Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c3c5379d-f3ed-309e-b364-5f771d077ce2.roa
File:                     c3c5379d-f3ed-309e-b364-5f771d077ce2.roa (raw, json)
Hash identifier:          QffmtSRRiL1UniHEf7NPquEtnd5UZ43KTXE5J+ISpjA=
Subject key identifier:   65:3C:B5:F9:32:78:43:BF:C8:83:48:E4:7E:3D:08:BB:91:34:7E:3F
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584B8EAD0F8BC5BE5622F6D61AC0
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c3c5379d-f3ed-309e-b364-5f771d077ce2.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        148.59.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:0f:8b:c5:be:56:22:f6:d6:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=225aa037-2cf6-45ca-a24d-1af041df8997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ef:a1:3a:64:a6:58:d7:20:c1:11:80:99:32:
                    1d:4c:46:35:81:4b:b2:ff:17:8c:c8:1b:2c:a8:a6:
                    d9:82:12:58:9a:f9:58:ab:39:b2:1c:00:c5:03:d5:
                    ce:09:86:93:d6:88:6b:02:7d:47:e7:01:41:d1:15:
                    9e:cd:fd:e4:b8:40:cd:3e:5d:35:75:97:78:00:bd:
                    95:40:1a:bd:d5:26:03:c5:5a:ba:a9:06:1e:e9:ef:
                    95:90:b3:95:bb:c5:fd:47:b9:e7:a5:34:cd:fd:d9:
                    94:9e:1d:e3:22:6d:07:69:46:42:ab:fe:3d:8e:f0:
                    53:2a:bc:8d:9a:34:99:6d:61:4e:f2:b5:fd:c4:59:
                    41:da:13:63:fa:8d:b6:8b:a2:99:4f:a1:ae:0b:72:
                    bb:ea:93:f4:2b:98:81:3b:b3:2a:3f:a8:4a:ea:c6:
                    cb:39:57:ef:4a:44:16:60:db:f8:98:31:06:85:6f:
                    be:36:a9:30:b3:db:ab:65:0d:07:e7:32:c8:ac:c0:
                    71:67:9a:50:4a:de:78:27:07:3e:43:1c:b6:f4:c9:
                    19:89:04:d3:e5:6b:45:5a:24:5c:02:e5:db:8a:f4:
                    e3:b3:76:ea:14:d3:d7:19:d7:40:6c:03:f1:f6:70:
                    9f:e1:38:e5:38:c0:2b:bb:06:40:ce:84:fd:5d:90:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3C:B5:F9:32:78:43:BF:C8:83:48:E4:7E:3D:08:BB:91:34:7E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c3c5379d-f3ed-309e-b364-5f771d077ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:50:03:9a:81:b1:ad:cf:4a:12:f3:8f:62:09:68:a2:67:a7:
         9e:21:57:6c:66:0b:1e:cf:df:bc:d1:09:32:21:3d:ff:e2:c1:
         b6:a2:72:2a:68:40:9f:7b:08:20:90:09:4d:fe:e5:3a:3c:51:
         96:9f:c6:03:d1:16:e1:a5:15:50:cb:46:47:3f:01:5a:60:e5:
         08:56:5e:77:8b:a3:07:1a:dc:08:21:ee:5e:99:92:bb:e6:44:
         f8:51:f7:98:3a:f1:a9:26:a8:66:8f:e4:8f:61:a5:73:3a:bc:
         f3:6c:0f:40:8f:3e:4f:00:70:4e:63:61:c7:d9:38:2e:2a:d1:
         f1:82:04:5d:30:1e:e7:02:1f:63:bf:49:4d:54:55:49:bf:4a:
         9a:ac:cc:88:63:56:6a:2c:a8:1e:36:92:d7:20:73:71:d6:b6:
         ad:22:4d:31:db:b1:2a:05:13:fd:25:5f:69:f9:af:fc:84:05:
         90:1a:91:38:11:c0:ac:e0:fb:95:90:85:ef:cc:f8:14:cf:47:
         57:f5:f2:bd:a2:37:3b:33:dc:8a:e0:98:e6:ba:74:be:92:e8:
         9d:13:b9:c4:2f:37:20:92:6e:42:10:9e:db:2f:a5:65:23:3c:
         6a:1a:99:c3:8c:70:67:5d:ff:3c:90:c2:9b:04:a2:67:77:c7:
         84:de:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:02:30 2025 by rpki-client