Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/42912333-afc3-37c3-8220-48f78f67a106.roa
File:                     42912333-afc3-37c3-8220-48f78f67a106.roa (raw, json)
Hash identifier:          DWhVm0/ztNfCuYXJvfiSl1394Fey9W3cHj43CxRYFck=
Subject key identifier:   07:13:CD:0A:5B:E8:87:8D:25:67:11:61:BB:FB:1F:BE:24:3F:E2:D4
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584EE7BCA6F5F1AAC52445E1AD40
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/42912333-afc3-37c3-8220-48f78f67a106.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     14297
IP address blocks:        139.131.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a6:f5:f1:aa:c5:24:45:e1:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=f5aae186-d5cd-419b-8257-352df0f91dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:89:91:87:20:6f:b2:10:48:fd:96:b1:f4:
                    f6:fb:a0:a0:08:8f:a0:94:e9:dc:24:6c:63:14:c1:
                    e3:4b:ac:00:87:58:c6:f6:22:a1:00:de:64:a1:b5:
                    a9:9e:69:6a:8d:8f:96:8f:e6:67:f4:8f:27:df:40:
                    2d:23:79:79:8c:28:14:dd:d9:a9:74:ee:07:93:4d:
                    3f:f3:80:5b:19:5a:fa:67:23:59:53:b8:46:62:8a:
                    05:4c:de:b6:00:b5:7d:8d:6b:9a:ab:16:b8:4b:c1:
                    73:7a:c3:6d:72:4b:84:e6:f4:f6:b0:01:85:97:2a:
                    52:3d:16:a2:70:e4:28:ad:2f:e6:bf:1a:29:42:1f:
                    68:17:26:de:ec:f6:8f:56:ff:73:3f:a3:07:00:18:
                    a6:3c:a8:f6:41:f3:88:e8:4d:d9:e8:d3:e3:ff:c0:
                    57:84:03:b7:72:d2:1e:ea:29:74:61:36:99:49:f8:
                    5b:54:ec:d1:78:0a:af:55:5b:68:03:e9:1d:f0:2d:
                    ae:6c:53:45:6a:0e:a8:a3:c1:ce:74:04:12:22:36:
                    aa:e0:d6:3e:0f:72:0b:4d:8b:89:82:96:ed:fa:ac:
                    f6:02:80:7c:a5:2b:f2:ee:95:b3:17:79:db:b6:ca:
                    aa:25:1c:7c:65:ce:06:5c:04:5d:a6:28:3e:9c:d4:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:13:CD:0A:5B:E8:87:8D:25:67:11:61:BB:FB:1F:BE:24:3F:E2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/42912333-afc3-37c3-8220-48f78f67a106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e0:97:28:69:e7:06:de:3c:f6:dc:20:7b:18:73:f6:7c:50:
         4a:77:dc:23:98:4e:b0:64:d3:71:c9:08:a1:0e:08:55:9c:6a:
         27:88:a5:4d:ee:50:2d:a4:4e:db:1a:6d:1c:30:04:d5:bd:ac:
         17:98:72:92:4c:e6:14:9c:5f:b8:b0:db:62:90:4f:fb:75:ea:
         33:35:c6:ab:c5:53:bb:ae:7d:a7:a9:9a:cf:01:6d:da:12:c3:
         fe:a8:1f:fc:0d:47:89:19:da:66:31:fe:58:be:20:7a:c2:6e:
         50:12:ef:56:1b:15:ec:5e:d8:96:92:67:28:36:06:73:d1:f4:
         07:9a:99:0d:72:23:31:1d:40:a1:7e:4b:63:f0:42:3e:cb:3e:
         45:37:c5:1e:dd:2c:a1:0b:93:d2:0c:74:f1:8a:bc:c3:80:ba:
         b7:03:f6:29:ef:a1:7a:2f:72:ae:ec:b4:83:ed:b8:b1:3c:b5:
         0a:c7:b7:96:04:96:bf:12:97:f6:85:6c:da:ca:a9:73:c0:2a:
         b2:01:e5:9f:dd:b9:af:7b:8a:44:60:40:86:4d:ee:36:23:48:
         90:bc:21:b5:e3:63:bb:01:9f:08:35:a4:df:14:04:62:b5:af:
         f7:1d:9c:bb:3b:05:01:08:df:44:4f:7a:7e:9b:75:bd:04:91:
         c0:64:55:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKb18arFJEXhrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjVhYWUxODYtZDVjZC00MTliLTgyNTctMzUyZGYwZjkxZGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN+JkYcgb7IQSP2WsfT2+6CgCI+glOncJGxj
FMHjS6wAh1jG9iKhAN5kobWpnmlqjY+Wj+Zn9I8n30AtI3l5jCgU3dmpdO4Hk00/
84BbGVr6ZyNZU7hGYooFTN62ALV9jWuaqxa4S8FzesNtckuE5vT2sAGFlypSPRai
cOQorS/mvxopQh9oFybe7PaPVv9zP6MHABimPKj2QfOI6E3Z6NPj/8BXhAO3ctIe
6il0YTaZSfhbVOzReAqvVVtoA+kd8C2ubFNFag6oo8HOdAQSIjaq4NY+D3ILTYuJ
gpbt+qz2AoB8pSvy7pWzF3nbtsqqJRx8Zc4GXARdpig+nNRqEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcTzQpb6IeNJWcRYbv7H74kP+LUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDI5MTIzMzMtYWZjMy0z
N2MzLTgyMjAtNDhmNzhmNjdhMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4McMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArglyhp5wbePPbcIHsYc/Z8UEp33COYTrBk03HJCKEOCFWcaieIpU3u
UC2kTtsabRwwBNW9rBeYcpJM5hScX7iw22KQT/t16jM1xqvFU7uufaepms8BbdoS
w/6oH/wNR4kZ2mYx/li+IHrCblAS71YbFexe2JaSZyg2BnPR9AeamQ1yIzEdQKF+
S2PwQj7LPkU3xR7dLKELk9IMdPGKvMOAurcD9invoXovcq7stIPtuLE8tQrHt5YE
lr8Sl/aFbNrKqXPAKrIB5Z/dua97ikRgQIZN7jYjSJC8IbXjY7sBnwg1pN8UBGK1
r/cdnLs7BQEI30RPen6bdb0EkcBkVa0=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:17:12 2026 by rpki-client