Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa
File:                     d9a535df-85dc-3aef-a8ba-25df7920f550.roa (raw, json)
Hash identifier:          xdnfZDAGINxhXkqykPUqTWaYAN+HCs/ybvIN0jZK0YQ=
Subject key identifier:   E1:38:7B:F7:BE:6C:B7:25:E4:F6:EE:64:B8:4E:5A:8B:7B:03:0D:0D
Certificate issuer:       /CN=f195db10-ef56-4145-99a8-ea6962c2a136
Certificate serial:       010D0C9F4328584EAE81A34EF750D73EF6C3F9A0
Authority key identifier: 49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     14618
IP address blocks:        172.81.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a3:4e:f7:50:d7:3e:f6:c3:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f195db10-ef56-4145-99a8-ea6962c2a136
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=e1b92877-ca5e-49e7-bbcd-58cc4fda4f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:f1:98:b4:79:d7:dd:6b:d8:87:76:3f:a9:
                    dd:d8:de:47:a5:a1:5c:a2:23:9b:50:9e:85:c6:f5:
                    fe:b9:b5:10:14:93:d0:1c:34:3f:a3:bc:45:4d:40:
                    ad:2f:b5:74:08:8d:67:dd:30:da:4f:21:53:5a:1d:
                    a1:c8:b6:be:34:bc:3a:09:43:f9:10:d7:1a:67:eb:
                    d5:bd:87:14:06:c8:64:1f:41:26:64:59:4f:c1:a8:
                    95:7c:d0:24:bd:23:99:60:62:b2:63:2e:a7:7a:ae:
                    bb:7a:85:a5:7e:22:53:db:49:e1:4e:04:c2:de:02:
                    f0:93:0d:6b:93:11:25:13:28:4f:7c:9c:3a:dd:d4:
                    68:63:9e:5f:f8:f1:1e:89:c2:0f:53:69:9e:da:ec:
                    d7:4d:46:ee:63:ad:85:94:b2:54:85:82:fe:5d:06:
                    dc:d4:ab:96:e6:28:b3:a2:87:0d:4d:0a:00:78:73:
                    de:ee:2a:e6:a9:a5:5e:4d:81:a1:c7:e4:19:59:88:
                    2e:96:56:95:35:c9:ff:2e:eb:f9:d7:39:6e:b2:8c:
                    6a:fa:e1:e0:08:50:62:73:94:89:44:59:d5:c9:be:
                    09:14:9b:b1:79:ba:d7:ce:3c:a4:69:0f:79:f7:ed:
                    2c:82:5b:78:29:28:79:fe:b6:9a:01:ea:79:e6:a9:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:7B:F7:BE:6C:B7:25:E4:F6:EE:64:B8:4E:5A:8B:7B:03:0D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl

            X509v3 Authority Key Identifier:
                keyid:49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:de:30:08:0e:61:55:ee:7d:92:a7:86:5c:ed:8b:ee:b2:3d:
         60:58:8e:e7:37:69:81:94:0c:d1:ec:47:ed:99:b9:c4:38:fc:
         3d:90:7a:ce:ee:cc:1d:80:bd:46:08:bb:f7:14:f0:a8:f5:37:
         f6:e8:41:d7:db:06:5f:0c:58:15:98:72:2c:ac:bd:3d:24:ee:
         89:e5:d2:2b:77:67:91:05:13:f5:1b:06:f2:1b:d7:d7:15:5c:
         ef:3f:4a:11:6f:44:ab:71:8e:91:92:42:d1:09:e0:a8:8e:11:
         09:61:c9:ee:13:4f:ba:69:7a:57:b5:58:03:d7:4b:79:ea:31:
         a0:da:b9:33:65:f5:f0:cc:76:b3:e3:be:52:38:0f:4c:f8:f3:
         e8:94:ae:e0:a7:9d:06:6d:16:31:23:9f:d2:b4:9d:ac:87:29:
         84:c5:3a:0c:a2:8d:d8:95:23:8d:80:53:63:63:54:b5:5a:6e:
         38:ae:5a:e7:a2:7e:fb:b6:30:b1:9b:18:90:5f:79:fa:0d:50:
         a6:61:b0:63:f8:a9:e9:d4:e2:50:eb:f2:cd:fa:46:72:d0:55:
         b9:a6:b4:ce:ee:fd:16:65:74:c9:75:ec:35:71:41:d9:8e:16:
         30:f8:6c:9e:4e:78:23:c3:58:77:d9:a6:83:6d:dd:9c:18:8b:
         fc:f8:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:27 2026 by rpki-client