Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa
File:                     c21afaab-be50-3b57-ba91-da332dfb82c7.roa (raw, json)
Hash identifier:          pelXOk8XyDpHAj3gT6ilL0GMXYMkNgX8R8vjdZZkC8U=
Subject key identifier:   3F:52:E9:2C:ED:CF:CA:DE:E9:59:F0:7A:57:F6:FD:F6:48:9E:61:93
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584FA2C8894ABF9D0E0B3430DCC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     20001
IP address blocks:        139.60.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:89:4a:bf:9d:0e:0b:34:30:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=aef08d68-6e39-4887-ac75-539912120702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:d7:58:73:04:df:72:32:ab:86:4a:36:d3:
                    63:65:db:1b:6e:b8:d9:96:41:41:11:cb:8a:ad:27:
                    ae:2f:ab:b6:98:ed:f9:a5:83:6a:63:cc:5e:3b:b9:
                    f2:67:54:46:53:e5:6c:3b:4d:4a:7b:d5:3c:d1:69:
                    9d:9b:7a:ab:67:f4:41:81:68:90:fc:df:03:8b:64:
                    da:e0:7a:c4:aa:a9:54:6f:46:ad:f3:2d:38:8e:8e:
                    0a:c2:07:b0:79:db:eb:ec:0e:76:da:97:6e:b4:80:
                    4f:64:23:5a:8e:a3:9a:03:f7:47:79:46:0e:d2:32:
                    92:ba:80:ac:38:19:39:90:77:e7:aa:d4:1e:65:05:
                    4a:38:7d:5a:d7:65:df:ed:8f:96:91:2d:56:2b:fb:
                    e0:cb:7c:49:df:d7:d3:51:a1:19:b4:36:4d:d0:06:
                    3c:9a:c6:84:a6:af:2e:98:9a:ce:dc:22:bc:bc:f2:
                    90:16:01:f6:43:96:ed:d3:43:4e:ef:c8:fb:15:ac:
                    49:e7:8f:75:7c:04:0c:87:d1:c1:20:c0:d5:bb:9f:
                    d3:32:9b:4e:f8:eb:35:68:b2:72:1c:a8:6b:b0:90:
                    ca:2b:63:8f:ab:17:de:18:2d:c7:ed:0a:a1:11:50:
                    88:d5:a4:3d:fe:24:34:44:ac:8b:a4:74:54:93:76:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:52:E9:2C:ED:CF:CA:DE:E9:59:F0:7A:57:F6:FD:F6:48:9E:61:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:0a:27:ba:a1:81:2f:4f:19:52:6c:75:36:b1:6d:10:e9:84:
         22:23:9b:00:fa:a8:6a:50:f3:49:d9:11:48:48:71:fd:bb:5e:
         8f:03:84:a9:a3:b3:60:de:9b:7b:f8:15:60:6b:7f:89:6c:95:
         62:af:45:81:36:97:5b:06:7e:cd:6a:62:64:14:03:03:28:bd:
         27:58:d5:41:84:ce:c9:a6:e2:87:42:36:a7:4f:cf:ca:37:78:
         07:ec:22:4c:63:1c:88:08:ea:da:ea:7e:e1:ae:e5:b9:f2:53:
         1b:a7:1e:d0:52:05:be:56:ae:d1:1d:7e:03:91:fb:32:da:cb:
         c9:8e:6d:a3:b1:4c:f4:d1:c1:25:9e:af:88:2a:c4:44:94:87:
         c7:45:12:ed:79:84:65:c3:00:e6:a9:39:e2:bd:c3:82:c0:83:
         32:1c:b3:e0:fc:e2:ab:2d:41:b8:e8:03:13:9a:b5:51:e6:0e:
         fc:04:49:09:e9:93:99:9c:52:70:68:3d:70:c9:b0:97:ff:35:
         7c:7e:09:e6:73:3e:82:1e:00:67:fd:55:66:96:73:f6:f9:1d:
         0d:01:60:85:d1:8f:d5:3f:d0:4f:5c:af:f6:49:e4:cf:a2:a4:
         43:d9:9a:b4:2b:e9:fa:f2:dd:6a:a2:7a:bd:d8:b1:c4:9b:86:
         22:cb:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:48:23 2026 by rpki-client