Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
File:                     d75313c6-b694-319b-99ef-252d46e1d17d.roa (raw, json)
Hash identifier:          V3EnMUrgsLs67BBjhd2ZvWPVQULnOgaJXQRxi3fQkCM=
Subject key identifier:   CA:D1:80:F5:C1:7B:B7:DE:A7:AB:C9:2B:B7:A2:7E:4E:41:65:98:5D
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584ED0020940E2A54B1167EFB780
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:09:40:e2:a5:4b:11:67:ef:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=7a115f63-e904-4f28-9f9c-586fe343db5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:39:60:f0:0b:55:49:ae:7b:9f:07:c4:49:
                    3a:89:87:66:c2:42:e4:57:4d:28:5a:c6:29:65:68:
                    c1:d9:59:71:c9:a1:fd:59:a1:cb:ca:e8:93:8f:b4:
                    a0:f0:dd:aa:8e:8f:6e:5e:ba:ef:24:6b:14:ff:8c:
                    a2:d8:d2:49:c4:a1:82:09:3b:b4:59:bb:6e:09:ba:
                    33:92:8a:22:a2:f3:1d:6b:3c:ac:c4:bf:2c:63:ba:
                    69:25:96:94:f4:e8:d3:8f:ff:87:f0:7b:9c:dc:31:
                    7c:a9:dd:e7:40:61:7d:35:9d:53:1c:dd:30:cb:c1:
                    6a:c3:81:fc:3b:ce:76:0b:7e:38:a0:9f:68:5c:fc:
                    e5:1c:51:87:bc:95:1b:6a:09:1f:86:66:19:a4:ce:
                    5e:59:a4:18:50:c5:55:0f:58:5c:ba:94:ba:84:ce:
                    c9:64:d7:06:3c:68:95:a7:a4:37:e9:29:e3:33:4b:
                    6f:93:70:85:e3:3b:e0:7c:ba:26:1f:dc:6c:cf:de:
                    96:89:db:7d:c7:23:6f:a3:ab:4e:d3:25:7f:99:45:
                    b5:fb:fc:3b:31:10:74:d0:2d:23:b4:51:0f:8c:67:
                    09:d7:7a:05:37:97:aa:f2:01:ab:bf:45:3a:8b:74:
                    4b:be:04:c7:80:55:c8:af:2f:c4:dd:82:1a:3e:04:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D1:80:F5:C1:7B:B7:DE:A7:AB:C9:2B:B7:A2:7E:4E:41:65:98:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:36:a7:b8:a8:5d:7c:c6:64:c9:94:77:5c:2d:1e:b5:c8:
         2d:10:f7:7d:56:fb:59:9f:a3:50:e7:13:01:4c:1e:27:b4:ff:
         e8:1e:9c:d0:5a:88:c4:9b:6f:a3:78:0e:66:2d:09:c5:2e:c1:
         23:dd:91:db:19:2f:ee:aa:4e:8a:50:1b:10:14:37:90:86:7b:
         f5:82:75:3f:81:3e:61:2f:ec:ce:bd:96:46:41:2f:00:e4:6b:
         3e:ce:c2:3b:e2:69:bd:b0:57:ea:a3:21:1c:29:6d:3f:2a:6a:
         be:86:8b:b5:b5:df:9a:28:5e:4e:a0:6d:32:d5:e7:7b:2c:0f:
         98:c9:83:f8:c1:70:f0:54:da:6d:e9:a0:24:d5:c6:f5:d2:07:
         0c:f2:44:6f:8a:6f:7f:26:8b:1f:29:49:5f:b1:42:fc:c7:7a:
         24:bc:1d:46:83:52:f7:13:fa:d2:f8:35:c3:55:59:b8:db:ff:
         0e:66:c9:d0:ca:57:72:31:3c:3f:4d:79:86:82:b9:f3:8a:ae:
         9f:47:57:d0:62:61:2d:07:54:b3:3a:f1:ff:5a:3d:4c:62:16:
         09:c4:02:98:4f:78:31:d2:12:a5:67:d6:8d:19:f8:a0:6b:c6:
         80:2f:a3:71:8b:49:0e:2d:fb:d9:55:38:70:0f:13:19:cf:bb:
         e3:01:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:29 2026 by rpki-client