Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
File:                     299846a5-9f5b-32a0-8287-286e8857888f.roa (raw, json)
Hash identifier:          WDC26/J8Vby3dL4959FQm0yVEb1NfLu1wozQI1dypJU=
Subject key identifier:   5E:B0:6C:6B:95:06:30:43:C0:5D:65:F0:19:62:79:D2:04:C5:42:0A
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584ED001CB4B8EBF09A5755D6E00
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:cb:4b:8e:bf:09:a5:75:5d:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=114467da-9964-4157-b397-c64f1bb25aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:81:6c:19:2a:ff:a2:41:4c:81:88:5a:47:
                    4e:f0:c8:96:4b:a5:c1:bc:d5:50:5d:7c:c3:cf:c6:
                    90:0f:c2:c6:75:99:f3:fa:e7:fe:70:65:cc:3d:d2:
                    9d:31:d7:53:6c:91:c9:fa:7e:09:42:d2:34:a2:1c:
                    82:20:63:4c:22:00:35:0a:1e:2d:82:c3:97:33:d1:
                    ac:26:eb:cb:5f:31:3a:0c:af:b9:25:dd:7c:4d:52:
                    16:72:71:10:ff:a9:17:b7:2d:31:91:24:87:b4:8d:
                    cc:17:55:33:34:62:03:fd:bf:c3:f7:32:10:08:12:
                    fc:32:9d:82:a0:c5:44:8d:43:52:04:d4:7c:a3:5d:
                    07:d4:2e:fd:3e:92:2d:2c:52:6b:ae:d7:1a:fc:68:
                    e3:9f:5a:44:85:52:7d:30:9d:5e:6e:fc:65:2e:af:
                    67:58:e1:62:00:c4:71:0d:4e:a7:1e:5b:8f:df:af:
                    d9:66:a3:7b:28:87:e5:9b:bc:f8:0b:56:c8:b2:64:
                    a7:c3:dc:66:f4:8f:45:80:9f:17:35:1b:75:60:ab:
                    1f:23:27:cb:9f:63:ce:c7:3a:63:9e:e3:0c:05:9f:
                    ed:be:7c:06:16:1d:c6:84:bb:43:48:35:15:17:9e:
                    10:0d:6d:0e:7b:0a:99:0f:98:6a:64:56:8e:06:42:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B0:6C:6B:95:06:30:43:C0:5D:65:F0:19:62:79:D2:04:C5:42:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:02:e0:13:4f:fc:e5:6e:ac:3a:06:8a:79:de:26:d1:37:95:
         8c:69:59:e7:91:42:08:70:c0:c0:bc:2b:9a:73:88:97:dc:1f:
         26:ee:51:c7:57:06:ec:8c:55:78:f6:67:c9:e2:d5:1f:9c:35:
         2c:d4:ed:6b:86:51:fd:63:75:ec:07:fa:13:1b:a9:c7:67:31:
         bd:fb:a4:36:b5:0d:7d:a4:76:f9:68:8b:ef:77:d6:0a:4b:ea:
         cb:1c:10:c1:63:21:c1:91:00:a4:38:97:40:3d:9a:df:a5:63:
         34:69:c7:d3:d8:ed:5e:9f:62:37:b5:3b:d0:7b:0e:20:4c:fa:
         7f:fb:b1:6b:d2:f2:f9:f8:1c:8a:c0:8b:56:cd:4d:b3:68:d0:
         ec:18:2d:fc:db:51:63:3f:e4:49:06:16:43:50:17:55:86:e2:
         83:75:7c:0e:1d:d7:b5:14:3d:a7:8e:c6:c7:fe:58:76:43:59:
         cd:06:81:12:b2:35:fe:df:e9:97:67:59:03:7e:31:54:ae:67:
         f8:8b:43:3b:23:37:72:40:0c:a7:7f:d3:67:57:74:46:53:43:
         c7:16:c2:bc:33:57:6a:c3:ca:4c:5f:77:77:72:fd:63:ee:49:
         5d:71:a2:b1:1d:72:ac:7b:39:f1:7e:38:9a:fb:2b:07:5e:e5:
         7d:4a:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:46 2026 by rpki-client