Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
File:                     299846a5-9f5b-32a0-8287-286e8857888f.roa (raw, json)
Hash identifier:          cPKOY/Z/86l3uh53Uc5IBdMIcgVWOyj3j4QS7RDOw3s=
Subject key identifier:   6D:C5:F2:80:B5:D7:A4:74:83:84:F6:15:76:84:91:0B:37:42:98:7B
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584AAF2BF1644B4EFC6FE9512680
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa
Signing time:             Tue 29 Jul 2025 23:35:46 +0000
ROA not before:           Tue 29 Jul 2025 23:35:46 +0000
ROA not after:            Mon 27 Oct 2025 23:35:46 +0000
asID:                     16509
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:2b:f1:64:4b:4e:fc:6f:e9:51:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jul 29 23:35:46 2025 GMT
            Not After : Oct 27 23:35:46 2025 GMT
        Subject: CN=dbae18e3-8771-4308-a3a8-421bc232111d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:07:57:f4:d1:b4:02:8d:b7:66:0e:48:5e:
                    38:9e:41:26:16:85:70:c1:08:5e:86:cb:db:1b:e7:
                    fd:39:40:62:ee:e7:ce:16:98:96:9f:9a:3f:cf:67:
                    0e:2c:21:25:11:21:16:bb:7d:d5:87:72:9c:c5:bd:
                    a2:9b:66:08:c2:d8:c9:db:3c:7f:f6:8c:34:10:52:
                    3a:67:e4:c5:a3:0b:ba:8b:53:76:39:21:64:de:27:
                    4f:f1:32:e4:ff:31:9c:c4:6b:65:77:5d:3a:71:4c:
                    10:75:61:29:de:88:a8:fa:6d:c5:7f:d4:1d:72:77:
                    fe:f5:71:98:d8:cb:46:3f:8d:52:2d:b5:4d:c7:e7:
                    1c:70:14:77:7a:4a:fc:5d:7d:81:75:50:b7:12:89:
                    ec:1b:1e:33:47:26:1c:e8:84:17:98:55:e1:fb:24:
                    1c:9f:62:4b:af:47:8b:bf:7a:57:20:6b:95:a4:9d:
                    d6:19:a8:5d:97:a8:f5:52:c2:3e:96:2a:53:18:14:
                    a3:a4:b9:97:7d:30:95:dc:1c:d1:3b:07:4c:f3:6e:
                    7d:e0:0a:cd:b7:93:81:31:f1:9a:54:ee:c0:55:2c:
                    52:bd:c8:a7:5b:de:3c:65:83:49:f5:b2:6f:ee:31:
                    de:2c:04:06:b6:46:c3:a9:57:b3:92:6d:69:cd:28:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C5:F2:80:B5:D7:A4:74:83:84:F6:15:76:84:91:0B:37:42:98:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/299846a5-9f5b-32a0-8287-286e8857888f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:91:05:2f:61:a9:52:d3:5e:ee:fd:66:78:cc:89:c0:eb:fc:
         4a:e8:db:0e:d0:04:d9:4f:da:36:15:d0:ef:b0:ea:6b:e4:54:
         61:3e:f6:91:1f:a9:d5:db:43:6b:76:9a:ac:55:6d:45:92:16:
         ea:39:86:b7:c4:de:3e:a8:a9:59:0c:f6:32:99:42:8e:f0:25:
         6f:42:b3:be:fd:61:cb:01:6c:d2:e1:59:6f:d4:28:82:e4:ff:
         7a:7c:b4:b9:16:d2:32:88:00:51:6b:c7:e5:62:b7:fb:de:3c:
         ab:ff:34:6a:11:58:cd:57:e8:d8:da:61:40:2f:94:f4:fa:51:
         00:cc:55:51:36:2f:8e:42:e7:b9:c3:49:79:9f:0f:1f:11:18:
         4b:99:4e:52:18:c5:f9:be:be:14:17:51:eb:23:46:24:3f:52:
         26:8f:b6:f0:25:ca:b8:60:68:6d:47:93:24:f4:92:e5:04:65:
         d9:88:6a:bd:69:49:a4:a4:bc:9c:8b:3b:c2:1f:04:a7:77:eb:
         f6:2d:a2:c0:33:c0:e6:90:b1:ac:f0:fd:a8:de:1d:02:bd:74:
         69:09:b7:0c:93:80:a9:51:36:33:bf:1e:90:75:2c:89:c8:ef:
         d2:e5:1c:65:5d:9d:80:8e:0a:f4:e8:97:39:3c:02:9f:b6:79:
         da:77:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:35 2025 by rpki-client