Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa
File:                     429c2c19-e860-3ce9-8432-d4cd3f987677.roa (raw, json)
Hash identifier:          v1Qohi5q7oHE+WaLw8Jq6iGJjXboWwWg4LIBNLUsIqU=
Subject key identifier:   92:4F:12:FA:14:4B:A2:81:5F:43:F6:2D:37:31:5C:6C:F1:4E:CF:45
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584EE7BCA6E97862AD3276CBD5C0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     14297
IP address blocks:        139.131.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a6:e9:78:62:ad:32:76:cb:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=316eda35-b7ba-415b-9e0d-88944dae071b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:79:8f:8a:b6:22:61:b8:9d:5a:bc:e6:84:
                    ec:32:0d:3e:28:c9:3e:e1:bd:9a:96:23:ac:7b:ce:
                    29:e1:8e:3c:7f:9f:da:17:15:dc:c0:de:82:5c:3f:
                    92:55:0a:99:d4:1a:b8:4a:7a:a8:05:40:63:cd:d5:
                    75:d6:93:f1:4c:80:a9:af:52:77:c6:cd:0b:c6:54:
                    7b:da:3b:d4:27:2d:44:bf:5c:4d:1e:50:ed:85:7a:
                    bf:69:fe:a7:a4:7f:8e:d3:77:c8:0e:6e:be:65:fb:
                    e4:d1:87:6a:e6:9f:a6:27:e5:df:75:e6:30:7c:60:
                    47:f0:0f:b6:2e:4e:b0:f8:54:34:32:d6:c9:60:64:
                    be:cb:c3:34:1d:2f:3c:f3:6f:72:f4:eb:95:f0:62:
                    70:81:03:54:89:09:c7:7c:c9:c9:b2:73:7a:2c:d7:
                    7f:a7:4d:ab:bc:f1:d1:84:7e:98:63:93:1d:26:27:
                    bc:e7:64:c0:2e:73:0c:97:73:18:4b:7f:5e:54:13:
                    0b:db:3f:74:2a:11:65:91:d3:2a:fb:c0:45:a2:38:
                    4a:a5:8c:59:bd:94:46:61:cd:f7:f6:2d:fe:f2:f8:
                    1a:03:49:58:21:b1:12:3c:27:0c:8f:ab:81:86:2c:
                    bc:83:6a:26:ee:32:4e:61:da:50:84:b5:f1:0e:1f:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4F:12:FA:14:4B:A2:81:5F:43:F6:2D:37:31:5C:6C:F1:4E:CF:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:e6:17:a0:51:80:ef:a4:58:fb:2e:7f:98:5e:f2:b6:ea:
         81:65:34:6d:5d:ae:f4:a5:5d:30:5e:10:27:67:d8:44:70:fe:
         f7:fe:43:8a:6b:2e:a1:60:91:f5:6e:3f:a5:a5:a5:f5:16:bf:
         05:48:67:a3:e0:26:cd:50:b4:1f:29:3f:cb:c2:63:56:a9:5b:
         76:52:7a:a5:55:5c:73:8c:0e:67:8c:00:7f:6c:71:77:10:11:
         fc:0a:59:74:66:19:5c:54:e5:41:c4:d5:ff:1c:82:00:0a:90:
         72:cf:d4:d9:6e:ef:12:0a:e5:60:26:f9:2c:76:b0:bf:5f:ca:
         9f:eb:d2:1d:53:d1:88:0b:f6:92:94:d6:85:7e:0a:96:fa:7c:
         ce:97:6b:c5:ed:01:23:0b:07:b4:b8:ff:0d:e6:82:ef:cf:0c:
         15:1a:b1:10:29:cc:b2:47:e7:80:a4:65:7b:a6:cc:43:a2:d0:
         1e:20:1f:f6:f8:55:fd:01:8d:9f:d2:e8:02:ae:d9:6e:e0:9e:
         a7:98:6d:94:60:d5:02:99:a8:1d:02:84:42:73:7a:62:39:0f:
         94:dd:28:f1:59:d1:81:9f:1c:2b:1b:c3:8a:c6:05:e5:92:ff:
         9d:92:1c:05:b4:4b:e3:ce:c0:8e:11:22:0a:80:39:1b:08:cb:
         b9:b9:d7:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKbpeGKtMnbL1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
MzE2ZWRhMzUtYjdiYS00MTViLTllMGQtODg5NDRkYWUwNzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y55j4q2ImG4nVq85oTsMg0+KMk+4b2aliOs
e84p4Y48f5/aFxXcwN6CXD+SVQqZ1Bq4SnqoBUBjzdV11pPxTICpr1J3xs0LxlR7
2jvUJy1Ev1xNHlDthXq/af6npH+O03fIDm6+Zfvk0Ydq5p+mJ+XfdeYwfGBH8A+2
Lk6w+FQ0MtbJYGS+y8M0HS88829y9OuV8GJwgQNUiQnHfMnJsnN6LNd/p02rvPHR
hH6YY5MdJie852TALnMMl3MYS39eVBML2z90KhFlkdMq+8BFojhKpYxZvZRGYc33
9i3+8vgaA0lYIbESPCcMj6uBhiy8g2om7jJOYdpQhLXxDh9yTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJPEvoUS6KBX0P2LTcxXGzxTs9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDI5YzJjMTktZTg2MC0z
Y2U5LTg0MzItZDRjZDNmOTg3Njc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4MSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEa5hegUYDvpFj7Ln+YXvK26oFlNG1drvSlXTBeECdn2ERw/vf+Q4pr
LqFgkfVuP6WlpfUWvwVIZ6PgJs1QtB8pP8vCY1apW3ZSeqVVXHOMDmeMAH9scXcQ
EfwKWXRmGVxU5UHE1f8cggAKkHLP1Nlu7xIK5WAm+Sx2sL9fyp/r0h1T0YgL9pKU
1oV+Cpb6fM6Xa8XtASMLB7S4/w3mgu/PDBUasRApzLJH54CkZXumzEOi0B4gH/b4
Vf0BjZ/S6AKu2W7gnqeYbZRg1QKZqB0ChEJzemI5D5TdKPFZ0YGfHCsbw4rGBeWS
/52SHAW0S+POwI4RIgqAORsIy7m516o=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:13:53 2026 by rpki-client