Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa
File:                     83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa (raw, json)
Hash identifier:          N1L7U+HgKS3v9TRwGHPN6nibqymdBS4OlYVbrtZPPqo=
Subject key identifier:   DF:D6:F1:AF:AB:38:B2:97:55:27:1E:50:DD:2B:AF:FA:37:F0:41:98
Certificate issuer:       /CN=b3834a8f-3f69-4b14-8090-6b2dc08edacc
Certificate serial:       010D0C9F4328584EF87CB12EF6222AAA79FBDA80
Authority key identifier: 83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     3128
IP address blocks:        139.225.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b1:2e:f6:22:2a:aa:79:fb:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3834a8f-3f69-4b14-8090-6b2dc08edacc
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=e3b9b051-9802-4673-a9db-1ebe012dd963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:a4:f6:11:fa:9b:fc:0f:31:04:f7:f6:ce:
                    02:4b:82:78:a6:9f:2c:f6:13:10:5a:3b:fc:6b:2c:
                    c1:66:4a:e9:7d:e9:31:eb:29:0e:74:73:f3:91:b5:
                    d4:eb:05:a9:0e:88:20:0f:98:23:43:24:6b:da:ea:
                    55:eb:9c:5a:de:e0:a0:53:9d:b4:7e:46:9b:d2:18:
                    32:79:3e:2d:3f:f1:0d:f8:ef:d5:6a:aa:13:5e:c1:
                    ec:02:5e:d7:02:40:0b:22:30:55:ca:74:f6:a7:17:
                    f0:b0:83:5d:a1:d2:e8:b1:9b:26:43:ed:bf:27:0d:
                    d8:f1:6a:d1:c9:9e:51:c6:29:5e:68:17:49:59:2d:
                    65:0f:b8:28:98:59:31:8b:be:66:68:9c:2e:a3:f2:
                    77:b4:e7:a6:2d:84:64:5f:96:66:63:40:c1:5b:a7:
                    53:69:8d:1d:16:92:26:fa:3d:e7:01:2c:2d:b7:31:
                    93:96:3c:02:74:62:3c:10:47:61:c5:7c:e6:8b:9e:
                    28:1b:96:82:f7:4c:cc:a0:84:ea:96:1e:ca:69:24:
                    6a:3e:40:04:29:02:7e:86:3c:af:41:67:09:60:c9:
                    7e:ff:f4:e8:09:4b:6c:89:ea:14:5b:9a:0c:b5:76:
                    8c:95:1d:cb:37:93:8e:de:91:6b:c8:ec:8a:e4:27:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D6:F1:AF:AB:38:B2:97:55:27:1E:50:DD:2B:AF:FA:37:F0:41:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.crl

            X509v3 Authority Key Identifier:
                keyid:83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.225.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c9:f5:8d:0e:71:43:28:71:e3:cb:76:bd:e1:10:1d:50:32:
         1f:89:79:ff:0e:12:8a:2d:5a:85:6d:d7:15:64:e0:e2:38:4a:
         29:68:5b:69:41:91:c2:81:b7:66:a9:6b:fc:9a:ed:82:9b:ca:
         0a:b0:9e:51:e9:dc:8e:a9:f6:55:1d:4f:4c:6a:7e:45:62:c8:
         c5:e3:f9:09:ba:91:97:06:75:e4:f5:b7:4d:be:c2:a0:16:0b:
         7e:e4:0b:3a:f9:b1:79:47:44:2c:86:e8:54:29:f0:8f:cf:08:
         be:97:86:4a:09:e7:7d:b1:ec:38:33:8e:ed:47:c9:2c:9d:13:
         a6:f2:d4:e5:b6:b2:b5:81:bb:67:61:be:11:e8:a0:d5:9d:d7:
         43:da:dd:64:62:cc:f4:1f:07:d6:75:b4:e6:c0:31:b4:50:6f:
         29:07:5d:b9:aa:eb:15:8e:5b:e4:1c:b2:74:f0:22:3a:ad:96:
         43:89:56:58:ac:8f:e8:3c:7b:cc:46:1e:6b:71:3c:94:30:c2:
         10:cd:ef:46:7f:95:a5:f8:e6:9f:43:ce:1b:71:77:b2:bb:63:
         42:3a:07:42:44:ee:da:34:da:4f:64:6a:46:24:b3:a1:82:b6:
         c1:87:b7:a9:8d:ee:70:b4:26:39:98:20:d3:c8:57:3e:3d:d1:
         30:cb:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:52 2026 by rpki-client