Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ab4f597b-f287-3f50-a41f-1e682204b46f.roa
File:                     ab4f597b-f287-3f50-a41f-1e682204b46f.roa (raw, json)
Hash identifier:          0XfVZ44PPFLePl9kyydtzks5miLUikxsjXY9W2dvNSU=
Subject key identifier:   2B:A6:E0:12:5F:1B:93:1C:AD:72:C3:5C:83:E1:C9:49:63:E1:5F:23
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E3E5F2E1DE42118BE01D83C80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ab4f597b-f287-3f50-a41f-1e682204b46f.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     20001
IP address blocks:        139.177.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:2e:1d:e4:21:18:be:01:d8:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=c3a70364-8fee-4417-ab7e-9e0bd514d400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:ec:d6:8e:42:3a:dc:31:33:f7:fb:3a:92:
                    ba:0b:c1:61:81:16:1c:3a:3b:e3:25:13:ab:f1:d7:
                    5a:fe:50:cb:07:c4:3b:6c:b3:77:41:12:71:30:d6:
                    d3:c4:6b:6d:54:17:78:0f:11:83:66:10:0d:96:0c:
                    fd:fc:30:5e:7b:4c:77:5a:f7:7b:9a:a3:cb:2e:d0:
                    38:20:df:60:fe:b7:2f:a5:13:95:51:a6:84:0c:b3:
                    24:33:01:19:4d:fd:c9:b9:d1:d1:28:c3:ef:b3:63:
                    4c:6f:60:50:07:04:90:3d:86:78:eb:f2:b6:71:f9:
                    bc:41:98:65:92:15:b2:90:dd:71:62:e6:79:fc:e2:
                    87:1b:1c:5b:a2:54:c6:de:d3:37:ea:a9:6b:87:7f:
                    33:71:ca:b3:65:a1:c1:6b:1e:d5:49:a3:b3:35:95:
                    6d:10:26:0e:61:43:c0:5f:94:16:3c:ac:47:83:d1:
                    ee:4a:78:70:1a:ed:c6:75:82:1d:1e:e1:fe:87:9e:
                    4a:25:3c:27:a6:b4:ea:e2:1c:25:e4:50:9d:87:f3:
                    00:83:1b:f1:85:95:b3:6e:41:4e:1c:b0:b4:75:8a:
                    ca:18:82:1c:3a:d6:f8:84:cd:95:6c:fa:14:fd:7e:
                    5c:4d:5f:26:b7:9e:f0:63:33:e6:2e:0f:01:71:7c:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:E0:12:5F:1B:93:1C:AD:72:C3:5C:83:E1:C9:49:63:E1:5F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ab4f597b-f287-3f50-a41f-1e682204b46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:dc:4e:c0:aa:a0:fd:20:40:e5:0b:34:77:56:bc:4b:d7:
         2a:a7:ee:9b:ce:54:b8:db:34:82:79:3b:ff:d2:a7:f0:34:a3:
         05:93:6a:d8:c1:3a:52:36:89:90:94:d5:b2:c3:0e:1c:83:d1:
         80:97:95:e3:52:33:4b:46:61:23:75:a4:d0:c0:89:f5:2e:e6:
         9e:5a:cc:4b:cc:82:ba:9f:45:a3:9b:26:bf:7d:53:c1:ef:34:
         bf:26:ee:7f:43:0d:0c:70:0a:da:b8:6b:23:85:4d:13:f7:f0:
         5f:34:b7:fb:94:18:d2:ae:ac:80:15:ef:92:d8:cf:f6:2d:b2:
         01:36:e8:4c:4b:c5:6d:4f:13:35:63:11:11:e6:14:05:c5:db:
         28:ff:b7:6f:6a:2e:ce:b3:5b:84:16:fd:03:9e:45:34:a8:4c:
         e0:2f:35:b8:2e:f7:b3:a6:e5:b5:7d:b1:b6:ed:17:44:1b:13:
         ac:39:52:f7:4a:0c:52:de:e7:b9:2d:87:0f:06:7c:42:b2:ec:
         f0:5b:02:d2:6e:3b:63:8f:4c:f4:99:ad:c7:b6:5d:fa:9c:77:
         7d:3f:4a:da:14:83:82:14:db:1b:17:62:27:7c:36:37:78:a6:
         5f:2a:3f:f0:ba:f8:97:2b:3b:d0:5b:2e:98:21:06:f2:82:f7:
         b6:b2:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:11:00 2026 by rpki-client