Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa
File:                     725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa (raw, json)
Hash identifier:          1LFFixD1V+pfXcu2bWuEfyvGp227lguiPe3slr6c/Ew=
Subject key identifier:   E5:65:C6:F5:FD:3E:26:0B:9D:6B:D3:0C:67:32:5C:35:63:4E:F8:2C
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584B13D6C789D0F1D55A9784D640
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     46165
IP address blocks:        148.59.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c7:89:d0:f1:d5:5a:97:84:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=fdd805d4-4e36-405a-96df-801464ddb4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:27:c3:0b:6c:36:4a:3b:f6:e3:a4:50:e6:
                    00:b3:d8:c7:12:0f:30:50:83:cb:94:0f:0f:97:90:
                    ae:2c:fe:d8:ac:59:1c:25:bc:5c:74:3c:71:a1:07:
                    ff:1c:ef:fb:58:f9:d7:2a:3a:11:81:1f:db:c5:0e:
                    3a:b3:57:8f:b0:96:5a:ef:f0:93:4a:2b:cd:f7:15:
                    90:f0:ff:fe:23:98:b0:0a:e9:8e:37:ed:1e:ff:0c:
                    b8:71:7e:60:69:61:d1:2f:c2:a7:b6:e9:bb:ec:19:
                    f7:d3:4d:89:f4:3e:86:be:07:c3:c8:c6:9e:bc:e6:
                    13:5f:e4:4e:e5:30:84:62:d0:92:75:aa:13:39:12:
                    b1:22:51:eb:ab:f2:8f:2c:0e:34:02:cb:04:4a:e3:
                    16:be:99:10:94:14:a6:f8:aa:86:f9:03:24:24:6d:
                    f0:a1:b6:33:2e:54:55:be:80:0d:02:cd:1c:b9:56:
                    6e:a5:b0:79:38:11:c9:74:c9:50:55:fb:f5:4b:ff:
                    cd:51:77:11:1d:f4:7e:08:91:03:f4:b8:47:30:ef:
                    52:57:af:72:4e:5b:0c:24:b0:66:1d:b7:d9:e0:89:
                    7c:82:33:47:89:73:26:6c:7e:14:ba:9f:9a:74:d3:
                    f3:43:33:b2:1b:1c:a2:e1:5c:91:27:46:9e:d2:e7:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:65:C6:F5:FD:3E:26:0B:9D:6B:D3:0C:67:32:5C:35:63:4E:F8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1a:9c:d4:38:7e:e1:05:33:b7:7f:9c:0a:67:dc:dc:33:2e:
         64:65:3d:79:a7:34:91:87:32:0f:58:f7:82:1c:c4:92:39:59:
         d3:56:38:f5:d9:24:a2:29:37:8b:73:f3:b6:7b:76:ec:4c:4f:
         e1:21:43:ce:7c:24:81:02:c9:6f:ab:c8:fa:ff:85:1d:16:c1:
         2a:95:ca:c7:4a:12:f4:a6:af:e2:1e:25:29:29:9a:e8:f2:dd:
         d7:ab:c7:a9:45:04:cc:2a:8b:aa:37:0c:b0:fd:85:7b:b1:00:
         eb:aa:64:79:01:81:63:b7:7d:bd:c2:95:8a:6c:de:fd:69:6b:
         29:fc:d9:a7:35:39:74:e2:13:ea:bd:bd:5a:b5:f1:da:f7:7d:
         b6:9a:6f:20:d5:e1:65:f1:88:91:83:90:89:0c:e0:91:39:17:
         8b:21:2f:22:cd:d1:8e:14:3b:f8:cc:5d:51:a5:34:a4:6e:55:
         37:b6:fe:a7:b7:27:61:8b:38:14:1a:4d:45:7c:39:ac:dd:ac:
         41:45:3b:4c:d5:41:fb:fb:f3:9c:81:f5:57:40:5d:a7:3c:38:
         e5:86:f3:71:9e:4c:cc:49:94:b7:06:17:67:24:2d:a8:f5:5f:
         fe:c3:19:39:29:82:a7:85:32:91:81:11:ae:0e:ce:7b:4d:2c:
         2b:90:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:23:22 2025 by rpki-client