Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
File:                     299846a5-9f5b-32a0-8287-286e8857888f.roa (raw, json)
Hash identifier:          DzKt1RT+tsIe2yahJzV6L5mzxgzxKyzD33AdisuDWAg=
Subject key identifier:   EE:D8:C0:37:6F:F7:DA:3E:36:0F:B0:83:D2:3F:72:DE:D2:F1:6D:7B
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584D4D5A3C0F743F9C0CC19BC780
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:3c:0f:74:3f:9c:0c:c1:9b:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=34e4ba6e-6571-4ad7-89f3-8be349eb5c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:ff:42:6f:38:e8:29:09:f0:b2:98:d6:b8:
                    09:7e:b3:88:03:d4:33:a9:b4:2c:0e:5f:e9:de:56:
                    61:e8:6a:b8:c0:93:5f:bb:83:b4:13:31:8c:e9:11:
                    c1:d9:fe:c8:0a:29:e3:13:1d:db:78:e1:fa:78:50:
                    16:13:cd:f1:98:60:93:4f:2a:9e:88:a2:5d:7b:d7:
                    76:d4:6b:e3:f7:d3:1c:a0:bf:74:b5:87:79:b0:a6:
                    ac:b1:fe:c9:00:2a:5e:96:57:7a:93:a9:44:61:0a:
                    0c:3f:3b:6c:e2:ed:76:00:0b:46:52:ca:63:89:8f:
                    8b:31:e4:33:83:10:83:fb:63:52:d5:62:e8:c3:48:
                    79:24:70:7a:9a:73:18:a9:45:dd:e8:b9:bd:5a:38:
                    c6:5a:b9:d1:5c:73:c9:e9:88:51:47:2b:49:c3:e1:
                    7a:e8:34:11:e9:65:97:0f:d5:a2:32:dd:05:bf:db:
                    e5:f9:2b:83:76:df:71:9a:a0:d7:b9:b5:f2:5d:1b:
                    21:1e:e4:ab:96:9b:01:6a:6a:e1:0a:19:cd:34:56:
                    d1:17:a8:57:b7:b0:7f:bd:9e:1f:a4:05:39:00:6d:
                    de:6b:0d:ca:f5:dd:52:e5:a0:aa:56:50:ee:53:32:
                    d1:69:1b:d0:51:75:73:38:aa:d3:11:32:a4:29:17:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:C0:37:6F:F7:DA:3E:36:0F:B0:83:D2:3F:72:DE:D2:F1:6D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:24:f5:f0:1b:13:16:16:47:83:c2:ec:b3:fb:7d:68:03:e4:
         ed:22:8c:42:e6:54:e6:71:c3:8f:86:8c:b0:4d:f0:66:62:dd:
         f1:b8:7b:77:00:84:86:fa:4b:95:16:75:96:62:34:23:ca:62:
         fd:f4:49:b2:3a:ee:84:7e:b3:59:38:fa:73:36:43:fd:41:6b:
         1e:50:c2:2b:ea:ee:5d:92:61:cd:5e:4b:b5:58:71:f7:58:12:
         d9:1d:a7:7e:02:ec:5a:c8:79:b2:29:ac:b1:44:ce:aa:d9:73:
         21:8e:4f:d2:5f:05:ce:62:63:6a:81:8e:58:9e:a8:7a:5a:2d:
         78:0e:00:15:4f:c8:1f:e7:44:87:8f:28:e8:9b:52:ea:67:c5:
         82:b0:2b:5a:dc:36:42:cb:4e:b5:f3:59:c7:54:42:2f:24:17:
         1e:e7:2e:e9:fe:db:5f:87:af:29:61:f8:33:03:39:fa:0e:c1:
         e2:0d:41:b1:9e:06:2a:17:07:39:8d:40:bf:ac:33:7b:eb:24:
         84:4a:e1:81:d9:55:16:95:44:bf:54:8f:41:e2:b4:a8:30:b6:
         dd:a6:db:29:da:96:41:3c:a3:24:98:01:e3:08:78:20:cd:83:
         74:af:01:b4:53:d2:43:33:0e:a2:e4:2f:ad:04:8e:24:69:7b:
         6b:c0:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:28 2026 by rpki-client