Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa
File:                     1397b71d-13d4-3f60-94a3-f56343af9a0b.roa (raw, json)
Hash identifier:          59L+meK2fTVKOXCYqv+/FDG+WkTFdk7Kpe9dqtAJr+k=
Subject key identifier:   9E:31:E3:D8:3A:6D:F1:70:E4:B7:B9:54:97:1A:3B:23:E2:E1:F3:DA
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584EA7917FE27E22984E15145200
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     897
IP address blocks:        192.138.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:7f:e2:7e:22:98:4e:15:14:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=326b4dd3-fbd5-4a27-aedb-5c4b790dbe9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:10:c9:56:40:d8:ec:ff:e6:be:74:bc:22:
                    5f:fb:62:b2:b0:ed:af:64:64:2d:64:75:73:2b:ae:
                    eb:cf:38:9f:51:3f:b8:d7:67:9f:46:b7:37:4c:9f:
                    71:0d:f3:46:61:e3:2f:87:d7:c6:8c:96:ff:ca:84:
                    7b:22:a9:84:75:ad:d7:ef:3e:66:9a:52:85:06:0e:
                    d3:4f:34:83:98:7e:37:3d:96:09:59:8b:41:4f:de:
                    bf:60:b0:03:24:0d:9a:44:6a:8f:a7:27:75:71:64:
                    8f:11:63:ad:5e:25:83:78:f8:e0:f4:ca:d7:15:82:
                    c3:65:3b:09:6e:2f:2a:0c:2a:2e:28:0e:08:6d:e6:
                    2c:48:3b:78:49:05:09:71:51:f9:24:8e:5a:63:0c:
                    9a:01:64:61:2d:a4:09:89:19:99:f8:b4:ad:9f:eb:
                    5d:a4:a3:7f:17:7d:ce:af:66:e3:86:64:ac:97:e5:
                    ff:a3:bd:53:9e:c9:92:c4:9c:6f:cf:19:e4:d8:29:
                    85:5d:71:c1:03:bd:82:17:d7:41:40:f2:cd:01:d8:
                    41:81:7f:63:2f:56:71:f6:e4:57:04:a1:1c:68:5b:
                    fc:3e:47:bd:f9:ea:6a:d2:94:55:52:9e:f6:cf:69:
                    13:fc:e6:15:44:8f:a5:f7:c7:4b:be:0f:2b:ef:7a:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:E3:D8:3A:6D:F1:70:E4:B7:B9:54:97:1A:3B:23:E2:E1:F3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:e4:88:28:4d:49:ed:15:67:a2:7d:6b:6b:f9:97:5f:98:
         23:d1:29:fc:60:8e:8a:a2:93:11:5e:9e:a7:b6:fc:19:d4:bd:
         8a:52:df:7b:fb:84:f7:e9:67:42:e9:b8:02:7b:92:65:9c:80:
         89:45:f8:08:93:71:19:e4:8f:60:95:f8:dc:5b:f1:4e:bf:55:
         fb:cd:d6:39:d3:db:b3:3e:bc:58:0c:76:b9:c1:14:57:46:95:
         e4:88:04:4e:6c:70:33:4f:d8:b2:5f:59:9c:1c:03:d5:7d:cf:
         2c:15:cb:40:2d:a8:58:67:6b:0f:51:95:29:39:08:ea:ff:c3:
         33:1e:ee:c3:7d:26:59:d9:2d:08:7f:4b:5a:3b:c6:4f:8b:07:
         c4:82:7d:67:50:06:46:cd:09:4e:a7:22:75:9e:c0:63:cd:32:
         fc:30:40:47:69:b7:c2:54:8b:b1:c1:ad:01:59:58:8f:2e:b8:
         0c:0a:f9:0e:a6:4c:20:36:fe:c5:c8:fc:d2:50:f0:b4:c9:16:
         45:18:a2:68:96:89:32:63:09:84:35:4b:77:47:dc:05:40:7c:
         83:98:bc:18:b1:dd:32:6a:4f:58:4e:47:6f:fd:47:51:5f:6e:
         a3:56:84:d3:25:6d:b5:ed:6e:bf:bd:0b:72:5e:ae:4f:3d:14:
         9a:cb:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:54 2026 by rpki-client