Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d409bd1e-09f9-315b-a369-bd40e9c97f27.roa
File:                     d409bd1e-09f9-315b-a369-bd40e9c97f27.roa (raw, json)
Hash identifier:          28J02CIA06swwRCSbSbkS+64mjopuTmGucl5GtrU/98=
Subject key identifier:   12:29:B3:DB:F1:FB:06:2E:51:88:61:C8:5F:65:58:CF:13:D8:A2:4E
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584E7E94E093AB2F6AA52CE8AB00
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d409bd1e-09f9-315b-a369-bd40e9c97f27.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        148.59.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e0:93:ab:2f:6a:a5:2c:e8:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=74359c6d-51c4-463a-81a7-fb0c27f33e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:b8:62:19:85:37:d3:ee:44:b8:05:74:f1:
                    98:7e:cb:5b:4a:31:18:ca:be:ae:4c:3a:64:df:fd:
                    96:f8:1d:37:ac:15:f0:65:b5:8f:63:1e:6d:b7:ec:
                    85:3e:1b:49:3e:a0:39:99:13:24:b9:9e:83:8a:2d:
                    41:3f:99:ea:72:8d:02:29:c6:91:47:39:db:98:62:
                    b5:2b:20:ee:1a:a5:35:9a:69:fb:4b:cc:20:e7:9c:
                    39:e8:46:7a:c9:b5:de:62:fb:60:b0:91:7e:a4:5e:
                    c3:44:3f:76:ce:9a:ad:2d:42:65:52:fe:af:17:d9:
                    be:56:c9:85:36:ab:74:1b:71:4a:76:d9:85:1a:0b:
                    c1:d4:5e:a7:5a:04:df:60:f9:e8:7b:9e:45:b5:b4:
                    46:98:29:76:8d:ad:79:59:34:25:7b:34:c6:dd:0a:
                    c0:30:8d:8e:52:5b:6d:23:b6:b9:27:2d:9d:f5:42:
                    5e:60:b9:1c:6f:a7:e9:d7:94:28:24:4b:b2:62:4c:
                    22:9b:f1:a2:4b:19:61:48:74:f3:ec:99:f9:cf:fd:
                    bf:eb:39:36:fb:c3:90:fe:30:1e:07:33:56:f0:6d:
                    8c:fd:ed:a1:ef:80:b4:25:32:0b:16:84:fe:e0:7f:
                    11:d0:fe:90:32:8f:23:07:3b:69:13:de:11:34:de:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:B3:DB:F1:FB:06:2E:51:88:61:C8:5F:65:58:CF:13:D8:A2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d409bd1e-09f9-315b-a369-bd40e9c97f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c2:a0:df:b4:2f:f9:8a:ff:fe:ea:74:37:55:cd:a2:8d:89:
         28:b5:20:f8:f4:ed:03:c7:91:09:7c:7b:29:84:5b:9e:2b:0f:
         90:78:09:89:fa:06:e7:f0:09:ce:02:20:3b:cd:70:ad:08:18:
         a0:e1:d9:95:c2:9d:23:5a:77:c6:bc:8c:38:96:a7:41:06:7c:
         32:38:c7:e9:06:e5:15:e8:78:8c:aa:1b:75:7d:bc:88:d6:3c:
         eb:9a:45:68:fe:f1:b2:7c:90:df:97:c0:59:69:78:10:85:2c:
         37:04:46:5d:05:02:c1:ce:04:15:2c:da:5a:17:97:02:88:7f:
         3d:74:8b:37:29:bd:c3:9a:62:f2:81:6e:81:2c:57:3a:f0:3f:
         d1:18:04:be:d3:d7:5d:a4:4b:38:9c:b5:29:4c:82:fa:04:70:
         52:0c:d9:25:d4:ff:43:6a:85:39:47:1c:5d:d9:44:da:57:88:
         74:d5:bd:85:e6:a7:ce:9b:57:2b:4f:94:a8:ca:cb:89:84:f8:
         a1:cb:32:c6:25:75:a7:ab:c0:50:83:2e:12:3d:39:42:11:26:
         8b:02:b0:40:5d:f7:13:c3:4e:67:fe:ee:8e:84:ec:87:8c:9b:
         d6:9f:0e:99:d8:71:79:76:7f:f2:7c:12:05:db:35:10:d8:fd:
         15:82:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:13 2026 by rpki-client