Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b80e1e90-8942-3e46-b079-d0c7e0823eca.roa
File:                     b80e1e90-8942-3e46-b079-d0c7e0823eca.roa (raw, json)
Hash identifier:          6fqSUg23A+SsksQur1VVCxZ8FD+2+TCHvGjzl5fx+DQ=
Subject key identifier:   38:26:D0:EE:41:2A:08:14:7C:2A:24:D6:C0:06:B8:D0:3B:FA:31:63
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F549D4FF49C64F338C79B6580
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b80e1e90-8942-3e46-b079-d0c7e0823eca.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     3503
IP address blocks:        139.177.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:4f:f4:9c:64:f3:38:c7:9b:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=c619ec5a-ae26-4d6e-bb52-7f5993bf4b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:e1:7a:dd:73:b0:95:6f:18:fd:42:6f:3d:
                    ea:66:8e:3d:31:ec:eb:05:8f:3e:d3:55:03:4c:ad:
                    43:da:30:0f:7a:a3:f1:76:e6:7e:cf:ae:f8:37:24:
                    ea:ed:09:71:54:7e:7c:f1:8b:42:a8:77:2e:66:f9:
                    5d:e2:bd:16:9e:10:da:39:f4:27:7d:80:5f:46:ad:
                    52:4a:57:2e:d3:59:6c:80:f8:77:8f:2d:71:18:73:
                    a3:f2:35:fb:28:c2:ea:1c:36:7c:55:e7:03:b6:48:
                    db:1d:e6:7a:18:7d:af:2d:79:75:f9:cb:68:00:a8:
                    2e:92:58:46:3f:38:39:40:ba:ad:59:f5:25:f4:f4:
                    b5:07:de:62:e3:00:a4:84:5c:a4:8c:37:98:51:35:
                    43:cb:76:c6:00:b1:4f:4b:c5:86:be:a2:5c:74:96:
                    d0:1e:ce:43:0c:fd:ed:8f:5d:6a:84:6b:1d:fc:b2:
                    64:1a:b0:70:dd:b8:2f:47:56:5a:2e:08:11:24:95:
                    a9:02:f1:b0:6d:1d:2e:77:58:ab:3f:81:c7:3a:c6:
                    0d:4e:07:47:68:60:fd:55:d1:e2:c6:31:cd:aa:00:
                    5b:ed:b2:92:aa:35:34:4f:01:a1:1e:83:4d:0c:97:
                    52:be:2c:2d:e7:e5:fc:98:af:44:c5:41:51:2e:cc:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:D0:EE:41:2A:08:14:7C:2A:24:D6:C0:06:B8:D0:3B:FA:31:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b80e1e90-8942-3e46-b079-d0c7e0823eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:4e:29:7a:fd:be:47:db:10:8b:d7:7f:f6:98:9d:5c:3c:
         65:f5:57:15:0e:e8:43:3a:2b:e8:3c:35:ec:c1:25:27:27:58:
         36:9c:ab:e9:95:66:45:0d:29:c1:25:c1:84:02:78:d2:8b:da:
         b6:b6:c7:fb:ea:c3:dc:28:77:9f:5b:7b:e9:55:5f:0f:7b:27:
         26:e9:c9:d0:6e:79:33:24:09:e1:2d:ed:65:6b:b9:48:a8:a2:
         75:e3:09:0d:8c:3a:e3:e7:41:0b:11:ee:f9:dc:75:45:87:5a:
         74:8b:3d:38:6a:b8:5e:cc:c3:38:97:66:21:69:73:a8:05:b3:
         bf:6d:1d:f4:e7:9f:fb:1c:85:7b:93:4f:f3:2d:ef:a4:79:57:
         37:74:08:2d:96:dc:cf:c6:55:89:c6:f0:c0:03:76:b7:90:22:
         0f:4f:e5:1b:bd:5c:3e:af:19:5c:33:34:3c:c4:13:aa:b1:d4:
         23:f2:50:1b:eb:30:17:87:40:f1:46:3c:f1:2c:bd:14:6b:91:
         ff:94:7c:93:7c:26:a0:1a:b1:a2:67:0c:db:2d:7f:6e:4e:f8:
         3b:c2:79:77:53:f6:5f:ed:1d:53:4d:a0:c8:b2:d4:1f:85:f3:
         b5:d8:48:4e:07:c8:5e:8e:d3:b8:84:ea:b2:97:c9:b3:cc:fa:
         7a:77:4e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:13:59 2026 by rpki-client