Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa
File:                     09cf3890-b900-31e1-92b8-99764c525989.roa (raw, json)
Hash identifier:          n1brzRpd3mlx/6gu+JpU/LJrYZPhZ5y98AZkn673enY=
Subject key identifier:   76:F3:54:C4:00:CA:12:86:CF:52:C7:15:99:EB:DD:B6:E7:50:F6:95
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584D1B19EBD2E359E32D1FF04E80
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        148.59.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:eb:d2:e3:59:e3:2d:1f:f0:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=324f00c9-636d-4369-be07-0c4714a21286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:56:ab:1a:2e:6a:fa:83:59:50:df:05:7f:
                    30:16:fa:f6:ab:4e:10:14:d9:54:7c:71:f8:91:f8:
                    10:03:0c:f2:05:63:11:45:17:f1:53:5e:12:52:3d:
                    32:30:27:7c:07:88:af:a1:91:89:cb:d3:88:c3:4f:
                    3c:e5:96:80:7c:d3:84:fb:8e:d7:c9:4e:7c:90:fa:
                    94:57:45:00:7a:d8:71:3a:5e:ad:6e:d6:cc:f9:c1:
                    cd:8d:31:ac:9f:75:e5:5f:93:36:eb:63:44:d6:8b:
                    9e:4b:80:4e:8a:91:d9:7a:03:98:62:70:63:d1:79:
                    b7:ce:aa:6c:89:12:cb:43:d8:c8:4d:54:d6:3a:a1:
                    3a:80:24:29:df:67:35:fd:9c:33:e3:6d:ed:ae:ed:
                    56:1f:e5:f5:90:0b:c2:b1:90:f4:7e:ac:65:a4:f0:
                    63:23:ed:2c:20:d1:ea:3b:66:57:f3:2c:a6:1e:87:
                    d2:40:f1:90:a7:c1:06:27:ea:67:d0:a8:cd:ef:6d:
                    96:3a:34:63:ac:8b:9c:9b:54:19:8e:01:d5:7b:80:
                    6b:33:b4:db:bb:ff:85:a1:b2:dc:b1:27:b9:e8:6c:
                    ac:87:c2:ba:8e:aa:0b:0e:e3:38:dc:37:0a:69:0e:
                    ba:f1:67:d4:56:dc:d9:34:b6:e5:6e:77:3b:bc:48:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F3:54:C4:00:CA:12:86:CF:52:C7:15:99:EB:DD:B6:E7:50:F6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:11:f7:2f:ca:b9:15:72:7d:b5:ab:c1:ed:17:96:e8:93:c4:
         c8:0e:23:4c:2d:f5:b1:31:46:ee:ee:cb:aa:61:ee:b7:9c:41:
         3d:aa:02:a5:21:b2:dc:14:ed:1f:75:69:09:08:9f:e4:34:5f:
         d4:53:05:1a:f6:d3:7a:14:3f:3f:fc:78:ce:8a:2f:09:8c:5b:
         32:f0:07:7f:bf:26:1c:16:a7:2d:33:da:8e:1d:09:67:47:5f:
         77:f0:59:31:95:de:13:c8:4a:d2:8c:be:8c:89:6b:11:f8:35:
         06:4e:19:b8:05:90:be:19:24:14:24:b4:f3:ff:c7:ab:aa:4c:
         f6:77:36:48:0d:29:10:5b:c0:ab:db:6b:66:06:4b:5a:a6:d3:
         e3:b3:47:92:44:47:08:a9:f7:64:bc:6e:09:db:a2:fb:d7:2e:
         5a:ea:c5:6a:ef:45:0b:82:a1:89:14:03:38:31:80:2a:d1:3d:
         6f:ed:a4:89:31:f6:91:24:37:4f:55:ae:d0:43:8d:65:44:bb:
         04:74:92:cb:64:0d:ca:1c:73:1d:ee:85:cf:b5:2b:75:a2:68:
         64:74:59:d6:2c:2f:50:ce:7b:97:b8:31:f1:51:fe:1d:7c:c8:
         f3:cd:e1:26:fa:01:8e:68:a6:f7:4d:88:ef:ec:fb:4a:46:f8:
         91:87:2d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:33:15 2026 by rpki-client