Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
File:                     d75313c6-b694-319b-99ef-252d46e1d17d.roa (raw, json)
Hash identifier:          6M7jZZ2C8YB00NQuEkRgQkodZH3mbxXoga9p2IIhOrc=
Subject key identifier:   C3:48:13:6B:BD:0A:79:61:09:3F:0B:B3:3F:9B:C7:DF:BA:5B:DD:EE
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584E2D9F3BB0779FBE64923D4B40
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:3b:b0:77:9f:be:64:92:3d:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=b5510283-9e6c-4e4a-84a4-6548d61ebfa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:85:e5:0e:bb:a3:84:c2:af:f1:35:d0:28:
                    e6:1c:49:43:2e:dd:59:70:c6:44:57:9b:37:6c:32:
                    1f:14:1f:73:58:b7:78:64:bc:8e:d5:3a:0b:9f:b6:
                    aa:0d:21:f5:a6:11:b5:f7:46:16:52:c5:fb:13:d5:
                    d9:e1:b8:5c:77:31:db:c6:50:31:ac:82:45:73:3b:
                    63:29:b4:06:6e:bc:f4:c2:b6:35:12:56:bb:3e:8a:
                    32:59:e7:bc:e7:4b:9b:e9:0e:66:e6:d7:41:d1:5d:
                    d0:00:db:79:c7:42:51:15:56:41:22:4c:eb:a9:39:
                    09:8e:f9:f3:cf:26:91:3e:39:14:02:af:9e:7c:7e:
                    0e:d7:5a:a8:ce:ec:6a:22:a2:7e:4e:b1:1d:04:6f:
                    a8:a7:89:44:7a:4a:7e:09:a6:38:d3:74:af:9e:4f:
                    fc:fb:15:75:9c:0a:e4:9f:84:d5:c7:4c:71:88:8e:
                    41:4e:30:3b:dd:c7:c9:08:53:f2:8c:0a:50:4c:b2:
                    ca:83:b7:df:e2:82:e3:ff:e6:99:7e:95:04:1e:38:
                    0e:1b:5d:85:16:77:08:72:58:8a:03:0e:d0:fe:cf:
                    e0:75:8e:0d:09:af:df:99:ed:a2:8b:74:f0:41:96:
                    7e:48:e8:83:62:d0:f6:00:15:e9:d9:a4:47:cd:39:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:13:6B:BD:0A:79:61:09:3F:0B:B3:3F:9B:C7:DF:BA:5B:DD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:d5:e1:33:f4:87:1f:fa:7e:ee:c9:87:7a:b1:7f:93:a2:
         60:65:81:02:05:83:3f:af:ba:23:8a:63:8f:2d:ad:6f:f3:dc:
         4a:0e:92:d4:52:b2:a9:66:89:ed:62:76:d7:1f:b1:e3:39:da:
         fc:27:04:bf:b4:ef:31:24:8e:38:ef:a3:b5:8a:4b:70:f1:e3:
         f9:d9:38:1f:a0:b8:c0:c5:b0:e9:21:d7:f8:d0:42:12:05:25:
         6c:e0:7c:b2:51:d8:94:60:1b:99:db:a0:8c:61:84:b3:a5:e2:
         fd:21:d0:19:d8:8e:00:da:33:4d:35:6d:45:a1:a6:9a:b9:46:
         f4:a5:cc:9f:de:19:80:4f:b9:c4:f3:21:ef:3b:f9:02:2a:34:
         70:26:52:db:2e:d8:0c:65:c5:0d:e9:48:e6:3d:be:cc:e3:2f:
         3a:ec:92:16:e0:48:cf:6a:a8:3b:67:49:bb:1c:18:a3:c6:9b:
         25:34:18:a8:6a:f1:51:9b:f1:ac:f3:80:ca:5c:6f:6f:0c:40:
         4f:f5:9d:ae:c4:44:ef:5b:71:04:b1:76:15:59:34:05:dd:c0:
         c3:b7:81:cc:2c:70:24:c4:19:21:a8:9b:6b:fb:5a:96:bb:62:
         56:8e:e5:00:1c:da:ad:5c:01:a7:26:58:a6:2d:ca:0b:c2:53:
         3f:46:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:18:25 2026 by rpki-client