Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/4f25b838-41f4-3544-8890-788de6ce870e.roa
File:                     4f25b838-41f4-3544-8890-788de6ce870e.roa (raw, json)
Hash identifier:          2hlDLKwi49BUlLaHfXxONt9wy3AaIxVkUUrfJRml1io=
Subject key identifier:   E8:23:02:0A:DE:02:A1:D5:01:49:9E:CD:E0:71:2C:A2:43:32:F8:C1
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584F4974781910B5E9A28AC4BE80
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/4f25b838-41f4-3544-8890-788de6ce870e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        148.59.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:78:19:10:b5:e9:a2:8a:c4:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=72b83540-b48f-4e97-bcea-9e0fba5662eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:2c:da:ef:7b:a0:25:58:1b:c3:39:7d:4f:
                    f8:95:7f:2c:5d:b4:d6:a5:ed:72:96:9b:e5:43:52:
                    2e:e0:8f:47:78:9a:f6:20:30:ae:5b:5b:4f:7a:42:
                    f4:08:9b:86:0a:b0:b9:77:c1:a0:b2:3b:46:df:6b:
                    63:96:c2:5d:dd:d8:85:08:37:74:ce:7d:7d:31:d7:
                    bc:fb:83:df:06:f5:61:22:96:d3:9f:bb:c2:33:a0:
                    df:0f:19:10:3a:69:d5:0e:4c:9b:8b:fa:c1:f0:08:
                    d7:b2:9b:34:95:72:b2:36:3c:4c:59:65:de:ef:aa:
                    57:9f:6b:d0:50:b9:83:4a:d9:c7:7e:9b:ac:20:15:
                    26:c3:32:4c:96:0c:2f:56:07:f1:8d:d8:71:10:e9:
                    5e:eb:ff:84:39:a0:c2:9d:88:a2:44:fd:6e:65:e6:
                    f9:7e:2a:7b:66:2a:b1:e7:c9:51:d6:f4:3e:da:22:
                    d2:dd:48:e3:1d:65:2d:80:23:42:c8:bc:e3:a2:91:
                    83:ec:75:29:38:48:cb:83:a3:5a:30:f5:a3:d6:83:
                    f2:23:85:6c:cf:2a:e8:93:e3:59:78:57:0c:61:10:
                    e7:9a:e1:65:66:3f:17:1a:bb:1d:20:a2:fa:22:4c:
                    85:07:e8:58:5d:31:12:d7:92:2b:70:30:07:a7:b6:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:23:02:0A:DE:02:A1:D5:01:49:9E:CD:E0:71:2C:A2:43:32:F8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/4f25b838-41f4-3544-8890-788de6ce870e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:14:e0:e3:42:f7:13:91:03:14:ef:49:96:3f:c4:96:51:
         59:0f:ad:f7:44:be:fe:31:bc:1f:0a:2d:8a:df:06:cd:01:db:
         4a:9a:ee:ce:44:44:f8:1f:fb:a0:94:35:1c:49:1e:b6:f5:29:
         57:e7:38:90:49:8f:64:70:f3:92:03:5e:7a:fe:8d:fb:ac:64:
         51:b5:f4:4b:91:69:6a:0c:6f:16:fe:3d:55:d9:2b:83:ff:fd:
         50:fc:5e:f7:07:a0:32:2c:f8:0c:72:d8:d6:2c:4c:fe:59:84:
         9f:d4:88:3f:09:c0:57:84:a5:74:0b:2a:ba:a8:82:38:c2:cb:
         f2:2b:56:da:86:e5:9e:c1:2e:ec:79:fa:ba:42:e1:57:61:57:
         80:b1:2c:92:c3:74:2c:fe:ef:74:94:0f:6b:99:ca:a9:95:4b:
         95:56:69:89:75:63:02:14:4c:b2:7a:ad:bd:af:48:b9:93:53:
         93:f0:86:30:25:16:84:3f:c5:6c:8a:52:cc:10:b4:c6:e9:7c:
         22:5f:66:ec:18:34:5f:f1:73:a7:00:b2:d9:dc:2c:82:0a:9a:
         99:dd:e0:e1:75:97:1c:94:75:32:2f:92:e7:a8:d9:24:04:c8:
         3c:61:8b:33:ed:fd:06:83:8c:f8:3c:23:fa:22:e4:dd:94:77:
         8b:03:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:41:29 2026 by rpki-client