Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8eb37cca-6666-338e-a2be-4b72624172ff.roa
File:                     8eb37cca-6666-338e-a2be-4b72624172ff.roa (raw, json)
Hash identifier:          7hBNnYv1a+tpFQdFZQR4aNqdrLBTrWwktDyoDpygYuI=
Subject key identifier:   00:31:50:11:17:62:6A:FC:F5:A7:6E:6A:D2:46:5A:75:BE:6A:2E:5A
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584E4559DB65466A386B3F68F3E0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8eb37cca-6666-338e-a2be-4b72624172ff.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     14297
IP address blocks:        139.131.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:db:65:46:6a:38:6b:3f:68:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=38c3d46b-81de-4390-9a90-511ddb348924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:37:fb:79:f5:3a:fc:a6:dd:c2:17:98:a7:9a:
                    39:c2:be:da:a7:f2:93:c0:56:08:4f:81:d9:1a:e0:
                    d3:5d:b1:12:85:3d:b8:3b:2b:8a:52:b6:d8:11:fd:
                    60:4c:16:da:9e:eb:48:d5:24:6f:1d:fd:4a:73:d4:
                    2d:83:c5:af:f9:7c:b8:60:90:21:95:c9:e2:40:8f:
                    6b:ed:32:dc:25:18:3d:8a:05:8b:15:3c:21:09:e5:
                    d9:91:e7:00:71:6e:5d:f5:51:1c:b7:cb:31:83:dd:
                    d7:6a:97:97:2a:1c:e5:fe:a0:c9:86:93:c4:3e:48:
                    16:04:4d:67:ce:f4:95:8f:c5:40:e0:91:4f:55:61:
                    1b:a1:21:76:d5:29:75:f4:68:e3:6a:e8:2b:ed:11:
                    20:9d:41:d4:a2:e9:11:4e:9f:06:9d:fe:99:61:40:
                    fb:77:1c:7d:fd:0c:7a:ea:53:c4:54:3b:c7:f0:71:
                    20:d3:66:f5:86:eb:68:8e:0c:1e:d0:76:31:89:92:
                    da:1d:9c:d6:da:a2:49:ec:32:dc:81:24:be:3a:3f:
                    11:32:31:28:d0:68:f3:00:3a:4e:ce:2d:db:d3:b2:
                    e7:bb:d7:b7:fd:71:de:ee:0b:eb:01:41:1e:f7:55:
                    b2:ac:7c:9e:a9:18:ab:8d:8a:02:95:a2:be:07:8f:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:31:50:11:17:62:6A:FC:F5:A7:6E:6A:D2:46:5A:75:BE:6A:2E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8eb37cca-6666-338e-a2be-4b72624172ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a5:36:64:cb:d2:72:f2:50:39:8f:66:e9:18:61:f2:41:95:
         11:2f:aa:ad:0d:5b:01:b6:1e:19:1c:5c:f9:ca:52:e0:11:56:
         0c:6a:a2:fb:bd:98:6f:ac:88:96:50:bc:e7:46:69:5b:5c:9f:
         12:1f:3d:c9:b0:00:bc:0e:88:41:e5:55:65:b7:e8:b5:27:97:
         29:56:c9:ed:42:02:c4:e7:1b:95:7a:e0:84:bf:36:a7:bd:47:
         19:63:23:65:7f:9a:73:71:bd:91:24:b6:21:d0:6a:1e:2c:22:
         c2:8f:2f:45:a2:38:33:fb:58:bd:4a:fb:7b:f4:f5:41:58:2b:
         34:0d:d8:a3:1c:f1:fe:60:af:14:88:7d:b9:7f:f5:ef:b5:f2:
         bc:8a:27:7e:92:22:9e:26:9b:f1:20:2f:1c:30:0a:45:3a:c7:
         72:42:2c:39:ff:5f:1b:9d:75:cb:4d:0e:e1:86:b5:b7:88:c8:
         f8:31:0d:53:ea:58:44:d3:8f:f7:e0:c3:11:12:1c:46:c5:b9:
         46:80:b9:51:82:6e:2f:f0:18:6d:0f:c4:3b:57:8a:10:8f:9a:
         48:8d:2e:26:ac:d5:85:60:f2:ba:10:9c:5e:58:99:45:cf:fa:
         7b:8d:34:80:75:d4:c2:97:04:30:23:50:e1:f8:53:eb:fc:39:
         b4:a2:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:02:21 2026 by rpki-client