Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa
File:                     a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa (raw, json)
Hash identifier:          NVh1llQwi0NxBCwgTHWOsKGbifzJ8SYiGQRT+TWP1pU=
Subject key identifier:   8A:9A:66:3B:9D:5E:93:A0:4A:DD:B8:DD:29:D3:20:7E:8F:43:F4:6E
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584D1B19EBEABBEA13A4FAF32300
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        148.59.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:eb:ea:bb:ea:13:a4:fa:f3:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=073567ba-5660-4855-80ef-8fef8a4e4ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:47:e3:04:f1:d9:af:3e:14:08:a1:e4:76:
                    a8:5d:bb:3f:78:32:14:1a:4b:82:28:20:57:f0:e9:
                    a0:d4:02:11:6b:82:01:e7:ba:74:5b:42:1d:7c:b6:
                    d8:2b:97:a8:5b:a6:d2:c4:41:88:4e:b2:a6:83:34:
                    ab:8d:e4:66:be:e9:be:96:c0:d5:88:6a:2b:7c:eb:
                    97:fc:6f:6a:97:28:55:5f:15:df:d7:79:08:4b:bd:
                    0d:1d:fd:0e:8e:b0:ae:36:df:f2:df:25:d8:28:6d:
                    ed:2c:49:3f:7d:a5:8c:71:df:d8:30:db:37:fa:d5:
                    b9:80:db:93:ef:3a:c1:96:14:86:1e:73:a2:66:7c:
                    eb:a6:1c:d0:c0:8c:dd:c8:11:da:c8:cd:63:dc:29:
                    08:e9:70:22:5b:65:7b:ee:eb:bf:0f:ab:8d:0b:54:
                    a3:c1:5b:f1:38:40:48:ee:c6:66:1d:a1:15:99:45:
                    d0:c7:e7:c7:cb:6f:fa:dd:84:04:77:3f:ec:e0:88:
                    06:3b:01:3b:f1:99:73:65:57:cd:79:74:1d:dd:d6:
                    06:cc:05:1c:2b:b0:b2:9e:7e:08:5a:d1:bf:4b:4a:
                    06:aa:33:c6:65:6d:f7:6e:94:0e:2f:0f:12:3e:68:
                    25:43:2c:f2:96:99:14:b0:21:f6:3f:1b:40:97:ed:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:66:3B:9D:5E:93:A0:4A:DD:B8:DD:29:D3:20:7E:8F:43:F4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/a038c094-5c97-3abd-9c49-a4f0cb3bd50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:89:b6:11:ef:7a:06:c0:56:19:10:a4:90:b0:87:98:2b:
         cf:c4:15:51:3f:2a:ad:bc:5c:8e:ee:16:4e:b8:3f:35:d7:c7:
         5e:b3:67:95:bc:2b:cc:d7:e0:bc:d2:43:b3:ab:37:53:a7:e0:
         41:57:30:5d:00:a2:99:cb:23:e9:15:4f:28:26:87:6c:97:79:
         57:6a:21:1a:b4:24:67:4c:40:96:a8:ba:62:4b:1a:1a:83:df:
         fe:08:8f:2f:57:11:c9:83:d5:e4:0c:39:c2:0d:cf:d5:85:63:
         bc:61:e3:2a:71:34:9c:0b:dc:6d:73:f8:c7:f7:fd:b3:78:fe:
         36:57:92:9a:25:ca:b4:de:de:4c:03:fa:51:2f:af:72:5d:df:
         6b:70:70:3b:d1:6e:0c:ca:9a:12:79:2d:c5:e7:c8:2c:aa:2d:
         41:5d:c1:2b:c0:7a:37:03:35:c9:3f:67:fc:b1:79:77:88:71:
         3b:ba:ef:67:3b:2e:42:6b:37:99:55:6d:e1:7a:e7:2f:82:73:
         17:70:ab:6a:5f:4f:41:ca:fa:09:a6:57:f7:98:d5:77:4a:d2:
         66:a4:34:cf:e1:75:5c:07:55:9d:14:14:95:9b:9d:3d:f1:6f:
         04:8b:74:9f:aa:cf:3d:b8:55:f5:23:42:15:06:10:9b:f6:b1:
         93:ba:46:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGevqu+oTpPrzIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk
YjU1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MDczNTY3YmEtNTY2MC00ODU1LTgwZWYtOGZlZjhhNGU0ZmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA161H4wTx2a8+FAih5HaoXbs/eDIUGkuCKCBX
8Omg1AIRa4IB57p0W0IdfLbYK5eoW6bSxEGITrKmgzSrjeRmvum+lsDViGorfOuX
/G9qlyhVXxXf13kIS70NHf0OjrCuNt/y3yXYKG3tLEk/faWMcd/YMNs3+tW5gNuT
7zrBlhSGHnOiZnzrphzQwIzdyBHayM1j3CkI6XAiW2V77uu/D6uNC1SjwVvxOEBI
7sZmHaEVmUXQx+fHy2/63YQEdz/s4IgGOwE78ZlzZVfNeXQd3dYGzAUcK7Cynn4I
WtG/S0oGqjPGZW33bpQOLw8SPmglQyzylpkUsCH2PxtAl+1YwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIqaZjudXpOgSt243SnTIH6PQ/RuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1
ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvYTAzOGMwOTQtNWM5Ny0z
YWJkLTljNDktYTRmMGNiM2JkNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3
MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1
ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2
YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+fibYR73oGwFYZEKSQsIeYK8/EFVE/Kq28XI7uFk64PzXXx16zZ5W8
K8zX4LzSQ7OrN1On4EFXMF0AopnLI+kVTygmh2yXeVdqIRq0JGdMQJaoumJLGhqD
3/4Ijy9XEcmD1eQMOcINz9WFY7xh4ypxNJwL3G1z+Mf3/bN4/jZXkpolyrTe3kwD
+lEvr3Jd32twcDvRbgzKmhJ5LcXnyCyqLUFdwSvAejcDNck/Z/yxeXeIcTu672c7
LkJrN5lVbeF65y+Ccxdwq2pfT0HK+gmmV/eY1XdK0makNM/hdVwHVZ0UFJWbnT3x
bwSLdJ+qzz24VfUjQhUGEJv2sZO6Row=
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:07 2026 by rpki-client