Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa
File:                     09cf3890-b900-31e1-92b8-99764c525989.roa (raw, json)
Hash identifier:          H3T8PgMnTTqHWaZDG76XA4IGMSt7tq2zbJEtneGGmNY=
Subject key identifier:   43:CB:D9:49:56:8C:3C:99:D0:CB:33:9C:B4:11:5C:5D:84:58:47:72
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584EA799866CAB35874DE7689580
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        148.59.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:86:6c:ab:35:87:4d:e7:68:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=118cbbb8-e063-43c3-8ad6-09ac776c5378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:0c:7f:01:43:b5:2a:25:db:8a:10:7c:e0:
                    04:3f:fc:97:af:1d:bc:fb:fb:69:0f:26:20:c5:c2:
                    68:71:47:31:e5:33:9f:23:19:62:33:0b:7a:e7:e5:
                    ea:de:01:1d:43:f9:4a:d6:bf:df:28:74:27:74:e2:
                    c4:3d:e1:46:32:6b:55:f9:4f:0f:41:37:11:b8:67:
                    ef:0a:b2:35:27:49:f3:b5:2d:ec:5a:65:2e:da:ab:
                    a1:3e:8b:b9:8c:0b:a1:5c:dc:f9:35:68:78:6f:41:
                    df:7c:d3:df:71:48:51:02:15:e6:46:33:80:92:a0:
                    e5:25:2e:4d:77:76:a2:fe:ab:e7:55:f4:21:c1:e5:
                    bc:75:96:28:af:75:3f:0e:da:8a:9a:7f:da:ba:a0:
                    9d:ce:13:1d:8d:c1:62:88:79:66:ef:0f:33:4b:ab:
                    f9:da:38:03:0e:4b:b6:d2:0c:f8:62:aa:fc:94:5e:
                    70:4b:d6:39:ea:b6:3a:79:eb:2f:d2:38:60:71:7d:
                    65:3d:41:de:43:ca:49:19:23:04:82:0d:1d:30:48:
                    43:29:0d:54:a6:cf:02:5e:b4:a4:cf:c8:72:65:79:
                    d4:72:cb:e5:e1:d8:ee:78:f5:f9:ed:03:b2:0d:ef:
                    63:69:01:9c:d0:c7:cd:80:2d:d4:54:49:37:cb:f7:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CB:D9:49:56:8C:3C:99:D0:CB:33:9C:B4:11:5C:5D:84:58:47:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:e8:a0:25:a9:4b:d6:04:99:2c:5c:7d:b1:70:46:67:0e:3e:
         1b:c6:4b:95:02:4e:35:49:2e:21:f0:fd:c1:ab:e0:6a:63:8a:
         bc:e3:1c:20:9a:30:0b:d7:ba:a8:b7:42:ab:cb:04:20:a0:a4:
         ef:66:2d:2f:79:32:f2:62:43:93:69:d2:fe:db:08:f3:03:2e:
         a0:f0:7c:fb:dc:cb:96:91:f8:49:f5:eb:42:1c:7e:d1:da:64:
         69:ef:fa:2e:89:f0:03:36:cb:3a:40:3d:eb:4e:db:6c:9b:46:
         0f:11:7d:45:14:66:2f:8e:df:e4:a0:49:e8:67:b6:9b:a8:08:
         80:b3:10:61:f5:a6:52:b8:36:02:3e:57:4d:05:d0:b6:11:d5:
         ad:07:81:af:e8:e5:97:3c:9c:08:4c:f9:f6:bf:a3:fd:4f:23:
         ea:72:7e:ea:98:d5:10:cb:73:ad:f2:e2:43:bf:42:a9:53:39:
         95:9c:b9:c5:ae:a4:48:be:11:28:57:01:4f:5b:fe:ae:19:12:
         38:fb:64:f4:5b:fb:ef:21:79:d7:a4:d5:8d:c3:ba:c4:21:94:
         24:bc:3c:98:dd:f8:8e:0f:99:22:ee:3b:c7:03:67:db:56:ac:
         10:e5:4a:ef:1e:f5:59:93:43:ea:6b:6d:7b:fc:3a:9b:d8:f4:
         76:51:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:32 2026 by rpki-client