Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/77f8794f-1215-36a6-9f30-940affdd6249.roa
File:                     77f8794f-1215-36a6-9f30-940affdd6249.roa (raw, json)
Hash identifier:          3BD7rtHqovbkDh4ijX0HO5FfPFuXLD5eqHvUoWTcBbA=
Subject key identifier:   1D:6E:F3:F6:C8:AF:A7:B2:4B:C0:61:38:7F:BE:71:72:39:F7:02:3D
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E815F9619E5F790462F1ECC40
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/77f8794f-1215-36a6-9f30-940affdd6249.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     33698
IP address blocks:        137.239.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:96:19:e5:f7:90:46:2f:1e:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=833dd5ed-2ed0-4b0f-bda6-aa7c92c3998b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:e9:55:44:b6:62:e4:98:f2:55:49:58:2c:
                    df:23:11:44:4e:3d:75:59:af:c7:f2:cc:e8:ec:fd:
                    c2:32:df:4d:eb:39:39:2d:c2:a4:41:0d:ad:61:55:
                    05:c9:83:dc:cf:d0:03:c5:fa:5e:43:0a:a7:62:f9:
                    dc:f0:0d:04:d9:13:f5:af:8e:52:c4:e6:d3:fa:c9:
                    9a:ea:ba:64:63:f4:4b:9e:d4:a0:15:5c:c9:f5:b8:
                    51:96:61:09:ea:6f:61:e8:39:76:21:f0:ac:39:5c:
                    80:6e:dc:55:dc:64:b4:7e:cd:d7:76:5a:23:9d:37:
                    68:93:01:a5:9b:cc:e9:fc:2c:60:cd:c7:50:fc:0f:
                    7e:c7:fd:96:f3:83:10:06:b7:2e:73:0f:fb:81:2f:
                    9e:5b:97:20:4a:8d:1e:3b:41:f4:e0:a5:80:f6:ad:
                    b8:17:0c:0e:5a:90:e5:79:68:b3:2e:ab:05:7b:42:
                    8c:30:01:e7:5f:52:23:c3:b6:9c:96:a6:a6:b1:73:
                    0d:09:f5:72:67:04:d7:36:91:89:2d:c5:72:04:93:
                    84:57:c5:dc:ea:fc:d3:5c:16:c9:90:4a:ea:cc:7a:
                    15:a7:0c:ff:9f:9e:b7:c5:41:43:70:54:c8:7c:b0:
                    f9:8e:c3:90:82:d3:f1:e7:65:2a:ca:00:9a:72:6e:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6E:F3:F6:C8:AF:A7:B2:4B:C0:61:38:7F:BE:71:72:39:F7:02:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/77f8794f-1215-36a6-9f30-940affdd6249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:43:6a:01:26:f6:33:7c:46:6e:3b:99:61:be:5d:96:3b:
         28:57:ee:3a:c4:1a:45:bd:af:73:14:64:e2:81:e2:db:e6:12:
         64:d1:0d:bc:23:a9:b6:ce:93:fb:e5:7c:1c:80:57:cb:77:95:
         70:94:4f:34:0a:3f:89:0d:53:66:2e:1e:42:1c:00:eb:69:fb:
         e8:f0:ce:cf:09:70:0c:c3:98:42:3a:08:e3:2d:f2:aa:72:07:
         a3:ea:a6:bd:49:ec:ae:ec:8f:d5:5a:44:81:72:65:92:21:73:
         64:78:08:06:6b:3b:81:1c:ff:e0:69:34:47:ac:b0:18:7a:61:
         39:b8:70:0e:d9:9f:c2:c1:c0:b8:36:39:87:5b:b1:61:2c:25:
         31:91:3a:db:b0:df:8a:fd:14:b2:d4:de:cd:b0:82:bf:7a:66:
         01:e8:c3:22:2a:6a:2d:23:5c:b6:ef:9d:9f:74:e7:0f:83:f0:
         3a:b6:31:d5:03:03:b0:be:3c:e4:28:ca:20:4f:64:02:59:32:
         be:00:e6:3a:55:b2:ac:26:4c:52:fd:99:79:92:60:2f:15:01:
         e4:13:f5:50:17:3f:3b:c0:b3:49:b3:5e:56:e6:46:ab:47:82:
         b9:50:c8:45:4d:11:68:e5:79:c1:47:b5:fa:08:35:f4:77:be:
         eb:b8:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 07:41:29 2026 by rpki-client