Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/f200225e-7ead-3086-89fd-3afa275f7946.roa
File:                     f200225e-7ead-3086-89fd-3afa275f7946.roa (raw, json)
Hash identifier:          +I+JfY/RJHzVQtnKafUrqcgH8acJShvdxBjk3179nW8=
Subject key identifier:   F2:FF:CC:C5:87:76:CA:C6:31:92:C6:88:DA:DF:C2:FA:8E:7A:0D:46
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584EAA520C78368C23DCF7427B00
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/f200225e-7ead-3086-89fd-3afa275f7946.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     139070
IP address blocks:        57.140.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:0c:78:36:8c:23:dc:f7:42:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=7a105623-a738-4631-8989-4c65d89d1ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:8f:04:e4:89:c8:b7:13:bd:d3:85:eb:9b:
                    22:21:92:67:19:f9:a9:26:b2:b0:0e:37:91:9c:fa:
                    20:ef:2b:7f:78:be:33:a9:93:db:db:88:e0:62:60:
                    6e:b5:37:7c:21:e2:08:a2:86:d1:be:7a:4b:47:ca:
                    c0:06:7c:c3:a1:85:a1:43:a0:d1:c5:21:46:55:27:
                    ed:0c:12:2f:ee:ca:0f:6c:33:74:c7:f4:4a:eb:0a:
                    0d:05:42:cb:2d:9b:c2:7b:ad:eb:e5:55:36:56:1c:
                    11:f7:e2:64:2b:a9:95:bb:26:80:75:b7:a4:5f:dd:
                    03:e2:56:cd:9a:08:d9:ee:dd:1e:41:1c:35:10:62:
                    0e:ba:89:a7:a1:53:1b:18:9e:80:3b:50:e6:67:4b:
                    fc:b1:1c:e2:93:f4:a5:ec:e6:d8:49:17:79:f3:f9:
                    65:11:18:f4:c4:f9:46:42:84:bf:eb:03:6c:f4:84:
                    93:4b:c5:f5:1b:6b:62:36:5d:e0:38:dc:a5:97:62:
                    68:9b:1b:00:1b:9b:b1:55:a9:5d:c7:b9:d3:21:25:
                    1d:11:9c:fd:8a:c5:b1:79:ba:59:97:a0:f7:6a:4d:
                    d3:79:30:73:cc:de:1e:ea:1c:5b:3e:eb:e1:c1:3d:
                    ec:3a:61:d4:ef:5e:c1:25:0f:1b:ad:d7:35:91:01:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FF:CC:C5:87:76:CA:C6:31:92:C6:88:DA:DF:C2:FA:8E:7A:0D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/f200225e-7ead-3086-89fd-3afa275f7946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:67:bc:06:f3:14:5e:dc:40:a3:a5:8f:3b:82:50:92:c0:
         c8:3f:d4:0e:e3:84:f6:8a:83:5d:2a:ad:ff:42:cd:83:10:c8:
         4c:ae:91:8b:ab:8a:d9:d1:2b:ca:15:e4:61:d2:d3:ea:75:2d:
         da:4b:71:21:b8:51:f6:bd:7e:08:b1:13:98:8b:31:8b:b7:fd:
         62:26:3f:35:fb:7c:44:c4:b4:5f:ca:99:e4:d5:4c:53:b2:6c:
         72:5e:00:dc:c4:94:69:49:03:e3:e0:b0:e6:e4:d3:69:93:a0:
         5d:22:c0:c3:77:e3:1e:f7:93:32:ad:e3:75:6c:86:b9:f6:35:
         fa:cc:b9:2d:e2:c7:10:09:4f:96:24:12:df:39:f0:9e:62:c7:
         7b:ce:3e:d8:72:ac:a0:f2:31:d7:60:de:7b:81:cb:8b:80:b1:
         d2:6e:f2:71:3b:b4:66:0d:f6:b5:5f:12:05:15:de:cd:5b:54:
         b5:f0:d0:98:7e:82:c2:d7:73:48:63:bf:7b:7b:c4:fc:6c:9a:
         c1:74:76:27:21:85:07:ab:c2:c3:e1:9f:4e:b4:b2:bf:66:bc:
         7f:ee:67:90:dd:4b:35:85:88:63:63:44:c7:f0:b5:75:73:23:
         e6:71:33:03:e9:b3:ea:c2:6d:e3:e0:69:4b:95:77:87:af:70:
         a8:c1:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:55:06 2026 by rpki-client