Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/8f82075c-24d1-36d5-aa5e-bf38fbd00cb9.roa
File:                     8f82075c-24d1-36d5-aa5e-bf38fbd00cb9.roa (raw, json)
Hash identifier:          /x7ZmD5mFQ3ts1QYQmfP2L7vurdQxoXErb89tEaHTow=
Subject key identifier:   BF:B8:3C:E4:C8:71:77:B0:BD:8D:37:43:67:68:B6:7B:56:E0:1E:B8
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584EA79899A378A9065E50F72B80
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/8f82075c-24d1-36d5-aa5e-bf38fbd00cb9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        148.59.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:99:a3:78:a9:06:5e:50:f7:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=77cdec9d-51b1-4523-a438-1d54b5a30025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:17:93:70:a1:dc:11:22:7c:a8:5e:c1:e1:
                    ef:0d:b3:6a:1e:34:0b:a5:eb:7d:b3:8d:55:f5:0c:
                    51:da:55:d2:c0:a9:df:1b:88:39:b1:6d:7a:16:65:
                    ae:89:83:be:c2:e7:ed:6b:32:1d:5e:fc:71:e0:07:
                    1a:dc:92:a3:ed:40:d9:c0:69:fc:bf:c8:09:f6:dc:
                    11:62:40:6d:29:14:d7:33:06:0d:96:ba:41:2b:5e:
                    ff:60:ae:62:ab:72:b1:78:a8:bd:31:59:76:67:22:
                    2b:bb:87:56:c1:15:5b:0e:88:f9:4f:20:cb:f0:82:
                    4f:42:ee:45:d9:2d:0f:74:c0:77:4b:4f:13:43:03:
                    8b:a1:bf:c8:25:0a:f6:9d:73:4f:cf:e4:84:33:d6:
                    66:6b:90:f4:55:73:6c:d3:03:de:52:79:8c:e5:8d:
                    67:26:7b:c4:d7:65:5c:b1:72:73:75:2d:6c:58:f0:
                    4c:f4:e8:ba:2f:3d:c0:39:fe:68:14:09:06:3a:06:
                    c1:62:c6:ba:ec:db:d9:33:c6:a7:d3:97:62:b2:80:
                    8e:82:34:32:77:15:b1:33:32:5e:5d:6e:d5:24:66:
                    a0:2f:c1:38:d6:48:a7:46:f8:a8:74:a6:29:af:91:
                    13:22:48:cb:8d:9f:d6:be:69:9b:52:79:87:20:50:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:3C:E4:C8:71:77:B0:BD:8D:37:43:67:68:B6:7B:56:E0:1E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/8f82075c-24d1-36d5-aa5e-bf38fbd00cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:5d:73:73:e8:37:d4:3c:7d:7e:7a:4e:64:b8:7a:55:58:
         d9:1c:b0:5e:ae:f1:2e:c2:0c:89:6c:ed:7c:ff:8f:63:14:3a:
         17:9a:d5:47:3a:76:6b:fe:6a:7c:5d:bb:ce:8c:f4:d2:24:99:
         46:b2:c1:df:8a:74:60:d9:33:a3:33:dd:3d:71:d8:57:bd:a2:
         96:d3:14:22:b2:5f:c7:58:ae:3b:15:9d:3b:ec:53:45:e5:9c:
         7d:1f:d8:33:63:5e:06:c2:b8:c8:76:15:51:8e:07:a3:0a:7f:
         17:df:39:17:b4:ac:c4:c7:9d:a5:cd:31:41:9c:d0:96:00:4a:
         16:e9:35:86:93:2b:df:16:85:81:9e:de:0f:29:03:43:da:8b:
         90:58:cc:6c:8c:ea:ba:a9:46:2b:2b:73:2b:93:09:3f:8c:de:
         cd:87:35:a4:c2:17:42:90:a9:f5:b9:19:dd:49:0d:dc:8f:73:
         ff:65:d0:9b:92:98:90:70:fa:92:59:94:06:6a:af:6c:4f:2f:
         ce:f8:91:7c:d5:a1:b1:93:40:67:ff:08:16:fd:ec:db:9e:a3:
         b3:ab:69:45:eb:d4:1b:ad:b4:95:8b:49:45:07:b1:5c:cc:5c:
         0f:02:ed:25:88:c5:94:35:52:2d:c3:8c:17:07:67:93:37:2f:
         86:26:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:43 2026 by rpki-client