Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
File:                     299846a5-9f5b-32a0-8287-286e8857888f.roa (raw, json)
Hash identifier:          2a8JHIDhPX7r1Z7AQ7qC6jcUwkm7jYynUzjRp0iO4NQ=
Subject key identifier:   60:F8:FE:19:7A:16:90:6E:F5:38:37:7B:10:29:FB:C7:8C:F9:B1:54
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584E2D9EFFD45F7E8B2CF231A500
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9e:ff:d4:5f:7e:8b:2c:f2:31:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=0416ebb6-2c7e-4699-be9b-8884d5bad67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:99:ff:f4:39:78:91:37:50:cf:2e:cc:78:
                    81:1c:94:b4:74:be:be:1e:77:df:1a:1e:76:60:44:
                    1c:ab:c9:dd:6f:17:d0:1a:44:da:73:9b:e7:51:36:
                    57:92:1f:97:91:26:44:21:01:82:bf:1e:86:63:93:
                    a7:52:61:14:78:2c:76:b9:75:d6:60:08:4a:de:bb:
                    a6:58:c6:e3:9e:c4:d0:bd:44:df:94:ec:9c:b3:c6:
                    44:ef:97:2f:02:e0:f8:64:a0:86:f4:ea:27:00:9c:
                    fb:f1:38:37:d2:51:22:73:3b:7b:e0:e6:ea:76:a7:
                    a4:b3:b2:e0:e3:23:33:76:c2:da:59:cc:d6:35:09:
                    da:9a:fd:86:84:63:db:72:fb:48:81:4f:44:e4:f0:
                    7c:15:9a:01:cc:cf:ca:40:9b:6b:71:42:af:4a:22:
                    95:8d:92:a7:ba:32:90:7b:b5:0b:8c:4a:ad:26:21:
                    c1:4b:32:df:ce:dc:e7:79:83:0a:44:a5:22:f8:5e:
                    50:da:26:0a:08:12:af:64:1e:ce:78:37:b6:76:a1:
                    1c:c2:ec:47:3e:fc:cd:42:63:10:88:41:59:27:bf:
                    a2:f9:3b:fd:15:90:dd:b9:c5:a1:d8:c5:14:97:75:
                    f8:4d:64:17:25:fe:c7:23:71:0c:39:71:fa:90:6f:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:FE:19:7A:16:90:6E:F5:38:37:7B:10:29:FB:C7:8C:F9:B1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:2f:59:1b:80:0a:9b:7c:2d:29:61:af:ef:e6:9f:06:64:
         bc:a3:64:71:73:a9:ea:00:52:a8:70:92:ff:e2:ab:16:ad:2b:
         b2:82:d7:e7:6f:03:32:28:c4:b5:4d:2e:3f:c8:2f:fe:48:d6:
         39:a6:07:65:bf:4e:55:a9:b5:25:fe:b6:c6:77:eb:11:fd:90:
         ea:95:52:3f:de:6a:60:48:e1:24:a7:cd:98:1b:82:16:c3:9a:
         8e:5a:cb:60:b3:81:b9:95:72:0c:76:13:53:22:2d:10:a1:60:
         66:fa:14:ce:43:e2:fb:20:39:35:13:28:a1:f8:a4:a0:b1:e5:
         88:f3:b3:8f:14:4c:69:4f:aa:44:97:fe:62:e9:26:0e:53:df:
         5d:78:cf:64:54:6a:3e:81:23:c5:89:33:d6:78:2a:6b:26:17:
         76:32:73:a6:6c:f1:3b:ae:03:59:ae:0c:0f:92:45:d6:75:38:
         a6:5f:40:06:c9:15:f8:c6:23:17:0e:23:3f:c2:e0:f2:b6:70:
         91:03:79:9a:bb:5d:b3:27:4b:b3:fe:3c:0a:60:9c:25:c2:2d:
         cd:d0:88:77:84:d2:95:a4:ef:a0:ff:8c:1d:2d:ea:51:7b:9a:
         bc:46:8b:0c:b3:15:5e:c9:72:c4:40:a3:fe:03:cf:a0:80:d0:
         52:db:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:34:04 2026 by rpki-client