Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/748a0296-eb52-3126-b3bd-8b17366f382a.roa
File:                     748a0296-eb52-3126-b3bd-8b17366f382a.roa (raw, json)
Hash identifier:          /Gb0LUVdD8eHmXsqkE5Js+pmVGxhMqOhw8R+7QJKEqw=
Subject key identifier:   00:BE:7C:B8:88:4B:53:3D:F1:FC:07:E5:2A:98:37:EA:57:C9:A3:37
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584D1B19EC772531E41F9E98AD00
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/748a0296-eb52-3126-b3bd-8b17366f382a.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        148.59.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ec:77:25:31:e4:1f:9e:98:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=9acfafa4-dcf1-4044-8d19-12f1f5878e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:3a:2d:29:aa:96:a1:91:d9:1e:d0:f3:fe:
                    2f:aa:9e:f6:70:7e:67:d5:6d:bb:30:e6:95:a0:d6:
                    cc:b0:14:90:73:49:c9:1a:8c:b4:90:02:39:11:3d:
                    13:f4:62:5c:2f:f8:e5:c0:97:17:1f:b4:ea:2d:ef:
                    00:3a:86:85:6b:f7:1c:52:d0:4e:4e:ff:5b:84:27:
                    8f:a9:c6:1d:d5:25:c9:00:92:48:44:47:31:ca:e1:
                    64:15:23:6a:d4:26:66:9a:49:4e:18:5a:c3:72:13:
                    37:37:76:ae:85:26:17:79:16:a4:3a:91:26:20:2e:
                    2f:c8:63:a2:d6:41:22:72:b7:6a:e5:6e:50:a5:61:
                    d9:78:a3:70:a9:57:3c:92:29:d1:73:8b:a7:49:da:
                    c6:56:86:be:eb:84:80:29:ba:14:b4:d5:b8:95:a6:
                    15:92:eb:86:0e:04:2c:8e:f6:8c:a6:ed:8b:ee:1b:
                    8c:79:73:cc:d7:93:45:4f:55:b7:4d:50:82:60:7b:
                    e2:58:e3:db:08:ba:df:72:13:51:24:f0:99:b6:6e:
                    3d:53:90:7f:a7:1f:fc:44:54:1a:30:f9:ad:04:d9:
                    14:22:26:82:bc:c2:e9:7b:74:06:6f:04:4b:10:be:
                    a5:b4:73:d9:4a:8a:ed:9c:72:65:32:b2:88:18:06:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:7C:B8:88:4B:53:3D:F1:FC:07:E5:2A:98:37:EA:57:C9:A3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/748a0296-eb52-3126-b3bd-8b17366f382a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:18:40:68:2a:b2:b1:98:00:cc:ca:f3:f4:f1:de:ad:8b:12:
         7f:46:8b:24:93:b5:3c:43:8e:8c:ad:c3:f1:c9:e7:33:a3:4f:
         94:6d:43:da:66:db:1d:6a:59:cd:c0:cb:06:17:f9:80:80:5b:
         77:18:90:ac:b0:b2:da:8c:af:db:ac:35:6b:8a:b3:38:30:b8:
         79:6c:42:fc:4e:a8:d3:6f:d0:bd:2f:56:28:4e:95:0e:04:b4:
         37:7b:e2:77:24:0d:37:cf:96:42:88:bd:43:22:6d:b7:88:67:
         b7:b7:2e:5c:fa:9a:26:7a:44:f1:88:6d:5e:60:d1:21:aa:0b:
         ac:14:26:a8:bb:90:bc:5d:0f:71:a9:c7:99:c2:a1:f1:06:4b:
         b7:9b:b2:6e:31:61:8a:1c:09:44:6f:82:c5:7d:62:d2:df:5f:
         c5:12:ec:01:3b:8c:65:97:cd:84:60:dd:da:3c:10:57:ae:67:
         f0:77:36:a3:a5:77:11:76:af:5c:6e:15:74:21:25:dc:10:90:
         f5:07:d9:e1:24:ca:a4:aa:90:27:e2:d4:ab:d5:e8:47:b6:97:
         02:36:ff:30:e4:b2:be:f1:66:eb:5e:aa:3d:26:ac:ea:3d:54:
         d7:06:47:b2:85:83:92:dc:60:cc:33:a7:33:59:94:a0:db:fd:
         e5:29:59:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGex3JTHkH56YrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk
YjU1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
OWFjZmFmYTQtZGNmMS00MDQ0LThkMTktMTJmMWY1ODc4ZTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6U6LSmqlqGR2R7Q8/4vqp72cH5n1W27MOaV
oNbMsBSQc0nJGoy0kAI5ET0T9GJcL/jlwJcXH7TqLe8AOoaFa/ccUtBOTv9bhCeP
qcYd1SXJAJJIREcxyuFkFSNq1CZmmklOGFrDchM3N3auhSYXeRakOpEmIC4vyGOi
1kEicrdq5W5QpWHZeKNwqVc8kinRc4unSdrGVoa+64SAKboUtNW4laYVkuuGDgQs
jvaMpu2L7huMeXPM15NFT1W3TVCCYHviWOPbCLrfchNRJPCZtm49U5B/px/8RFQa
MPmtBNkUIiaCvMLpe3QGbwRLEL6ltHPZSortnHJlMrKIGAbHZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAC+fLiIS1M98fwH5SqYN+pXyaM3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1
ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvNzQ4YTAyOTYtZWI1Mi0z
MTI2LWIzYmQtOGIxNzM2NmYzODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3
MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1
ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2
YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAYQGgqsrGYAMzK8/Tx3q2LEn9GiySTtTxDjoytw/HJ5zOjT5RtQ9pm
2x1qWc3AywYX+YCAW3cYkKywstqMr9usNWuKszgwuHlsQvxOqNNv0L0vVihOlQ4E
tDd74nckDTfPlkKIvUMibbeIZ7e3Llz6miZ6RPGIbV5g0SGqC6wUJqi7kLxdD3Gp
x5nCofEGS7ebsm4xYYocCURvgsV9YtLfX8US7AE7jGWXzYRg3do8EFeuZ/B3NqOl
dxF2r1xuFXQhJdwQkPUH2eEkyqSqkCfi1KvV6Ee2lwI2/zDksr7xZuteqj0mrOo9
VNcGR7KFg5LcYMwzpzNZlKDb/eUpWf0=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:50 2026 by rpki-client