Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa
File:                     f5f1bbca-cda0-335e-a870-10735a4a0b93.roa (raw, json)
Hash identifier:          /K3Y1fVLjPjsCLSQmwbcE5GX/9+O8pEaa9nWCqPXiXE=
Subject key identifier:   B4:76:2D:01:EB:20:9C:19:12:8E:25:C7:9C:FC:CE:63:C1:16:1D:12
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584F6F23104E712E3F37FDC4E200
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     40051
IP address blocks:        139.104.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:10:4e:71:2e:3f:37:fd:c4:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=8df09b37-f550-4aba-b484-1d20ddbe3267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:61:88:b8:5e:3f:bb:b7:12:29:3e:3c:6c:
                    a7:5b:96:bd:c1:6b:64:75:00:6f:dd:c3:0c:86:bf:
                    04:79:99:e5:d8:e3:1a:d3:44:f8:83:30:ab:07:6e:
                    fd:c3:8f:f8:71:8a:81:2d:e7:81:3f:70:b8:96:67:
                    a4:e3:97:cc:bc:ee:4f:79:4a:bb:27:5e:29:26:3e:
                    0e:37:ef:0d:57:99:1b:fa:a3:89:c5:d2:fb:36:4b:
                    8c:6c:c9:00:8f:d1:94:69:c1:85:c2:2b:20:76:a3:
                    a4:dd:91:21:d2:20:a7:6d:05:8b:25:d7:3e:54:79:
                    54:37:36:62:26:3f:90:4d:fa:2b:b6:06:a8:e8:3c:
                    36:a9:8f:85:65:bf:78:a5:22:7d:1b:7f:91:9a:63:
                    08:65:46:2b:ce:34:ce:0c:b9:c5:90:ef:40:ee:ce:
                    06:ed:dd:d2:f0:f0:d0:35:da:f3:b0:1a:1d:c1:d5:
                    12:f8:f9:e7:ff:64:4f:9c:b2:1b:fa:57:38:09:8a:
                    a4:f9:3a:60:e8:01:79:01:bb:90:d6:e3:89:03:f4:
                    24:90:f8:03:32:3f:c9:cb:73:cc:41:2a:33:87:df:
                    32:13:e9:b8:59:9c:0b:9a:65:e6:42:e0:21:58:46:
                    e6:b1:36:e6:f9:87:a6:77:58:66:32:50:78:8b:44:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:2D:01:EB:20:9C:19:12:8E:25:C7:9C:FC:CE:63:C1:16:1D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8e:dd:e0:f3:d5:8e:bd:93:a6:7c:67:61:2f:47:80:ff:58:
         5a:73:11:1d:77:92:1b:8c:19:1e:69:29:fd:a1:3b:72:45:49:
         c3:4a:01:54:2f:9b:96:c8:2a:24:69:25:1b:16:c6:f0:45:a0:
         63:b5:3b:0e:4d:80:a5:7c:41:f8:ce:16:59:08:fb:49:45:07:
         ac:f5:0d:3f:9b:82:3c:bc:2d:b6:b2:91:ec:55:02:76:2c:94:
         e5:fe:0c:bf:c0:c4:b3:b4:f9:1d:95:78:52:87:f3:80:75:f2:
         67:be:9e:e4:bf:d0:47:0b:15:9f:e1:3e:54:0c:fe:1a:d2:43:
         e5:63:bf:35:a4:f6:25:45:a5:83:88:66:af:79:12:12:16:7b:
         9a:cb:28:46:62:60:c8:40:00:bf:aa:1e:52:6f:79:18:d9:2a:
         ed:7c:e6:60:9c:00:52:88:ff:b4:a2:66:78:10:14:96:12:a2:
         39:c4:f0:cc:63:69:75:fc:e3:36:5f:eb:b1:59:85:03:41:cb:
         8b:0c:fe:17:03:e7:eb:09:5d:7b:65:c2:2a:7c:b5:b6:43:cf:
         a7:d0:8c:76:a0:5e:94:00:19:6f:a1:ae:f4:33:9e:d8:e3:1f:
         98:42:29:96:05:5b:88:2a:76:dd:5c:96:d3:7f:45:62:29:10:
         eb:a0:db:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxBOcS4/N/3E4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4
OThjMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
OGRmMDliMzctZjU1MC00YWJhLWI0ODQtMWQyMGRkYmUzMjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BBhiLheP7u3Eik+PGynW5a9wWtkdQBv3cMM
hr8EeZnl2OMa00T4gzCrB279w4/4cYqBLeeBP3C4lmek45fMvO5PeUq7J14pJj4O
N+8NV5kb+qOJxdL7NkuMbMkAj9GUacGFwisgdqOk3ZEh0iCnbQWLJdc+VHlUNzZi
Jj+QTfortgao6Dw2qY+FZb94pSJ9G3+RmmMIZUYrzjTODLnFkO9A7s4G7d3S8PDQ
NdrzsBodwdUS+Pnn/2RPnLIb+lc4CYqk+Tpg6AF5AbuQ1uOJA/QkkPgDMj/Jy3PM
QSozh98yE+m4WZwLmmXmQuAhWEbmsTbm+Yemd1hmMlB4i0QD/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLR2LQHrIJwZEo4lx5z8zmPBFh0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli
ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvZjVmMWJiY2EtY2RhMC0z
MzVlLWE4NzAtMTA3MzVhNGEwYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4
OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3
ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3
ODExNzg5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi2gVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+O3eDz1Y69k6Z8Z2EvR4D/WFpzER13khuMGR5pKf2hO3JFScNKAVQv
m5bIKiRpJRsWxvBFoGO1Ow5NgKV8QfjOFlkI+0lFB6z1DT+bgjy8LbaykexVAnYs
lOX+DL/AxLO0+R2VeFKH84B18me+nuS/0EcLFZ/hPlQM/hrSQ+VjvzWk9iVFpYOI
Zq95EhIWe5rLKEZiYMhAAL+qHlJveRjZKu185mCcAFKI/7SiZngQFJYSojnE8Mxj
aXX84zZf67FZhQNBy4sM/hcD5+sJXXtlwip8tbZDz6fQjHagXpQAGW+hrvQzntjj
H5hCKZYFW4gqdt1cltN/RWIpEOug2zI=
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:18:28 2026 by rpki-client