Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d0e9f6b5-5aa0-3d8c-9331-d61105c29472.roa
File:                     d0e9f6b5-5aa0-3d8c-9331-d61105c29472.roa (raw, json)
Hash identifier:          vt7Irzd5qKP/Lp0Zyz6OYLO+ZlNl9pBp/jtHZmIHxC8=
Subject key identifier:   47:8D:E3:90:AB:F3:F2:AE:5D:83:59:4D:25:50:96:C5:F1:95:47:BA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E5E79F71A0D903254A427E9C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d0e9f6b5-5aa0-3d8c-9331-d61105c29472.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     20001
IP address blocks:        139.180.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f7:1a:0d:90:32:54:a4:27:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=3a023c01-66af-45c4-852b-a9056537b714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:f7:33:d2:03:26:f3:8f:41:30:39:d7:7c:
                    b3:fd:4a:5b:30:b1:c6:43:13:bb:14:75:20:a2:e0:
                    32:4d:70:0c:ca:f9:da:cd:26:9b:24:92:78:4c:49:
                    0d:f3:7f:fe:17:9e:44:f6:63:ed:bd:57:2e:81:52:
                    89:ba:da:f7:33:ab:ee:99:6b:65:90:c8:dd:33:4a:
                    8f:76:f1:8d:a4:e2:dd:98:83:61:38:e7:b2:b5:23:
                    59:a9:65:b0:9c:43:0b:d3:b4:a9:77:d2:a0:01:73:
                    d0:cb:7a:81:0c:b6:fc:e4:df:76:8c:ff:21:2f:e6:
                    78:0c:5c:47:3f:98:e2:33:52:63:f5:d3:04:c5:e7:
                    99:53:01:b3:6a:99:df:ea:ce:76:2f:d8:59:21:cf:
                    62:37:4e:ed:64:01:8a:ef:fb:a6:fb:44:3a:5d:bd:
                    d4:c6:60:d0:d1:15:e3:e9:ce:96:a5:50:29:2e:9d:
                    2b:bd:ff:c3:5d:25:c3:03:e9:8d:86:9f:19:60:32:
                    ff:c0:20:2d:cf:ef:7d:24:d4:ce:77:c1:e1:0d:95:
                    03:8c:0d:56:db:ec:91:5d:84:6e:dc:1e:b4:a2:15:
                    f7:82:0f:41:d2:66:e6:90:2c:3c:ba:1f:1f:c7:9e:
                    0d:28:a4:b9:a4:b7:64:b7:d0:d2:52:63:04:0e:77:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:E3:90:AB:F3:F2:AE:5D:83:59:4D:25:50:96:C5:F1:95:47:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d0e9f6b5-5aa0-3d8c-9331-d61105c29472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:26:56:da:24:1f:53:d2:75:1c:29:ec:52:6a:f3:b9:5a:99:
         45:e2:6c:83:b2:c9:90:13:e5:03:0b:94:fc:a4:b1:6c:ae:4f:
         e6:4a:d8:0c:33:f5:96:ff:c3:64:e8:f6:38:18:2b:c8:b9:36:
         e9:36:6a:6e:d0:d2:74:45:0b:1d:dc:8e:e8:fa:da:b8:9c:13:
         27:94:31:a8:ab:d4:cf:be:75:ef:80:6c:27:04:2e:8d:3b:f4:
         d9:5c:ab:41:c8:39:db:d3:f7:34:27:b3:cb:4e:c4:9c:46:a4:
         9a:75:7a:f1:67:9e:3d:11:df:18:a4:5c:15:16:e3:7d:fb:9d:
         16:c4:80:7d:d2:6a:b5:a9:0d:8e:68:42:51:3e:64:fc:19:6e:
         8d:4d:d1:ea:b4:58:84:5d:d7:47:fd:72:57:2b:a2:87:14:a3:
         ee:9a:09:5e:83:7e:d7:95:2d:24:dc:f7:79:89:05:c2:90:fc:
         b9:cb:ec:62:5f:7b:aa:b6:1a:2c:76:a7:c7:45:56:df:a0:c1:
         a8:5b:c0:b3:c4:ce:88:36:08:e6:59:cb:af:4e:fc:6b:67:ac:
         38:a0:65:ee:73:58:70:71:e2:14:04:d7:e3:74:8e:ab:48:b7:
         69:c7:01:11:2b:af:de:64:4b:0b:ac:f4:93:98:2c:4b:f6:4a:
         a5:c7:20:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eefcaDZAyVKQn6cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
M2EwMjNjMDEtNjZhZi00NWM0LTg1MmItYTkwNTY1MzdiNzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Fz3M9IDJvOPQTA513yz/UpbMLHGQxO7FHUg
ouAyTXAMyvnazSabJJJ4TEkN83/+F55E9mPtvVcugVKJutr3M6vumWtlkMjdM0qP
dvGNpOLdmINhOOeytSNZqWWwnEML07Spd9KgAXPQy3qBDLb85N92jP8hL+Z4DFxH
P5jiM1Jj9dMExeeZUwGzapnf6s52L9hZIc9iN07tZAGK7/um+0Q6Xb3UxmDQ0RXj
6c6WpVApLp0rvf/DXSXDA+mNhp8ZYDL/wCAtz+99JNTOd8HhDZUDjA1W2+yRXYRu
3B60ohX3gg9B0mbmkCw8uh8fx54NKKS5pLdkt9DSUmMEDncOPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeN45Cr8/KuXYNZTSVQlsXxlUe6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDBlOWY2YjUtNWFhMC0z
ZDhjLTkzMzEtZDYxMTA1YzI5NDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7TlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOImVtokH1PSdRwp7FJq87lamUXibIOyyZAT5QMLlPyksWyuT+ZK2Awz
9Zb/w2To9jgYK8i5Nuk2am7Q0nRFCx3cjuj62ricEyeUMair1M++de+AbCcELo07
9Nlcq0HIOdvT9zQns8tOxJxGpJp1evFnnj0R3xikXBUW4337nRbEgH3SarWpDY5o
QlE+ZPwZbo1N0eq0WIRd10f9clcroocUo+6aCV6DfteVLSTc93mJBcKQ/LnL7GJf
e6q2Gix2p8dFVt+gwahbwLPEzog2COZZy69O/GtnrDigZe5zWHBx4hQE1+N0jqtI
t2nHARErr95kSwus9JOYLEv2SqXHIP0=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:22:38 2026 by rpki-client