Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa
File:                     bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa (raw, json)
Hash identifier:          kHegOTnNKlkOJMymOmuvAAcA+1v3al8PQPq26M/eQHA=
Subject key identifier:   F9:5B:DD:F0:32:B0:5E:2E:F1:3E:DC:4F:86:50:BF:53:6E:E8:2E:20
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584F03A77EE5C906611A1ABEFD80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     13414
IP address blocks:        199.59.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7e:e5:c9:06:61:1a:1a:be:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=f677a321-1fe8-4396-9e2d-f349906e6016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:8f:1e:f1:af:5d:f5:01:2c:db:5b:78:0d:
                    91:6a:a5:70:3e:2f:10:5e:7c:0a:39:83:23:9a:f9:
                    89:82:31:dc:dc:28:18:a8:b3:d4:a5:f6:4a:78:18:
                    4e:10:66:bf:c5:88:c4:00:ed:26:28:02:c3:a3:cb:
                    cf:6f:f7:a6:37:09:c0:a8:bf:fe:0e:07:f3:f1:23:
                    26:2d:c9:fd:00:4b:58:7a:e3:dd:1c:62:ef:e0:44:
                    24:cf:b0:20:3e:d5:a9:c5:f3:ff:90:1c:b9:e2:c2:
                    f8:b1:c7:98:74:94:dc:03:07:6e:37:9c:9a:63:27:
                    03:4a:9a:0b:c4:29:9b:22:59:b6:57:82:ea:03:89:
                    49:e3:38:0c:3a:fa:f5:48:56:cd:2a:4a:03:c7:7e:
                    be:5b:6b:f6:3e:d4:58:19:bb:90:cc:fe:7e:f5:3c:
                    40:f7:1e:4d:9b:cc:dd:22:58:86:d1:24:dc:fc:f5:
                    07:f8:51:ab:de:d8:1f:9b:46:9c:43:7e:d9:20:c8:
                    08:1f:e4:83:12:51:bf:27:74:32:6e:3d:d4:dd:24:
                    17:95:8d:e8:3c:19:ad:8e:8c:7d:1f:16:94:db:2d:
                    9a:41:4c:f5:5f:6d:26:a6:64:1e:e9:da:0d:ca:26:
                    12:04:a6:da:b9:cb:07:b3:1c:7b:f6:01:2f:e6:20:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5B:DD:F0:32:B0:5E:2E:F1:3E:DC:4F:86:50:BF:53:6E:E8:2E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:13:ac:fc:f7:cc:24:71:ec:96:ef:73:9e:7f:04:21:80:1f:
         87:b9:1b:ed:f7:9d:a5:ca:40:d7:95:87:cd:68:73:b7:6f:5b:
         b1:aa:ae:33:d7:48:71:da:f5:83:11:d5:c5:80:1d:15:ab:15:
         cb:6f:08:33:b7:5a:ae:32:e5:32:6a:fe:c8:a0:90:06:85:98:
         7a:fd:d3:56:7a:50:7c:e5:34:79:07:36:ff:4c:1c:da:fa:a5:
         a3:f0:14:46:16:19:42:ab:57:d0:08:5f:a9:6d:27:63:a1:9c:
         fa:40:94:20:30:26:b4:c6:b5:b7:4e:91:73:5b:20:6d:d9:8c:
         56:a0:82:49:2d:60:7b:7b:61:6a:a7:33:b3:38:c8:5b:55:0a:
         98:0f:c0:da:a1:3b:ce:c4:4b:a8:2c:d1:fc:53:4a:d2:f3:da:
         7e:fa:02:5f:95:40:4b:bd:63:1b:5e:02:cc:5d:1d:10:e3:d5:
         d6:e5:3e:fb:cb:88:f9:55:0e:8f:74:51:10:76:e7:35:38:95:
         e4:3b:51:6e:53:d2:04:94:03:64:85:0d:ea:ce:99:24:cd:44:
         fe:65:d9:f8:38:1e:92:91:5c:09:f4:37:18:ab:08:ac:0c:cc:
         30:2a:09:27:54:ed:4c:5a:dd:ac:44:d8:01:e3:41:48:9e:aa:
         0f:a7:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:55:30 2026 by rpki-client