Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/2b2ffb0f-f2b5-3708-9840-a32707ed8b05.roa
File:                     2b2ffb0f-f2b5-3708-9840-a32707ed8b05.roa (raw, json)
Hash identifier:          klMVeDbkuwHIftW+WAFKne1ugX5fI4SlzeVYh4y0lq0=
Subject key identifier:   E2:79:D4:1E:0A:B0:9B:B5:39:CF:1A:28:B5:1E:0B:72:2E:56:32:29
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584DFBD5CD26E09CE84B02F6CF80
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/2b2ffb0f-f2b5-3708-9840-a32707ed8b05.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     16509
IP address blocks:        148.59.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:cd:26:e0:9c:e8:4b:02:f6:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=2fc92868-92a3-4bf7-bc61-6ab19566e08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:ca:38:55:bb:47:3f:03:c2:fe:c3:be:27:
                    21:2a:6b:c3:67:98:d5:c2:89:cd:8b:b7:7d:27:1c:
                    79:60:ff:2e:cb:68:e3:8b:1a:87:14:78:ed:28:53:
                    45:d1:86:ea:00:8a:7b:52:dd:89:15:ef:e9:d3:b1:
                    30:35:dd:db:26:7d:12:a4:e1:2f:ec:ee:fc:bb:df:
                    e4:e4:eb:dc:5b:4e:f3:78:70:02:42:ca:71:46:c7:
                    e4:ba:2d:1f:85:95:82:4f:5a:0c:df:45:3f:b0:5f:
                    c5:d5:5e:fe:3e:7e:a8:41:8d:e1:cb:8a:11:89:d2:
                    1d:85:9d:13:7f:b9:50:41:71:8f:a6:fe:48:1a:14:
                    8c:64:ad:ed:bb:10:d3:15:8d:b2:6a:dc:dd:a2:c9:
                    9a:47:9d:4c:30:59:df:5d:07:88:55:cb:f0:11:a5:
                    63:11:62:1c:8e:15:36:0c:08:a6:34:2b:34:ee:41:
                    76:52:f4:a8:3c:f6:e2:42:9d:17:d9:88:d9:09:b3:
                    94:86:26:dc:6c:7b:fc:cc:98:65:05:4b:07:1f:0f:
                    5b:53:f0:a5:e4:7c:36:70:60:6a:98:de:db:d3:83:
                    d5:8c:c0:1b:0b:35:13:b0:3c:10:86:b3:87:79:80:
                    77:76:28:4c:0a:82:0d:ea:0e:74:5e:c8:10:a5:c8:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:79:D4:1E:0A:B0:9B:B5:39:CF:1A:28:B5:1E:0B:72:2E:56:32:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/2b2ffb0f-f2b5-3708-9840-a32707ed8b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:a2:2f:69:2a:9d:c6:01:8a:d0:c3:16:e8:e0:2d:99:cd:
         62:28:1f:d8:3f:00:6c:d0:36:94:32:8a:5f:d1:6a:ed:68:c0:
         c0:3d:34:99:4b:d8:96:97:36:65:bf:20:49:f9:3f:d2:38:0f:
         a4:26:6f:b3:3e:16:1a:dc:50:5e:5a:e9:9d:b1:36:4b:3d:e2:
         ce:61:39:6d:dd:10:aa:5a:9b:ba:97:ef:87:c1:95:7e:12:8d:
         9f:08:cb:ff:96:a2:8b:c0:d1:de:6e:ee:c5:e8:f4:b7:ec:af:
         c4:36:a6:5e:01:5d:8e:34:53:cb:9e:5c:7e:a0:09:fb:0f:85:
         19:8f:ae:1e:0f:6b:1f:91:91:f1:ea:44:dc:cd:d1:71:29:77:
         25:9a:2a:2e:db:44:3e:98:a7:a7:24:7d:d7:43:f1:5d:b4:7b:
         98:3b:bc:fe:c0:a3:fb:c5:8e:59:1d:02:9f:ed:82:fd:49:3a:
         67:24:43:53:c6:c1:b9:c7:ec:3b:b3:22:4c:2b:01:e1:67:c3:
         75:99:87:ab:9f:1c:6a:33:66:f0:67:9b:59:4c:87:ed:bf:e2:
         15:8f:ee:26:fc:d4:41:49:47:70:0d:70:7c:ee:e3:4d:e6:5a:
         3c:76:71:97:18:bf:80:1a:01:86:12:9c:41:e1:3e:3d:b5:78:
         26:06:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:48:09 2026 by rpki-client