Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa
File:                     f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa (raw, json)
Hash identifier:          ao6bfcSbdIRS5kjoptjMatRCxusFQffWJJfqrSO+Eo0=
Subject key identifier:   66:F5:6D:A7:81:E0:3D:D7:7A:08:44:42:38:3F:A1:60:C9:B9:43:2D
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584D1B19EC12478CEA46E23A1000
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        148.59.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ec:12:47:8c:ea:46:e2:3a:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=630cc5a6-4a0f-4a2a-b998-4b3e8a2f4e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:c5:65:0b:24:ab:a0:3c:4a:28:f8:dd:cc:
                    6d:5f:18:49:2d:7e:4b:d7:c0:8f:13:ac:98:6b:7b:
                    09:87:01:ab:e7:c2:16:d2:9f:aa:b0:7c:ee:4e:51:
                    9c:0f:4c:f3:ea:f1:d5:54:9c:e6:ca:ff:96:3c:d1:
                    52:e4:32:7b:2d:fa:62:1a:92:fe:8d:d3:32:87:a0:
                    53:22:9f:3c:f9:d8:64:2a:58:bc:38:26:b8:bb:80:
                    fa:cd:0f:1f:f9:22:de:20:04:4b:ce:c2:7f:81:21:
                    3f:bb:d4:82:6b:bf:4c:76:d5:26:9b:3d:e7:26:73:
                    1f:36:f4:f6:76:ca:08:59:96:eb:9d:16:7a:7c:bc:
                    a3:1b:79:8c:86:45:6d:1f:a4:53:65:10:75:3d:86:
                    ff:49:f5:11:bc:de:ba:6c:8e:e6:7a:63:0d:dd:60:
                    23:c5:14:08:64:6d:93:fc:8f:13:8f:1e:9b:6f:af:
                    35:60:2d:e2:09:fc:5f:98:ca:3d:18:37:a8:9c:9c:
                    20:8e:16:6e:58:41:26:ec:3a:0a:da:48:12:18:83:
                    5f:f6:56:f8:b7:99:de:e1:bb:dc:74:2b:b0:7e:71:
                    65:8a:62:da:5c:21:a3:0e:d1:09:3f:6c:fa:57:7e:
                    fd:56:d3:86:ff:97:99:19:fe:a2:ad:7a:9d:b9:11:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F5:6D:A7:81:E0:3D:D7:7A:08:44:42:38:3F:A1:60:C9:B9:43:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:27:35:6c:bb:f8:4e:02:92:52:9e:76:5c:d3:b0:d7:b5:f4:
         01:0c:7b:d0:bf:ed:41:03:e9:e9:c6:8d:8e:f0:44:81:75:18:
         c6:43:3b:0b:95:a0:57:c3:cc:32:ea:91:6a:1c:52:52:1d:4b:
         a0:fe:ac:5e:66:d2:f9:49:ca:9b:9f:9d:ec:87:27:97:06:5e:
         14:a1:3a:30:60:db:42:88:84:98:e8:ac:6a:91:91:bc:bc:45:
         ab:51:18:3f:95:91:d0:9b:dd:04:3a:8a:68:f0:81:ec:7f:60:
         19:b4:9b:85:2d:44:7b:69:91:0a:74:c8:3b:c9:dc:c3:63:56:
         88:ae:cb:e0:26:be:40:67:76:b1:24:79:63:02:04:b2:11:d7:
         89:fb:5a:6c:43:11:fc:e4:4c:de:a9:ac:7d:d2:7a:a4:68:46:
         cc:ef:07:36:36:fc:6d:e3:74:1a:79:8d:db:3a:92:a9:16:a1:
         81:50:a0:5d:05:6f:ed:35:a9:c4:09:d8:18:e2:dc:54:af:8d:
         8c:37:39:b6:ff:1d:0c:60:af:dc:42:73:8f:90:77:2b:94:78:
         6b:37:4f:58:6d:dd:bd:32:6c:e1:6f:50:d9:68:9b:93:c6:75:
         89:2d:da:1c:10:f7:f2:a7:1c:47:f9:18:15:76:91:15:b0:69:
         78:c2:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:35:47 2026 by rpki-client