Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
File:                     d75313c6-b694-319b-99ef-252d46e1d17d.roa (raw, json)
Hash identifier:          C7NiLOdCAWqih8YjrFsQ3IzFrxjKaFZb3e+rk1M7EI4=
Subject key identifier:   F2:C5:B2:F9:29:E5:BB:59:EF:FB:70:87:B7:81:A0:49:1E:6E:5C:FA
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584B8EAD0F595E93973B3B642780
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        148.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:0f:59:5e:93:97:3b:3b:64:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=0951466b-af71-40ba-aa18-f7c68f22cc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:47:22:71:b9:3f:41:44:25:52:6c:3f:81:
                    47:2a:6f:67:74:2c:68:2c:fe:eb:e0:e2:51:0d:48:
                    66:07:ec:ad:6c:30:85:d6:35:cd:32:04:7e:0a:88:
                    d6:78:5f:12:0a:bf:35:aa:2e:cd:64:95:d4:4d:aa:
                    97:76:c3:50:84:ec:f5:55:5d:39:f7:93:5d:2e:2b:
                    5e:62:fc:6b:8e:59:2f:30:48:d2:2e:01:53:37:ac:
                    80:3f:0c:a4:5a:cb:68:68:a5:56:87:2c:65:05:63:
                    c8:19:a4:a3:70:83:d1:fd:18:a9:d1:98:91:f5:f3:
                    ad:b7:80:59:77:64:25:37:93:bd:bd:84:ae:c7:bb:
                    55:31:0b:89:c9:75:e9:c7:c0:3f:c1:6d:4f:6b:5c:
                    44:97:4c:75:97:6e:a9:08:7c:6a:a9:0d:7a:ce:73:
                    b6:b1:ac:5e:b9:e9:44:3c:b8:65:81:d2:7e:1f:ab:
                    ee:a6:04:81:f3:68:98:a3:46:57:87:0e:b7:20:73:
                    27:fd:0c:11:f3:21:bc:03:9f:a9:a8:20:ab:dc:19:
                    27:85:44:53:2f:60:3c:df:4f:0c:c2:d8:54:5d:bb:
                    13:c2:a2:51:59:05:d9:d2:a4:e2:b1:4d:8c:0f:fc:
                    cd:85:8f:aa:de:ac:e0:d5:8d:0e:9e:4d:05:6c:e1:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C5:B2:F9:29:E5:BB:59:EF:FB:70:87:B7:81:A0:49:1E:6E:5C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/d75313c6-b694-319b-99ef-252d46e1d17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:62:60:42:08:f8:9e:46:3c:fd:d9:02:a4:18:54:2f:50:
         ed:d7:f6:52:c9:62:84:1d:82:68:7d:d0:70:43:8d:fe:85:62:
         99:5f:63:93:65:4d:d4:0a:62:d7:98:58:9a:eb:1f:59:dc:89:
         6d:a9:03:1f:36:bb:1e:1e:98:43:2c:67:6a:49:dd:26:f1:f6:
         38:ff:12:30:9e:b3:86:04:6c:ae:19:b0:0c:5a:5c:51:4c:56:
         ce:f5:26:b3:cc:4a:aa:8c:16:48:61:0a:b1:eb:bb:de:aa:12:
         1b:26:d9:40:93:2c:23:1a:55:0f:12:80:bf:e5:12:5b:37:56:
         3c:4a:d3:1f:f0:a3:fc:57:bd:b8:3c:db:e9:4a:73:88:59:88:
         94:31:d4:ae:ec:13:63:f2:f4:23:5d:81:1b:72:c5:ce:13:08:
         43:8d:82:33:90:67:64:28:71:28:ea:11:b0:ed:0c:e2:36:92:
         c3:1c:48:db:12:b3:2c:93:fc:5c:e8:df:75:6e:f4:01:2c:25:
         af:a4:23:94:bb:2b:5c:b2:b4:cd:bc:13:01:78:ef:ca:00:ec:
         ff:ab:90:c5:d4:3d:b4:7f:a8:6d:73:dd:a5:8d:ef:4a:e4:5c:
         21:ca:4b:38:22:d9:ed:8b:8f:41:3a:0b:d2:dd:28:c2:aa:c7:
         04:9e:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:35 2025 by rpki-client