Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d802ce41-f218-3f61-acf4-d895fad5a3d5.roa
File:                     d802ce41-f218-3f61-acf4-d895fad5a3d5.roa (raw, json)
Hash identifier:          YAsaUdPipCRneKRiBKhJ+tr8En4CllGp9Uk6paID4nU=
Subject key identifier:   AA:3B:4C:DE:31:37:F4:A5:D8:4F:44:ED:3B:5A:7A:81:56:80:28:BC
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584E2D9F01F38F52E8C75D8FAF00
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d802ce41-f218-3f61-acf4-d895fad5a3d5.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        148.59.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:01:f3:8f:52:e8:c7:5d:8f:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=75305ada-ed4e-4467-bb8c-0d591ae5cacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:8b:59:33:c5:31:dd:f6:7c:71:f6:bd:e6:
                    50:92:f9:09:d1:27:9e:16:64:82:f1:55:0d:70:a8:
                    3e:16:50:7b:fe:49:e7:f3:e0:02:c2:ea:d1:b1:93:
                    e2:59:fa:aa:67:ec:06:d8:8e:20:de:5a:d2:88:04:
                    47:d2:01:2f:40:0f:42:13:31:be:ff:a7:ab:f8:bf:
                    ca:a7:1a:8a:e1:83:0d:ba:4b:f5:e5:24:6f:82:52:
                    ac:28:27:90:0b:7a:c9:7c:7b:ad:f4:b9:b8:67:29:
                    98:63:1c:d4:12:b3:e1:48:b0:e7:4d:0f:6a:cb:a9:
                    eb:60:73:a7:17:d8:23:17:af:ad:9a:82:fb:44:c8:
                    b8:e0:5e:89:bf:d4:6b:91:57:ab:37:38:ee:1e:cd:
                    1f:24:13:9d:01:3d:64:d8:75:28:d7:43:e4:de:55:
                    6a:dc:86:42:e6:a2:60:5a:89:1e:df:27:73:36:3e:
                    b8:1e:ce:36:d7:a9:7f:d8:22:1c:07:ca:32:b0:e1:
                    99:71:d4:43:89:86:94:a9:cd:2d:87:c9:2c:5a:0f:
                    65:02:ff:d5:9e:82:9d:81:f0:cd:5c:19:2e:ca:6a:
                    da:95:6f:46:b0:5f:e3:8f:ad:fd:9e:b6:c8:a1:5e:
                    25:9a:51:9a:dd:58:23:ba:f2:d8:56:96:0d:a0:27:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3B:4C:DE:31:37:F4:A5:D8:4F:44:ED:3B:5A:7A:81:56:80:28:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d802ce41-f218-3f61-acf4-d895fad5a3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:de:c9:6e:c0:32:fe:62:ac:a9:32:8d:02:2f:d8:35:8a:d4:
         ec:7c:fb:38:59:bd:4e:f6:e2:04:4f:55:9a:9a:a5:f3:54:f9:
         ec:f1:ad:da:c3:18:be:8d:98:58:3d:06:17:ab:de:7e:f6:1f:
         dc:7e:bd:61:94:9d:fc:6f:6d:21:9a:8b:c8:3d:bc:2d:65:7c:
         3d:1d:15:15:68:ae:05:57:e0:2f:57:21:de:63:2e:7d:48:80:
         d2:81:fa:64:21:0f:20:8a:d0:ad:d4:18:15:64:69:22:0a:25:
         ef:34:f7:3e:fe:71:1e:12:3d:04:a1:da:16:3c:85:74:43:37:
         73:e5:6c:26:09:aa:4c:bb:d6:13:7c:f4:6a:92:a2:55:13:97:
         f1:f4:56:cb:bb:67:9b:3c:52:ba:6b:c7:c1:4e:81:f8:b7:a5:
         fe:0b:0a:37:c6:c2:03:a6:c5:15:05:59:75:49:7e:a4:89:7b:
         65:c7:a0:d4:a5:22:48:26:9c:77:9d:da:d1:39:ea:fb:e1:26:
         6c:29:c8:ec:25:db:77:78:46:c0:7e:38:21:fe:c9:fa:8d:ec:
         4c:ec:ac:4a:64:d5:65:81:4b:45:af:4a:56:d8:94:7a:6e:f7:
         8a:ef:df:dd:4b:47:af:f5:48:e5:9a:bc:ee:bc:0c:54:c8:02:
         60:28:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:18 2026 by rpki-client