d8:df:27:4e:8e:d4:f4:8e:
         dd:e8:7a:2d:7b:72:57:32:de:d5:ce:03:4a:a7:db:0a:1a:79:
         8d:5b:6f:3d:fe:ca:a6:ad:52:7c:da:ed:42:f7:3c:8c:81:a2:
         a7:e8:db:18:8c:e3:f5:18:c2:ad:d8:c2:ad:82:97:ef:4c:9b:
         87:7b:8e:5e:73:c4:f4:b4:f4:59:57:de:f7:de:c3:e6:91:70:
         ff:0e:a8:fc:9b:9b:00:a3:30:3c:c9:f4:92:02:5d:c7:76:c1:
         b7:01:eb:e6:6c:da:d2:63:c0:90:6e:69:60:b3:8a:ca:a7:80:
         ce:d6:7f:58:0b:71:d8:09:f3:e0:43:4f:a7:ed:94:06:de:5d:
         ba:a6:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:33:25 2026 by rpki-client