Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/64802b2f-4082-3908-a330-6608508a1af2.roa
File:                     64802b2f-4082-3908-a330-6608508a1af2.roa (raw, json)
Hash identifier:          CzR2jvTsxK13WxWRwESOMi1clm8YHP4SpGVJZ3AVpJA=
Subject key identifier:   E0:91:34:B1:E3:6B:01:10:51:05:B5:C3:A7:2B:17:5B:3C:64:DE:DE
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584ECD372E8E9379E5C5B1E6FD80
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/64802b2f-4082-3908-a330-6608508a1af2.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     399490
IP address blocks:        139.104.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2e:8e:93:79:e5:c5:b1:e6:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=6bf19ede-6ba0-4a92-8737-4bedc4d71e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:3c:08:85:88:ea:c9:10:d8:d0:49:a6:94:
                    b7:df:26:1d:a0:03:0d:d9:8e:e6:eb:66:ec:1f:ef:
                    e0:cf:c1:d4:5e:10:76:df:d3:d8:7f:a3:8a:a8:f3:
                    d6:d0:e7:01:26:f7:a0:e8:ea:1d:23:31:d0:a1:7d:
                    d3:7d:fc:c5:5e:be:b1:07:43:be:08:34:da:bc:53:
                    da:b2:de:ea:57:5d:72:fb:6f:1e:56:fb:bc:ed:2a:
                    12:86:e4:f0:d3:50:9c:44:83:bc:76:d0:fa:88:06:
                    0c:fd:88:f0:30:e7:ef:fc:65:93:fa:db:b0:e7:bf:
                    07:08:2d:85:57:6d:d2:bd:e8:c3:e3:6e:6b:c2:04:
                    90:a9:f7:36:64:a3:dd:85:ed:fe:7f:e7:ee:6b:e3:
                    99:a3:47:05:03:b1:a0:ad:0b:8f:51:e7:73:4d:a1:
                    c4:74:6c:aa:d1:02:6f:44:06:2a:5f:eb:41:1d:d7:
                    b2:ec:1f:e0:92:85:a1:31:34:40:19:41:4c:ed:74:
                    6e:b5:6a:cc:3e:01:f6:50:3c:e7:23:2d:40:b8:34:
                    a1:f3:75:60:0c:c2:fb:1c:c1:11:50:e4:52:c5:de:
                    10:5f:a1:98:44:e1:3b:70:e2:8d:58:02:ca:be:74:
                    60:d5:98:e0:84:7a:a5:71:5b:fa:03:dc:0e:cd:c6:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:91:34:B1:E3:6B:01:10:51:05:B5:C3:A7:2B:17:5B:3C:64:DE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/64802b2f-4082-3908-a330-6608508a1af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:a0:fa:de:3f:ef:7f:bc:53:91:5f:ff:0a:b1:1a:3c:0e:
         35:05:e0:7e:12:0c:ac:a3:82:e8:54:8f:f0:a8:61:09:a3:a3:
         3a:3d:82:60:01:2c:a5:5a:77:82:dd:af:7e:1a:b9:ab:1a:eb:
         02:98:ae:46:e0:b5:f7:b8:f0:e3:4a:17:d9:37:77:99:bb:6f:
         93:2b:2f:84:b4:ef:9a:66:8d:e7:74:49:72:0d:b4:a1:58:2a:
         e7:46:9c:a1:94:b5:79:28:6d:f4:f4:d9:20:a8:63:ba:6d:35:
         3d:e3:55:81:a1:0c:fc:c2:8c:e8:ee:08:0d:3e:ed:d0:32:79:
         64:74:a9:3e:61:17:27:9a:6b:ae:87:90:a1:1d:f7:8e:ed:61:
         a2:31:30:14:a8:21:d4:7c:ba:42:26:19:99:bc:1a:c4:df:92:
         d1:10:44:70:59:c6:13:b7:98:8d:87:6b:d5:df:bf:b4:d9:19:
         78:43:74:3a:5c:96:07:b8:15:2e:d0:ad:33:e5:b0:d1:1c:7e:
         4d:61:25:be:5a:75:b1:95:98:16:42:fe:59:73:9b:a4:79:ec:
         73:fd:9f:f1:7e:3d:63:a2:10:ce:37:11:ad:ea:a6:26:b7:0b:
         10:a6:37:a8:b3:86:02:ee:3f:98:8c:61:eb:89:fc:f8:1c:0c:
         79:c8:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:30:00 2026 by rpki-client