Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/a69205b5-2b03-39e0-982d-bb06b9c1ea22.roa
File:                     a69205b5-2b03-39e0-982d-bb06b9c1ea22.roa (raw, json)
Hash identifier:          KGMMWZMqZJ1VRqziphdiw5JwLBrZ1rSVedHIHotK1Ms=
Subject key identifier:   B2:7D:53:7F:AB:65:F4:24:7B:6A:CD:7C:C8:23:DF:ED:30:E6:A2:76
Certificate issuer:       /CN=0d34fcf6-8f83-4016-b141-8b01958e1eaf
Certificate serial:       010D0C9F4328584EC87E5E0C97963FC9BF8C9400
Authority key identifier: BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/a69205b5-2b03-39e0-982d-bb06b9c1ea22.roa
Signing time:             Sun 09 Aug 2026 20:24:48 +0000
ROA not before:           Sun 09 Aug 2026 20:24:48 +0000
ROA not after:            Sat 07 Nov 2026 21:24:48 +0000
asID:                     393960
IP address blocks:        139.60.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c8:7e:5e:0c:97:96:3f:c9:bf:8c:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d34fcf6-8f83-4016-b141-8b01958e1eaf
        Validity
            Not Before: Aug  9 20:24:48 2026 GMT
            Not After : Nov  7 21:24:48 2026 GMT
        Subject: CN=72121754-3be3-404c-96c4-2a0d9cf6fc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:c5:34:77:70:c5:60:31:14:5e:bc:2b:49:
                    f2:9f:0a:90:13:eb:d3:1e:e5:df:8c:29:2b:73:d2:
                    0d:65:18:3f:6d:b2:f8:54:1b:c6:2f:dc:32:10:6f:
                    d2:aa:09:aa:75:44:da:8b:ca:c6:43:67:98:55:3f:
                    f3:3f:3f:d8:ed:e5:09:8f:c8:54:b7:03:2b:e4:a2:
                    66:06:0c:0c:77:11:5b:2c:d1:79:bb:52:31:2d:04:
                    6f:e4:26:94:26:55:54:ab:d2:8a:55:8f:70:9f:4b:
                    6d:f5:24:8a:f7:11:25:7f:ad:55:bb:30:4d:e7:54:
                    98:06:a2:07:b4:cc:7b:75:c1:23:78:e1:78:03:cf:
                    3f:28:bb:97:02:71:84:6b:1f:62:22:d3:27:d1:64:
                    16:c6:9e:a5:58:15:d0:32:42:88:3d:e0:99:a4:c9:
                    85:77:a6:be:7a:9d:94:5a:78:d0:5a:79:b8:76:43:
                    de:23:5e:77:48:c5:08:dc:34:a1:2d:be:62:aa:36:
                    74:68:97:36:f5:1e:34:fa:4e:f9:93:cd:57:6d:70:
                    01:04:41:dd:75:f1:5d:35:12:28:57:75:ea:9c:35:
                    d9:cb:00:dc:13:b3:00:a2:3e:d0:e3:c4:97:96:b8:
                    6f:80:ff:a6:fd:5e:42:89:eb:71:b6:e9:d0:68:f6:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7D:53:7F:AB:65:F4:24:7B:6A:CD:7C:C8:23:DF:ED:30:E6:A2:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/a69205b5-2b03-39e0-982d-bb06b9c1ea22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.crl

            X509v3 Authority Key Identifier:
                keyid:BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:ac:67:a4:bf:0b:f1:b8:04:3f:49:ef:78:60:16:23:45:
         82:eb:d7:cb:36:a1:e1:0e:a1:58:33:74:c5:7b:e7:96:e2:8f:
         67:e8:10:e2:d8:f4:ec:37:51:69:f4:d5:be:36:80:99:29:02:
         83:51:04:c1:3f:cd:ea:6c:40:68:f7:19:c4:7c:44:43:13:57:
         1c:cf:5f:ec:b5:ec:d9:2e:e3:55:83:3c:b7:72:23:8d:61:60:
         3a:97:f2:a9:0f:60:e8:b5:d0:a5:d4:c4:0d:c9:51:f9:13:73:
         91:d8:c7:7d:93:ed:1e:e2:33:56:e8:5b:d9:71:3d:71:04:9e:
         09:9a:67:81:29:7f:f7:9b:65:f9:2b:91:a5:51:55:d5:73:38:
         2a:95:c2:23:61:89:c9:ef:6d:cd:d8:d4:fa:a4:7f:79:91:d4:
         5a:6e:13:fb:9d:3f:2b:23:10:95:97:b8:4d:57:36:f8:13:1c:
         0c:8b:45:59:cf:cf:e4:0d:f8:6c:ea:68:6c:f5:d5:41:15:64:
         52:13:2c:b8:b3:ab:ba:ad:1b:17:e4:65:1a:56:38:b7:ab:f5:
         8e:78:56:c1:d1:87:ef:f4:3b:4e:3a:71:07:94:4f:89:f4:8f:
         8a:15:79:18:87:1e:7f:97:01:6c:32:e8:70:5f:46:33:c7:f9:
         43:ae:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:19:07 2026 by rpki-client