Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/8f141455-ae30-3a5a-b6f4-ea139b4e541c.roa
File:                     8f141455-ae30-3a5a-b6f4-ea139b4e541c.roa (raw, json)
Hash identifier:          ICC1RPnQ+IF842OUjVyRaVuIhg8Stkb0PSFIit6czYM=
Subject key identifier:   AB:BD:80:9F:3E:09:A1:31:48:F1:05:2A:0F:4E:A3:06:77:83:F5:FF
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584F49747A887818337D60CFB940
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/8f141455-ae30-3a5a-b6f4-ea139b4e541c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        148.59.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:7a:88:78:18:33:7d:60:cf:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=348cb90f-3fb6-44f0-b087-d6571be816d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:61:e7:65:56:48:15:1d:c1:04:3e:7c:c5:
                    35:57:03:03:62:8f:21:b4:54:fa:be:23:30:48:57:
                    89:99:2c:ea:02:a5:15:e9:30:46:08:76:dd:8a:67:
                    0d:a8:c3:41:43:37:5d:f1:0e:c1:9c:6a:60:c1:51:
                    83:c7:ef:fe:db:54:63:5d:59:d7:fa:22:7b:68:d6:
                    5f:70:2f:76:41:ca:c5:6b:9c:50:de:a8:b1:de:79:
                    0f:0e:be:f8:2e:13:8e:e8:bc:2b:ee:e7:7b:42:79:
                    4f:6c:f3:f3:52:30:9f:b5:52:45:2c:a1:20:e3:e6:
                    74:3a:5b:c7:21:4a:3f:a9:81:b8:6f:d6:84:bd:56:
                    d2:11:5b:8a:d3:a3:6c:83:a9:f0:e0:26:a8:04:b1:
                    b0:a4:9f:b7:90:54:61:ca:20:54:e4:db:4a:64:84:
                    44:e2:6a:54:a5:73:4b:2c:28:8e:f7:e0:c2:5f:2c:
                    d8:a1:30:14:80:55:70:bb:81:4a:b6:07:84:d1:27:
                    8a:1a:78:8b:96:21:56:15:36:05:a7:48:43:f0:02:
                    e4:37:b0:f4:c0:20:a1:0b:f8:cf:f2:38:b6:f7:87:
                    86:2b:82:0a:da:76:a7:27:57:b9:04:32:55:50:d4:
                    28:e8:be:1e:37:7e:f8:9a:b5:4c:91:d0:f4:37:c6:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:80:9F:3E:09:A1:31:48:F1:05:2A:0F:4E:A3:06:77:83:F5:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/8f141455-ae30-3a5a-b6f4-ea139b4e541c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:a3:58:fd:a0:b6:8b:0f:2b:78:28:2d:d2:cd:cf:3a:36:9f:
         79:2a:dc:bb:d7:0f:9d:dc:8e:94:4e:e1:db:1e:d3:12:12:d8:
         97:41:1f:c4:2e:e7:c0:c4:67:7a:3c:12:cd:a3:b2:d3:e1:bf:
         28:4f:96:d9:97:ca:d3:ce:a0:39:fc:07:8d:c9:0c:46:12:c7:
         c7:07:7f:f3:b1:c8:3b:fd:6c:65:93:92:68:72:04:12:bd:54:
         9d:5c:48:66:48:7f:2e:04:7c:59:f4:1a:1b:9e:81:f9:41:8b:
         a0:59:e1:90:32:43:f5:9d:52:dc:1a:39:e5:ed:2f:2f:b2:f3:
         54:ff:37:4a:5d:99:77:02:11:38:a0:1b:55:73:48:68:2c:b9:
         13:11:07:0f:d5:1d:a1:6d:b6:16:ed:da:96:fa:de:b9:51:5d:
         fb:d1:8a:51:6c:4d:e3:33:6c:b6:16:af:2e:e3:8a:42:aa:a0:
         08:21:59:8d:67:0f:8d:39:d6:64:d0:4a:1d:92:0a:75:8c:8b:
         67:75:83:b1:f1:52:e0:c9:27:e7:2d:93:11:ce:42:9d:ed:03:
         49:a3:85:51:f6:43:39:b9:a8:a1:28:cc:a0:a3:75:3c:01:39:
         9d:28:e5:93:1e:40:1e:d6:e8:58:3c:a2:89:f6:80:5f:da:45:
         03:a6:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:02:31 2026 by rpki-client