Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa
File:                     1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa (raw, json)
Hash identifier:          9IseCxDI5PKXAKLAOriVY0ue9ItHEN3clKKLFTnZQGc=
Subject key identifier:   A3:7A:77:44:6B:72:80:F3:86:9E:D9:02:DB:04:06:AC:C6:2F:16:44
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584BA39CFCDFECC8D1432BD19880
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     22604
IP address blocks:        139.104.96.0/19 maxlen: 24
                          139.104.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9c:fc:df:ec:c8:d1:43:2b:d1:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=1ba1e8ae-1619-4be1-9ab2-69d4809af108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:19:a1:a3:bf:0a:a0:35:f6:c6:af:fc:5e:
                    67:a4:dd:c2:90:9a:ca:cb:dd:c0:1b:1c:fa:08:43:
                    b2:26:ae:d8:e6:fb:25:b8:23:8f:13:4f:10:95:f4:
                    89:62:c8:d6:44:1d:bc:b5:e8:34:33:e6:a5:a3:9f:
                    e3:47:89:00:c9:9f:e1:b5:6b:ef:4e:d0:99:de:13:
                    7e:1b:6a:62:9b:37:41:45:d3:f8:9c:57:19:ae:f2:
                    26:c2:95:ab:1f:99:86:af:ae:5f:2c:ca:b4:08:d0:
                    67:28:d5:3d:c7:b7:61:0a:3f:4b:c8:31:dd:73:a9:
                    79:bd:7d:fe:08:28:87:7a:82:05:7a:8c:5e:b8:c1:
                    49:7d:71:50:b5:67:7b:3e:86:36:42:1c:e7:eb:39:
                    f5:63:de:94:25:0e:31:d1:2d:28:ec:54:10:09:2b:
                    cd:73:04:7c:39:36:b7:ac:49:1b:c6:79:58:05:75:
                    2a:a6:cf:1f:6a:06:76:99:a5:07:c9:00:e7:49:c3:
                    fc:ba:ef:bd:2a:bd:49:97:0a:17:49:fb:f5:cc:90:
                    8a:e7:79:ee:7d:6d:87:7e:cc:b9:1d:0d:30:4c:69:
                    7a:44:5e:48:9e:d1:23:a8:23:fc:27:52:c0:c8:11:
                    69:5f:01:54:65:62:cf:b7:61:a2:09:e4:fb:15:69:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7A:77:44:6B:72:80:F3:86:9E:D9:02:DB:04:06:AC:C6:2F:16:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.96.0/19
                  139.104.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:ee:22:5f:dd:25:5b:ef:c6:be:2a:c3:a4:c2:6e:86:26:
         4f:da:67:1d:7b:5e:db:44:60:b6:8d:54:4c:3a:04:83:48:47:
         77:72:ea:37:c5:52:26:d0:08:02:20:c1:a0:60:7d:b9:b5:80:
         46:89:63:2e:e9:6b:93:29:66:aa:52:0d:eb:3d:f7:12:d2:f5:
         7b:41:22:2f:44:e5:1a:b3:12:b5:bb:62:ae:ed:fe:03:11:94:
         c6:63:cc:45:97:f3:29:f8:cf:e4:80:10:a0:49:db:fb:c7:4d:
         1f:55:19:79:2c:ba:c5:6e:c6:41:cc:8b:ae:bd:ff:87:7a:af:
         3b:b6:77:b8:4b:4a:bf:2d:65:05:74:01:ec:28:bf:32:0e:08:
         27:82:af:d5:88:3d:1c:0e:9d:7c:ed:2b:33:e6:9a:e2:97:f6:
         65:e1:69:52:58:e3:a6:5d:5d:39:b4:b5:71:f6:2a:4c:7d:73:
         46:ce:5c:5f:13:61:af:2a:be:ba:7c:96:84:9a:b8:41:d5:ca:
         50:55:4a:13:9b:19:ed:ec:67:8e:09:d4:a4:fe:e1:64:df:6e:
         08:9e:bc:72:19:c1:f6:b5:ac:68:89:4b:d8:c4:75:7b:5f:15:
         f2:d4:3a:3d:86:d1:81:47:e5:47:82:a8:85:cd:ac:c9:f8:0b:
         0f:32:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:44:26 2025 by rpki-client