Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa
File:                     59d1f242-72ef-3a31-a323-8f22641c6746.roa (raw, json)
Hash identifier:          A1YKApOqE2W/H0EFLbH5a13KVmqYz4vJ2XTCaMbPdfQ=
Subject key identifier:   7F:39:F4:42:70:15:46:B8:0A:49:ED:E7:D1:BD:B3:04:0A:7D:E8:22
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584EE7BC9D9B7B01C171A187D180
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     14297
IP address blocks:        139.131.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9d:9b:7b:01:c1:71:a1:87:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=1b435bbf-d298-4876-9a42-abdab33c39fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:3e:b1:41:c2:c4:17:65:b0:bc:aa:a7:65:
                    00:6a:92:80:0a:fa:8c:f4:fd:c2:55:3c:5d:fa:4e:
                    ee:86:39:3c:6b:c3:72:d8:7f:aa:ac:a5:8e:bb:06:
                    5c:6b:ff:26:e8:eb:1d:a8:93:27:85:87:cd:b5:48:
                    29:a8:7d:70:e8:78:4f:a3:5e:59:5b:50:1f:48:db:
                    3c:c1:c8:54:2a:8b:01:d7:0a:c3:67:0e:57:64:d5:
                    92:c9:50:86:24:5a:f8:4f:c7:f7:3a:0f:4f:99:bb:
                    9d:42:a3:47:c3:92:9f:a4:93:9a:06:8d:84:04:f8:
                    49:ce:ee:00:74:e5:db:52:87:1d:56:3f:52:21:c9:
                    ca:ce:5f:aa:79:04:75:2b:c0:bb:2a:3e:88:b0:6e:
                    d7:b5:6b:13:31:a6:31:d9:40:ac:9a:ab:64:0e:b3:
                    7b:b6:2a:2a:76:4f:b1:40:ad:c1:02:6f:5e:a0:96:
                    d9:09:24:90:f2:0a:1a:ef:68:f6:d9:a9:c6:37:fe:
                    ec:86:44:42:95:a0:82:25:25:c8:6c:f1:54:d6:00:
                    07:db:29:34:dc:5c:9a:96:1d:41:3c:de:26:88:99:
                    4f:ec:78:79:f5:06:91:e1:d9:e8:18:05:b9:be:b3:
                    a3:18:55:1a:8f:03:96:12:3d:21:f2:8e:8e:88:eb:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:39:F4:42:70:15:46:B8:0A:49:ED:E7:D1:BD:B3:04:0A:7D:E8:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:c5:7c:cb:f0:90:99:c7:71:a9:35:f3:3c:1e:12:fb:a0:
         eb:f2:b0:74:18:d5:a5:dd:22:a7:61:db:ea:eb:4d:e5:63:d3:
         f9:1c:40:00:09:4c:d5:ca:35:d6:5e:53:48:1e:97:13:97:38:
         f3:89:70:ce:92:ba:dd:83:0a:a3:17:8f:23:11:29:8d:66:25:
         14:50:d6:4b:f9:fc:1f:2b:68:9b:a9:e0:2c:73:56:af:a0:b9:
         5a:a5:77:84:1b:86:cb:fe:23:6e:b2:af:b5:a0:c2:62:2c:c4:
         fd:6e:04:b1:eb:43:f5:28:fa:c2:5d:4f:9f:b5:8b:c0:4e:3b:
         a8:7f:1e:ec:a6:73:c2:74:6f:14:7b:7a:3c:93:65:38:92:bc:
         86:36:dd:54:3c:24:e1:52:fa:dd:0f:5f:ab:22:e8:6c:16:38:
         e6:f4:fe:b4:26:9d:33:90:88:08:ce:11:ab:45:c8:a0:50:6e:
         6f:e3:31:63:f8:e5:46:0d:16:13:84:ec:b1:ec:97:bb:f6:fa:
         2b:6a:70:61:92:fe:a6:49:70:1d:d3:77:e8:3a:35:8b:8e:2e:
         c9:98:de:8d:76:e1:66:10:cc:71:f8:25:7c:12:f0:cc:ef:7f:
         e8:92:d6:96:92:7d:1d:25:fc:49:f3:89:5a:24:5e:7d:3e:20:
         c0:2e:c5:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJ2bewHBcaGH0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
MWI0MzViYmYtZDI5OC00ODc2LTlhNDItYWJkYWIzM2MzOWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04s+sUHCxBdlsLyqp2UAapKACvqM9P3CVTxd
+k7uhjk8a8Ny2H+qrKWOuwZca/8m6OsdqJMnhYfNtUgpqH1w6HhPo15ZW1AfSNs8
wchUKosB1wrDZw5XZNWSyVCGJFr4T8f3Og9PmbudQqNHw5KfpJOaBo2EBPhJzu4A
dOXbUocdVj9SIcnKzl+qeQR1K8C7Kj6IsG7XtWsTMaYx2UCsmqtkDrN7tioqdk+x
QK3BAm9eoJbZCSSQ8goa72j22anGN/7shkRClaCCJSXIbPFU1gAH2yk03Fyalh1B
PN4miJlP7Hh59QaR4dnoGAW5vrOjGFUajwOWEj0h8o6OiOsxqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH859EJwFUa4Cknt59G9swQKfegiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNTlkMWYyNDItNzJlZi0z
YTMxLWEzMjMtOGYyMjY0MWM2NzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4PCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3HxXzL8JCZx3GpNfM8HhL7oOvysHQY1aXdIqdh2+rrTeVj0/kcQAAJ
TNXKNdZeU0gelxOXOPOJcM6Sut2DCqMXjyMRKY1mJRRQ1kv5/B8raJup4CxzVq+g
uVqld4Qbhsv+I26yr7WgwmIsxP1uBLHrQ/Uo+sJdT5+1i8BOO6h/Huymc8J0bxR7
ejyTZTiSvIY23VQ8JOFS+t0PX6si6GwWOOb0/rQmnTOQiAjOEatFyKBQbm/jMWP4
5UYNFhOE7LHsl7v2+itqcGGS/qZJcB3Td+g6NYuOLsmY3o124WYQzHH4JXwS8Mzv
f+iS1paSfR0l/EnziVokXn0+IMAuxRU=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:16:49 2026 by rpki-client