Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa
File:                     f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa (raw, json)
Hash identifier:          5XccnwFaWnIC0BXahuaS8Kym7aHMrXNc6Af/0AqgMiQ=
Subject key identifier:   01:5E:F7:50:E5:A5:6B:0A:63:4B:98:53:AE:36:3F:90:B7:0F:07:6B
Certificate issuer:       /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial:       010D0C9F4328584F4988AE2D6A7AC333EB16A980
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        148.59.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:ae:2d:6a:7a:c3:33:eb:16:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0b1dbe3c-5989-48b3-aae2-ad97aa7304fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:5d:9f:c7:ad:d9:89:a3:b4:62:82:b0:ef:
                    24:5e:14:20:80:e6:eb:d6:a3:a7:de:2a:89:86:e2:
                    c6:f3:62:ac:74:37:db:2b:c9:85:e0:32:b5:42:f9:
                    92:f3:3f:22:c4:5a:56:e7:32:dc:35:0f:6c:c4:2c:
                    c7:12:91:69:95:e8:49:4a:d7:c0:64:7a:b4:f2:20:
                    55:08:bb:67:fd:66:2f:95:0a:7a:a3:df:36:6d:59:
                    38:d1:d3:7c:30:b5:e6:47:51:81:38:58:c3:74:ec:
                    3e:6e:1d:9e:71:32:b3:89:44:76:47:ac:da:6b:62:
                    5f:21:df:66:86:0d:99:e6:0c:a4:8c:01:ce:06:ca:
                    ea:58:19:c4:06:56:cc:8a:40:69:36:fd:59:6a:4a:
                    68:61:79:74:bd:f3:cd:c3:db:44:cc:54:34:64:73:
                    eb:11:f4:8a:3a:53:1c:1f:85:b6:de:5c:66:41:83:
                    1f:87:fc:36:4c:d7:fa:96:83:e7:74:b5:10:fa:23:
                    9b:74:9e:4b:17:52:a4:3c:82:21:b5:4d:0b:9b:96:
                    39:4d:73:1b:b7:21:14:a3:6d:de:dd:68:b8:ed:87:
                    3b:41:5e:a7:02:2c:79:85:1d:4b:78:e6:c3:a7:63:
                    88:8d:54:af:44:11:cf:ab:4d:06:85:e1:7c:2b:c0:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:F7:50:E5:A5:6B:0A:63:4B:98:53:AE:36:3F:90:B7:0F:07:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/f8040d4d-7b96-3cbc-b275-4e7dfaf02a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:2d:83:dd:b6:84:6e:76:57:4c:db:4c:a7:37:09:5d:74:
         5e:52:cf:ff:9b:e7:fb:0d:56:16:77:a0:71:00:eb:85:21:17:
         a6:f2:33:da:2e:c8:a8:a2:e0:5c:fb:56:31:37:82:5a:8c:91:
         6f:ac:93:a2:01:1e:b8:7d:57:04:e2:c5:52:67:47:d8:57:87:
         25:55:44:2a:fb:fe:37:5c:33:89:75:b4:0e:f8:c8:95:42:39:
         27:a5:81:85:83:37:a1:0d:cf:c0:41:8b:cc:de:4e:e3:72:7b:
         f9:05:13:41:9c:a3:71:56:53:ea:74:ea:51:2f:c0:0b:41:35:
         89:a1:1b:b8:fd:92:7f:00:49:53:f2:e2:0a:31:f2:eb:de:70:
         f1:20:c4:fb:89:71:dc:d6:0b:ae:95:7e:a0:63:24:9d:3d:17:
         a0:f8:90:0d:33:4e:31:15:b1:5f:bb:c7:48:8b:4e:5d:84:fb:
         e9:1a:a6:1d:bd:af:97:aa:92:e1:54:e1:af:5e:73:d1:d6:40:
         b7:8f:ad:bb:6f:43:30:e3:82:27:28:27:4e:91:ab:6f:e8:c5:
         5e:de:25:9d:71:ce:c9:ea:5e:fd:2c:be:a7:35:27:06:2d:94:
         0b:79:df:9e:ac:5d:05:8c:9b:55:51:38:1b:ab:de:5a:a4:c2:
         8e:58:75:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiK4tanrDM+sWqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzcwNWZkZjAtZTQ4My00OWQ5LTg3MTMtMWNjNmFhODVk
YjU1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGIxZGJlM2MtNTk4OS00OGIzLWFhZTItYWQ5N2FhNzMwNGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXNdn8et2YmjtGKCsO8kXhQggObr1qOn3iqJ
huLG82KsdDfbK8mF4DK1QvmS8z8ixFpW5zLcNQ9sxCzHEpFplehJStfAZHq08iBV
CLtn/WYvlQp6o982bVk40dN8MLXmR1GBOFjDdOw+bh2ecTKziUR2R6zaa2JfId9m
hg2Z5gykjAHOBsrqWBnEBlbMikBpNv1ZakpoYXl0vfPNw9tEzFQ0ZHPrEfSKOlMc
H4W23lxmQYMfh/w2TNf6loPndLUQ+iObdJ5LF1KkPIIhtU0Lm5Y5TXMbtyEUo23e
3Wi47Yc7QV6nAix5hR1LeObDp2OIjVSvRBHPq00GheF8K8CN9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFe91DlpWsKY0uYU642P5C3DwdrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1
ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2YWE4NWRiNTUvZjgwNDBkNGQtN2I5Ni0z
Y2JjLWIyNzUtNGU3ZGZhZjAyYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzcwNWZkZjAtZTQ4My00OWQ5LTg3
MTMtMWNjNmFhODVkYjU1L2M3MDVmZGYwLWU0ODMtNDlkOS04NzEzLTFjYzZhYTg1
ZGI1NS5jcmwwHwYDVR0jBBgwFoAUa70NuVfAKfR62iQNowf8+cKsB7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jNzA1ZmRmMC1lNDgzLTQ5ZDktODcxMy0xY2M2
YWE4NWRiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtFLYPdtoRudldM20ynNwlddF5Sz/+b5/sNVhZ3oHEA64UhF6byM9ou
yKii4Fz7VjE3glqMkW+sk6IBHrh9VwTixVJnR9hXhyVVRCr7/jdcM4l1tA74yJVC
OSelgYWDN6ENz8BBi8zeTuNye/kFE0Gco3FWU+p06lEvwAtBNYmhG7j9kn8ASVPy
4gox8uvecPEgxPuJcdzWC66VfqBjJJ09F6D4kA0zTjEVsV+7x0iLTl2E++kaph29
r5eqkuFU4a9ec9HWQLePrbtvQzDjgicoJ06Rq2/oxV7eJZ1xzsnqXv0svqc1JwYt
lAt5356sXQWMm1VROBur3lqkwo5Ydcc=
-----END CERTIFICATE-----
Generated at Fri Oct 2 15:58:16 2026 by rpki-client