Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa
File:                     c21afaab-be50-3b57-ba91-da332dfb82c7.roa (raw, json)
Hash identifier:          FK/1Iqi6HfjiewA9zP64IwoF0UobwueflR9opEl7inw=
Subject key identifier:   E0:7B:F9:A9:A9:6D:5C:71:CD:E2:69:6B:C1:59:58:B5:D0:C4:9B:6F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F00DCD3291BE0F339BFC51A60
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        139.60.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:d3:29:1b:e0:f3:39:bf:c5:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=3232ccdf-08f9-48cc-b6ab-407e2457b19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:41:c0:6d:82:65:f6:20:bd:75:8e:6b:10:9c:
                    42:c1:89:b9:ce:36:de:9c:80:21:11:a0:ed:c2:50:
                    92:cc:82:d5:3b:aa:70:ba:1c:4b:97:1f:27:6f:97:
                    91:40:ff:4c:ba:54:10:6c:27:01:f2:b0:0d:34:37:
                    32:f3:78:70:7b:dd:ab:ad:a3:fe:74:3e:08:d6:ea:
                    53:5d:3e:56:75:0a:27:37:5a:f0:ed:50:17:39:fa:
                    5d:3c:62:8c:38:2a:d5:77:46:c7:bf:9f:95:1e:3c:
                    92:15:08:2f:fb:c9:d6:53:e5:16:b4:10:6c:16:a6:
                    6d:bd:ac:b7:8d:a5:bf:7f:63:99:f5:19:52:4c:21:
                    40:fd:f4:18:a3:45:64:96:e7:98:e7:38:39:74:eb:
                    2b:1c:20:23:dc:44:8d:30:f0:18:54:a9:85:e8:14:
                    1f:89:8d:4c:2f:82:8a:2e:9e:15:f0:7c:23:21:25:
                    8d:94:05:da:86:27:ff:02:89:28:aa:37:d2:e8:be:
                    dc:39:70:15:d4:0c:e2:e7:34:40:a6:97:b3:d7:8c:
                    86:60:dc:35:8a:7c:19:db:5c:16:ca:46:fd:2b:00:
                    25:49:d4:9e:3b:20:9e:ce:52:b9:de:bb:4d:aa:78:
                    13:9b:c7:6a:c7:68:c4:99:04:70:47:f7:fb:ae:63:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:F9:A9:A9:6D:5C:71:CD:E2:69:6B:C1:59:58:B5:D0:C4:9B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f2:ed:46:06:6c:1b:ca:c6:dc:f3:ba:ca:2e:ed:e6:74:02:
         a4:a2:d9:21:7e:bd:16:9d:c3:9b:7c:bc:e1:01:d6:98:b4:59:
         1c:2b:c2:21:71:2e:91:55:d7:84:7a:6c:33:3a:93:a1:c9:c1:
         34:d2:4e:eb:9c:be:25:e8:e8:90:57:21:8c:11:47:18:58:45:
         f7:14:94:11:ca:67:f4:d7:7d:99:c7:4d:39:d2:2a:89:c3:6a:
         be:15:f3:97:06:a1:5f:bf:47:2d:44:21:c1:0f:bc:eb:9b:19:
         c7:99:13:1d:6c:4b:d9:f1:45:a6:09:59:3f:c6:ea:7a:f3:04:
         a8:8b:82:a9:66:3b:fa:48:86:9d:76:cb:51:ae:4d:35:63:2e:
         81:ac:3c:f8:af:2e:4d:70:8a:ff:bc:4a:fd:0c:28:d5:e7:f1:
         a4:3f:bd:48:ec:b6:31:aa:10:73:5c:d9:0b:25:87:ec:99:b3:
         18:10:b7:f5:19:32:82:aa:aa:c0:ca:15:3b:87:22:5b:c4:cb:
         d4:08:95:be:93:fa:2f:ad:3d:a2:a6:87:a7:c4:5b:90:01:b7:
         57:8c:f4:42:03:87:b5:34:b1:d2:d8:fb:df:ae:71:cf:a6:60:
         87:d9:3f:f6:9a:6d:8c:40:36:b0:30:ce:be:55:47:06:0d:c9:
         7e:78:6f:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3NMpG+DzOb/FGmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
MzIzMmNjZGYtMDhmOS00OGNjLWI2YWItNDA3ZTI0NTdiMTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkHAbYJl9iC9dY5rEJxCwYm5zjbenIAhEaDt
wlCSzILVO6pwuhxLlx8nb5eRQP9MulQQbCcB8rANNDcy83hwe92rraP+dD4I1upT
XT5WdQonN1rw7VAXOfpdPGKMOCrVd0bHv5+VHjySFQgv+8nWU+UWtBBsFqZtvay3
jaW/f2OZ9RlSTCFA/fQYo0VklueY5zg5dOsrHCAj3ESNMPAYVKmF6BQfiY1ML4KK
Lp4V8HwjISWNlAXahif/AokoqjfS6L7cOXAV1Azi5zRAppez14yGYNw1inwZ21wW
ykb9KwAlSdSeOyCezlK53rtNqngTm8dqx2jEmQRwR/f7rmPSuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOB7+ampbVxxzeJpa8FZWLXQxJtvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzIxYWZhYWItYmU1MC0z
YjU3LWJhOTEtZGEzMzJkZmI4MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizxlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXy7UYGbBvKxtzzusou7eZ0AqSi2SF+vRadw5t8vOEB1pi0WRwrwiFx
LpFV14R6bDM6k6HJwTTSTuucviXo6JBXIYwRRxhYRfcUlBHKZ/TXfZnHTTnSKonD
ar4V85cGoV+/Ry1EIcEPvOubGceZEx1sS9nxRaYJWT/G6nrzBKiLgqlmO/pIhp12
y1GuTTVjLoGsPPivLk1wiv+8Sv0MKNXn8aQ/vUjstjGqEHNc2Qslh+yZsxgQt/UZ
MoKqqsDKFTuHIlvEy9QIlb6T+i+tPaKmh6fEW5ABt1eM9EIDh7U0sdLY+9+ucc+m
YIfZP/aabYxANrAwzr5VRwYNyX54b+8=
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:16:54 2026 by rpki-client