Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
File:                     d75313c6-b694-319b-99ef-252d46e1d17d.roa (raw, json)
Hash identifier:          s8h18KEOl8eTI8VlHrWJytKkdQc8pn5egBMCclVHck0=
Subject key identifier:   A8:BD:C9:8D:4D:45:D3:0C:D7:82:3E:4C:40:41:93:97:1F:24:01:70
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584AAF2BA9A674798D5C9E6566C0
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
Signing time:             Tue 29 Jul 2025 23:35:12 +0000
ROA not before:           Tue 29 Jul 2025 23:35:12 +0000
ROA not after:            Mon 27 Oct 2025 23:35:12 +0000
asID:                     14618
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:2b:a9:a6:74:79:8d:5c:9e:65:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jul 29 23:35:12 2025 GMT
            Not After : Oct 27 23:35:12 2025 GMT
        Subject: CN=dd719a0a-1d84-436c-9b98-379232c11ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:ff:07:8d:c3:41:41:09:24:ca:c2:e5:85:
                    da:c4:d5:bc:98:e9:7f:ee:b5:14:1b:7b:01:ea:a3:
                    8c:01:b8:0c:88:ce:25:d7:16:5b:ec:57:4b:47:c0:
                    dd:62:0a:da:ba:9c:11:c1:61:35:26:eb:fc:62:71:
                    b1:a5:92:cc:63:ac:8e:59:53:b6:01:10:d4:b8:73:
                    56:51:8b:7e:00:21:ae:67:9f:95:a1:ff:fe:06:00:
                    c0:36:9c:26:28:d7:bb:ff:f1:33:d3:a4:cf:6e:af:
                    4b:70:a5:ac:ed:81:eb:e4:74:31:b3:3b:1a:a0:4e:
                    ec:7f:88:6d:28:d9:c4:62:0d:f1:89:a4:b4:f9:87:
                    14:72:a8:53:df:df:3e:7f:66:c2:89:1a:da:5d:48:
                    0d:aa:c9:92:85:6c:5c:dc:64:97:00:6f:d6:b3:49:
                    02:c2:8d:a1:8f:53:39:da:1e:f9:5c:8a:c3:f2:16:
                    31:62:38:f8:26:87:59:a1:6c:84:28:17:d2:ba:83:
                    6f:41:66:03:a1:0e:a7:4c:eb:2e:09:f8:a9:87:95:
                    e9:a4:19:1d:9b:f3:4e:8d:aa:66:36:45:bd:1a:f3:
                    ff:57:37:22:a4:ae:dd:76:60:d4:12:36:71:e6:45:
                    c0:37:67:ad:26:22:1e:74:52:f6:37:dd:0d:45:0d:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:C9:8D:4D:45:D3:0C:D7:82:3E:4C:40:41:93:97:1F:24:01:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:aa:92:6c:fb:75:ec:e1:ce:cb:79:5b:13:71:02:e6:d8:
         c5:3e:61:e4:eb:fe:81:4a:e2:d8:2f:85:37:be:b1:84:e6:59:
         27:0f:f2:3d:ad:ea:96:f5:68:52:91:10:b3:ec:73:39:e8:8d:
         40:f5:f1:9c:11:fe:e6:96:bf:1f:c9:97:b8:dd:d0:80:71:d5:
         06:6e:01:ee:b9:9d:17:02:f9:b7:08:63:08:b5:34:f3:64:c2:
         86:8f:51:fe:7c:35:30:ec:c4:75:2e:f9:93:19:47:44:5c:5c:
         99:b3:af:68:5d:2e:d8:03:6e:7d:7a:f1:85:18:b7:60:3b:bb:
         c8:f4:e5:04:cc:b8:5d:65:e1:0e:bb:6b:90:16:7d:34:74:9d:
         0c:c3:92:20:ce:db:1a:9d:c6:18:3c:69:b2:d0:e8:a6:5f:d2:
         cd:a7:94:b9:9e:f2:32:1b:17:15:d0:05:af:6a:c5:3a:58:a0:
         53:39:2f:b2:ec:24:99:83:21:77:43:64:c6:a0:ee:fb:f5:1e:
         9b:83:f6:f9:97:57:23:ac:4e:ed:ac:ac:40:6d:a7:88:d9:a4:
         17:54:a4:1f:b2:cf:25:e3:ec:6e:6e:b0:68:65:de:7a:85:d7:
         59:56:71:3d:a1:36:45:7a:1a:e1:48:b1:a0:89:f3:30:96:43:
         92:71:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:11 2025 by rpki-client