Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa
File:                     83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa (raw, json)
Hash identifier:          DVzuEX2c1CS9GsjsFDQJzU+9jSfngpY69faOTtlxqj4=
Subject key identifier:   C9:A9:8C:65:38:F8:97:5A:DC:FB:43:DE:85:86:60:B9:60:C2:35:02
Certificate issuer:       /CN=b3834a8f-3f69-4b14-8090-6b2dc08edacc
Certificate serial:       010D0C9F4328584E556BE12AF566795B2E650BC0
Authority key identifier: 83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa
Signing time:             Mon 29 Jun 2026 15:09:35 +0000
ROA not before:           Mon 29 Jun 2026 15:09:35 +0000
ROA not after:            Sun 27 Sep 2026 15:09:35 +0000
asID:                     3128
IP address blocks:        139.225.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:55:6b:e1:2a:f5:66:79:5b:2e:65:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3834a8f-3f69-4b14-8090-6b2dc08edacc
        Validity
            Not Before: Jun 29 15:09:35 2026 GMT
            Not After : Sep 27 15:09:35 2026 GMT
        Subject: CN=cd90556c-6c02-48e1-b6cd-d2e7763f4f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:c7:d3:78:8a:61:0c:fd:fa:f1:99:0e:15:
                    ba:e0:7f:a4:3e:a9:8f:75:7b:08:ca:28:50:26:eb:
                    3f:77:ea:e3:49:32:61:a5:85:df:e6:3e:6e:7a:7d:
                    14:40:02:ff:70:40:b6:3e:35:af:c6:0a:00:d6:b3:
                    1c:4a:44:95:b5:17:e0:07:82:5f:f4:b3:82:e0:25:
                    5c:10:03:6f:90:e3:bf:3f:eb:f3:af:15:ba:61:dd:
                    37:46:1e:05:aa:e8:1a:83:74:bd:bd:3c:1d:f8:c2:
                    fc:d3:e8:8e:1d:09:57:bd:18:ab:b9:92:f4:8b:c0:
                    c2:73:0f:50:0c:27:44:bd:6a:25:67:fb:f7:75:eb:
                    16:4f:9a:df:c9:06:b1:d4:4d:ff:4d:8f:14:31:8e:
                    cb:5f:e3:1d:c4:4c:a5:c7:a4:67:87:d0:83:88:81:
                    11:73:b1:ca:59:46:5b:09:9d:d6:3c:d0:1d:03:8e:
                    0c:87:14:89:96:83:5a:a5:0e:c8:cf:89:32:8f:7d:
                    59:91:3f:8e:44:f3:8e:0a:37:01:86:bf:ca:98:ad:
                    43:c1:bd:c5:cc:04:5e:67:54:ad:70:27:de:f2:3d:
                    1c:08:0b:bc:3a:c7:c4:87:74:80:da:3d:ba:da:c5:
                    61:f2:3d:59:5c:3f:ea:ad:33:37:e5:ee:83:cd:78:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:8C:65:38:F8:97:5A:DC:FB:43:DE:85:86:60:B9:60:C2:35:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/83290c9a-ee26-32c6-a2c5-6c26e95c3100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.crl

            X509v3 Authority Key Identifier:
                keyid:83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.225.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1d:f4:16:37:1d:18:2d:3b:8d:8f:de:24:9b:ca:2a:39:4f:
         c5:f2:16:3f:bc:f0:c8:6d:42:2c:10:f5:b1:d1:bb:97:d2:50:
         4e:5b:95:8c:4a:6b:55:fe:fe:16:88:c2:a4:a8:12:b9:bc:ca:
         73:c0:2c:48:e2:4e:56:bc:ce:30:df:6e:f9:97:ba:c9:1e:a9:
         d6:0e:a5:c8:33:f4:e9:0b:e7:a5:4c:d5:4d:f3:15:2f:60:4d:
         71:7e:fc:1f:64:e5:e9:2a:4b:a0:82:46:36:50:4d:90:ff:55:
         2f:2f:91:a7:c7:76:71:38:15:f4:23:4a:95:1b:4c:85:6b:1d:
         ee:c7:2f:c7:52:a4:14:0d:be:72:29:6f:f0:db:4a:5f:6e:84:
         63:57:7c:5b:11:60:29:33:5a:4d:ba:56:65:67:d1:88:84:46:
         87:a2:9a:a8:8f:2e:9e:0c:9f:ae:a9:e1:3c:09:af:c9:e9:62:
         cb:22:f6:0d:ec:c2:fd:df:0b:03:7d:58:d0:e7:76:ea:d0:b9:
         a4:c0:b5:3b:34:e6:5f:22:25:35:ee:b3:24:7e:96:30:75:26:
         71:76:27:d2:2d:17:5a:00:35:ac:15:40:c2:db:6f:be:2a:c7:
         d3:8c:a5:0a:55:1d:1e:7d:ba:50:c5:a2:99:bb:56:ec:8f:ee:
         da:9f:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:46 2026 by rpki-client