Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f/beefbe5c-b987-3b0e-a95d-a623c8bef599.roa
File:                     beefbe5c-b987-3b0e-a95d-a623c8bef599.roa (raw, json)
Hash identifier:          iTtgzJqAntbEujWJ17+ULI1zEsccqmgueus9BkLLPWk=
Subject key identifier:   F9:BC:33:68:EC:39:EF:B8:80:4D:60:61:4A:CF:63:0A:8A:3C:CD:E3
Certificate issuer:       /CN=3135e25d-8269-410e-a8bb-30548141555f
Certificate serial:       010D0C9F4328584F8053794941BB1C98D5C5BD10
Authority key identifier: 7B:68:BB:CF:CA:AB:22:A1:7B:52:17:C0:20:C8:A1:2E:63:33:2A:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f/beefbe5c-b987-3b0e-a95d-a623c8bef599.roa
Signing time:             Wed 14 Oct 2026 16:47:06 +0000
ROA not before:           Wed 14 Oct 2026 16:47:06 +0000
ROA not after:            Tue 12 Jan 2027 17:47:06 +0000
asID:                     62889
IP address blocks:        139.138.55.0/24 maxlen: 24
                          198.52.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f/3135e25d-8269-410e-a8bb-30548141555f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f/3135e25d-8269-410e-a8bb-30548141555f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:53:79:49:41:bb:1c:98:d5:c5:bd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3135e25d-8269-410e-a8bb-30548141555f
        Validity
            Not Before: Oct 14 16:47:06 2026 GMT
            Not After : Jan 12 17:47:06 2027 GMT
        Subject: CN=092c81be-b592-4b67-a274-e39b41765e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:2b:54:a2:cb:19:52:c6:dd:b9:a8:d9:14:
                    88:f2:39:40:dd:cc:a5:d0:48:7c:c6:36:4a:06:55:
                    56:4c:f6:1c:e9:95:ae:9d:20:a2:08:34:20:44:7f:
                    7c:a5:3d:95:16:0d:58:94:5f:cd:75:fc:43:42:06:
                    06:d7:39:dc:db:49:b7:8c:99:d8:4a:ad:fd:a0:d9:
                    c4:10:58:b1:64:1b:7d:91:1a:63:7f:ca:de:ed:f2:
                    45:51:e4:e9:b1:10:e3:d1:f4:85:3d:50:3b:0a:95:
                    fa:f7:3a:fe:97:e9:16:dd:58:47:39:01:20:27:d4:
                    8f:bc:46:40:6e:71:2c:79:04:65:81:70:73:9a:d0:
                    09:dc:ed:6c:ae:73:62:fd:3d:47:2a:07:57:fe:d2:
                    84:95:81:79:ff:5c:db:48:f9:20:44:b8:64:21:25:
                    27:ef:07:9a:9b:51:f7:2a:dd:84:cf:b9:ed:d7:6d:
                    73:95:28:eb:ef:cc:7c:6e:76:d6:13:4d:d4:1b:0b:
                    81:e4:aa:fd:92:ec:bf:0d:b2:80:93:f1:2f:fe:a4:
                    9c:dc:6f:c2:c3:ac:24:34:72:ad:b3:25:2b:30:92:
                    7d:69:71:cd:c5:c2:ed:8f:04:a6:c8:6a:f5:48:67:
                    5c:7d:37:49:56:64:87:fd:e4:a0:a6:44:74:d8:d4:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BC:33:68:EC:39:EF:B8:80:4D:60:61:4A:CF:63:0A:8A:3C:CD:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f/beefbe5c-b987-3b0e-a95d-a623c8bef599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f/3135e25d-8269-410e-a8bb-30548141555f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:68:BB:CF:CA:AB:22:A1:7B:52:17:C0:20:C8:A1:2E:63:33:2A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3135e25d-8269-410e-a8bb-30548141555f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.55.0/24
                  198.52.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:7d:6b:2c:85:26:83:4c:37:88:cf:3c:42:a5:08:ca:11:
         8e:4b:7f:5e:42:b0:c7:f5:a9:4b:67:fb:41:ab:d8:a2:05:31:
         4d:45:c9:94:4a:ff:5a:39:7c:01:57:2c:83:61:24:8f:2b:63:
         27:b5:7a:d7:b6:55:09:df:66:42:4d:20:73:e1:29:ec:85:43:
         e6:75:5a:fb:43:31:d8:c2:d6:d2:f5:45:2d:e5:f8:d7:88:7a:
         6e:1f:30:82:03:74:12:29:c3:7c:bb:10:92:f1:91:94:c9:10:
         71:a6:78:0a:e0:03:f0:ab:0f:40:43:b7:0e:89:1d:e2:ff:dc:
         1e:ce:7f:f5:27:bf:49:6e:a8:d0:3e:06:09:65:37:1a:93:f5:
         5c:f3:8d:15:83:ad:42:50:f8:16:48:83:f4:e9:c6:2d:ae:bf:
         3e:61:f6:b4:7b:2c:19:27:6f:b9:0c:59:cc:e2:c5:93:5d:ab:
         70:7a:47:b5:f4:ee:b0:88:9b:ab:a5:29:e8:dc:6c:42:57:e1:
         0a:47:05:79:8b:09:bf:d4:96:e8:58:d9:e0:dd:f7:18:c8:e5:
         c2:76:4a:36:5f:11:f7:76:f6:67:e0:68:4e:e9:01:5a:25:b6:
         c3:18:cd:6d:71:43:d1:04:64:65:e7:de:c8:64:a1:8f:fd:54:
         ed:85:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:26:00 2026 by rpki-client