Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/b0db4dc5-2cbc-3d62-a8c9-3ce9f064c5d6.roa
File:                     b0db4dc5-2cbc-3d62-a8c9-3ce9f064c5d6.roa (raw, json)
Hash identifier:          sek8GJN8pSJlr6/FfFodTy/o0fcfsF7kaYYEqWhtaZg=
Subject key identifier:   17:D7:9D:BB:82:1D:09:B1:18:7A:44:0F:AA:19:EB:95:6F:9C:53:40
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584D1B19ECC5BDA2D93E69558B00
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/b0db4dc5-2cbc-3d62-a8c9-3ce9f064c5d6.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        148.59.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ec:c5:bd:a2:d9:3e:69:55:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=d6e2af66-2a09-4ab6-b5c7-b823328488eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:5a:4b:0a:6d:11:f6:d5:4d:51:ae:ac:98:
                    20:49:0a:c5:9e:01:c0:92:85:a6:72:98:f6:ee:72:
                    5f:dd:4d:f7:85:59:2c:b6:11:ba:03:b0:c5:98:6f:
                    df:bc:99:6d:1f:5a:05:24:b2:91:82:df:fd:ec:97:
                    a3:aa:ae:78:cd:e4:77:88:b3:6e:13:30:d1:1b:43:
                    2e:cb:7b:81:fa:97:be:b7:4c:15:2a:2d:a7:40:a3:
                    ca:10:ca:fa:96:01:8c:ea:55:81:3f:4c:26:e6:21:
                    69:8a:bb:8c:7a:d8:d2:f6:df:a8:f4:df:d2:1b:bc:
                    59:77:50:13:75:5e:7a:4f:8b:bf:1e:71:3f:59:d6:
                    fd:a2:50:a5:08:8f:42:a0:6b:4d:9d:7b:fb:88:69:
                    f2:a7:e4:fe:56:d0:5f:40:2b:c1:2c:df:a7:b3:15:
                    f4:d6:c1:5a:d5:8e:b1:c5:4e:23:d0:cb:b5:f1:e7:
                    8d:f2:e8:75:4a:87:96:e5:9b:d6:86:1a:2a:4b:85:
                    b6:df:53:19:0b:45:15:3b:08:2c:66:ae:bb:7f:a8:
                    09:52:00:78:99:ea:5e:c3:f9:0f:28:de:4d:44:ad:
                    65:e2:8f:a7:54:37:71:1e:dc:d5:1e:98:63:23:33:
                    86:c3:1c:7c:9a:fc:12:90:af:a7:00:eb:ad:4a:b9:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D7:9D:BB:82:1D:09:B1:18:7A:44:0F:AA:19:EB:95:6F:9C:53:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/b0db4dc5-2cbc-3d62-a8c9-3ce9f064c5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cd:4c:aa:42:44:35:6a:78:67:63:85:d8:f0:5e:61:1a:2d:
         91:d8:65:70:b4:e2:02:d2:ca:33:f7:b6:9f:45:1d:33:5d:79:
         c5:c1:2a:32:db:ed:3d:b1:91:78:6a:41:49:b0:9a:3c:ff:2d:
         8f:a8:e1:d5:e0:33:db:93:7a:80:ac:14:f3:f3:b1:f0:9e:14:
         2d:f6:21:2c:63:10:05:f9:fa:79:99:5b:81:96:9e:8b:72:7d:
         9c:80:6e:f7:73:57:e6:5f:26:9d:9d:36:f1:2e:14:42:2b:4d:
         37:0d:15:db:ce:78:4f:ef:27:61:1f:55:4a:65:3f:6e:6b:e6:
         7b:f0:94:46:e2:fb:fa:bd:bb:81:52:db:ab:cb:3c:b6:04:97:
         a8:09:49:54:b1:2c:2a:11:5e:69:6c:22:84:e0:a7:9f:71:5d:
         d8:84:20:f3:7f:fa:55:c7:61:b6:87:a0:2b:60:d5:a1:aa:62:
         c4:0e:61:e0:5c:36:4a:f0:ba:89:92:9b:95:3e:80:c9:47:5e:
         8c:0b:ee:46:ea:32:a8:57:ea:4a:b5:9b:ab:1e:c6:3e:a2:46:
         2e:55:53:91:0a:3f:51:a3:6d:de:1b:e0:a4:1d:13:8d:27:9c:
         ef:e8:4b:67:e3:0c:f2:93:f3:0c:56:a9:21:48:71:82:cc:83:
         7a:81:b2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:09 2026 by rpki-client