Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bdcbf735-9e7a-38f3-aefa-26be67c11312.roa
File:                     bdcbf735-9e7a-38f3-aefa-26be67c11312.roa (raw, json)
Hash identifier:          IoH7i/BcWuuoRrgafP/Tb1wEmprct0culLaWLsXMcJo=
Subject key identifier:   E4:74:CE:F0:5C:31:C8:1C:CE:13:7C:33:97:47:64:CB:B5:95:DB:39
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584D1B1A1AD01EA8283729670980
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bdcbf735-9e7a-38f3-aefa-26be67c11312.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     188
IP address blocks:        139.121.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:1a:d0:1e:a8:28:37:29:67:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=d011e5b5-8a9d-4c44-96c5-e90ac9ec95e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:f3:32:37:93:bd:49:e3:bf:65:c3:eb:06:
                    d5:2c:fd:f1:bf:2c:5a:35:7f:0c:a1:7f:45:0d:9d:
                    63:8d:95:17:51:5d:14:08:7f:30:1c:a7:f4:04:c2:
                    ed:4a:08:2a:a8:25:7e:82:6f:e7:62:5c:93:28:9e:
                    6e:ac:a9:bf:b2:6b:d4:e7:8a:cd:32:a1:6a:fc:d5:
                    a8:96:74:18:e9:74:ad:b1:a2:a2:ef:38:5b:a1:4a:
                    63:62:12:3b:91:d0:d9:b5:41:af:ac:a0:2b:90:21:
                    d3:12:10:6f:36:07:92:72:ca:3c:f9:e0:f3:c3:20:
                    7f:54:9a:62:1e:33:28:da:7a:99:70:28:d0:fc:75:
                    3d:2d:55:62:3f:f7:e9:22:c5:1f:23:a1:0c:99:17:
                    b1:b7:6a:c2:24:d4:0d:11:7d:95:43:31:76:be:e6:
                    e8:9d:25:04:f6:a8:f4:39:f1:f0:e9:e8:99:14:e6:
                    4a:96:fd:11:88:6f:e0:38:bb:fa:d5:77:a3:2b:81:
                    2f:18:93:c3:ea:af:13:cb:9d:54:3d:2e:cc:f8:b5:
                    85:f9:40:48:14:06:1d:b5:73:35:ab:7d:5c:d2:be:
                    00:75:75:2e:6f:a1:6e:46:83:f4:d2:db:70:31:00:
                    9a:11:e6:3c:e8:35:58:86:a5:6e:69:c4:c6:a2:33:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:74:CE:F0:5C:31:C8:1C:CE:13:7C:33:97:47:64:CB:B5:95:DB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bdcbf735-9e7a-38f3-aefa-26be67c11312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:6c:17:b9:51:3f:d8:22:22:e7:af:01:8f:a5:81:d5:c6:
         ec:54:fb:62:ca:7a:a2:75:fc:8d:db:ac:4b:11:15:25:6a:f1:
         07:2f:10:43:72:ae:7f:c3:d4:73:a1:a2:6d:53:35:ca:35:6a:
         a5:15:bd:a3:a0:ba:1e:18:13:fe:04:a1:92:25:32:52:2c:07:
         57:ee:80:06:30:89:f6:3a:1f:84:04:9d:e8:1b:41:9f:7a:5f:
         e0:46:9b:f2:a4:5b:09:8e:b3:22:28:1b:fd:3e:ba:31:28:ef:
         2c:de:b0:6e:ea:a5:04:81:c3:b6:6e:01:09:a3:31:d6:7f:ce:
         a2:ba:17:c6:43:91:c1:f5:9c:73:a5:08:79:01:61:9b:4a:13:
         55:80:c8:90:2c:0f:c1:99:91:70:71:cf:9a:9f:bc:f9:94:93:
         4b:db:ce:18:cc:5a:97:f9:e6:70:41:eb:36:5d:9b:91:79:15:
         ac:a7:50:cb:81:2e:20:6d:36:cc:54:4d:a9:5b:15:1e:22:d1:
         43:c5:18:e6:f1:50:11:12:71:a3:5d:8e:94:9b:5a:92:53:41:
         f6:7c:28:04:13:7e:86:99:8f:54:bb:b0:38:f7:41:e2:6b:26:
         1a:54:31:ea:fc:24:f7:4c:10:d6:64:40:a8:03:17:fa:64:c5:
         18:ed:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 17:27:22 2026 by rpki-client