Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/62facff5-2cb5-31f3-8c4f-db9b3af441c9.roa
File:                     62facff5-2cb5-31f3-8c4f-db9b3af441c9.roa (raw, json)
Hash identifier:          3036DRnlN6Wel4kfgci+eXhz1LcPxWhKzt2EBGUA6KM=
Subject key identifier:   1F:90:78:10:0E:DC:8D:83:03:97:B5:E2:63:B4:FC:47:7A:DB:89:43
Certificate issuer:       /CN=53e58d27-0260-41c6-8a7b-df289923ed1e
Certificate serial:       010D0C9F4328584EC90710A211AEECB7441F7180
Authority key identifier: 44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/62facff5-2cb5-31f3-8c4f-db9b3af441c9.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     402224
IP address blocks:        139.151.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:10:a2:11:ae:ec:b7:44:1f:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e58d27-0260-41c6-8a7b-df289923ed1e
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=57f56ed4-e16d-414f-840a-c97b1ff3591f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:03:e2:cc:10:73:04:94:4f:5d:e9:e4:a4:
                    a9:79:75:32:08:59:bf:0f:93:49:9c:03:1e:c4:f8:
                    95:89:b1:86:db:ef:cd:0c:22:da:86:61:4e:ce:6c:
                    d1:84:68:cd:7c:7c:81:5b:af:b9:d4:d2:cb:1b:90:
                    f2:5c:a1:e8:cd:e1:52:f0:a7:ec:31:ea:51:44:06:
                    93:71:10:89:37:8c:f1:b7:ce:9f:4b:40:6a:64:d9:
                    c8:19:e5:57:74:ef:9e:e0:db:12:4a:45:d0:79:11:
                    1d:4c:f4:f3:7c:b7:d6:9b:a6:b4:aa:e4:d5:d3:0b:
                    48:37:ab:83:01:04:a5:59:4c:54:0e:56:41:76:ee:
                    73:90:ed:40:b8:da:36:de:5f:1c:bd:97:fe:ad:9b:
                    be:6c:c0:64:ca:f1:00:a2:eb:e8:7b:c6:eb:d0:d8:
                    33:bb:7a:55:34:34:b1:b3:cb:a9:25:b6:4f:ab:0a:
                    94:07:c5:63:3e:3f:47:9b:f1:e9:d4:ca:6a:e1:5a:
                    f8:3a:23:18:11:67:11:bf:25:27:e6:a0:e0:e0:16:
                    f1:9b:7c:50:42:ab:7c:10:ef:f3:46:69:6b:3e:3c:
                    b8:f5:93:56:29:60:fd:3f:5b:96:cc:05:c3:12:b5:
                    58:98:52:65:11:74:88:60:29:9d:ec:79:3c:2a:5a:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:78:10:0E:DC:8D:83:03:97:B5:E2:63:B4:FC:47:7A:DB:89:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/62facff5-2cb5-31f3-8c4f-db9b3af441c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl

            X509v3 Authority Key Identifier:
                keyid:44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.151.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:ab:03:c9:c3:cb:2c:fe:02:ad:f8:5b:e8:03:85:a8:cb:
         8f:a7:05:36:d8:3e:5a:14:23:c6:d4:ec:f4:b4:66:5a:d0:2d:
         d8:01:bf:ba:2e:6f:5c:bb:5e:50:ef:0d:5b:9f:e1:96:f0:b3:
         87:8d:91:2b:1a:e6:b5:c2:cf:f5:19:77:94:e9:6e:39:5d:d5:
         ea:ae:d4:2f:44:25:93:17:b3:a0:52:32:a1:26:4e:b2:6b:2f:
         ba:72:be:03:5f:fa:1d:5c:2c:df:82:f9:24:96:1a:5e:95:14:
         92:11:99:3d:dd:d5:42:f2:49:f1:0b:57:f1:a4:4b:c6:b5:ab:
         36:10:b1:9f:8e:24:55:7e:d5:f2:2f:fa:72:18:e7:35:9b:d9:
         df:1d:be:23:5d:24:bb:81:d7:3f:fc:b9:d0:8b:b5:de:4c:64:
         68:09:17:91:73:c3:ea:8b:76:db:4a:c0:8a:b1:43:78:f1:1d:
         df:1f:ff:93:75:0c:64:35:e5:93:60:e9:43:e9:ed:02:01:71:
         6d:e8:79:48:4c:9b:e4:c3:38:e8:49:b7:68:05:14:f6:e6:89:
         15:18:26:24:94:93:91:c9:a5:f1:09:bd:7f:70:8e:4f:90:74:
         33:df:30:9f:11:8b:e9:ad:38:00:c6:a3:e8:63:51:02:45:cb:
         4b:64:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:34:34 2026 by rpki-client