Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa
File:                     a3476e4c-4fec-3283-b242-377f154d7059.roa (raw, json)
Hash identifier:          YKrXvfP0ssN2VOWCMmgRhiWzVVbbPCAo9Lp1suGXW6A=
Subject key identifier:   FF:E7:41:AC:54:64:A4:EB:6A:4E:23:04:7F:1E:3A:CB:EA:0B:5D:2C
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584EE7BC9DDC8DA6F7C41B638880
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     14297
IP address blocks:        139.131.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9d:dc:8d:a6:f7:c4:1b:63:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=c3bbfb28-3968-4501-a99b-46122252e873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:04:a6:00:a3:ee:3a:a3:b4:9e:d9:f7:b9:
                    26:0c:e6:a1:fa:cf:a0:31:ce:9d:04:de:34:81:de:
                    33:47:76:4c:11:2c:cd:d1:aa:83:f9:b5:c1:e4:19:
                    35:89:8c:11:60:7d:ef:00:57:fa:c3:a7:58:22:ee:
                    55:a1:86:7a:8b:ea:55:9a:56:21:57:a8:67:87:60:
                    47:c4:b5:b4:21:a5:e8:f2:e9:60:30:21:16:5c:67:
                    79:09:6d:93:90:94:2a:d6:cf:f5:55:aa:7b:4e:e4:
                    32:cd:47:f5:e1:c7:1c:56:55:ce:d7:12:1f:7b:c7:
                    7a:7e:34:a3:7f:b8:f5:b6:a6:bc:d3:43:5a:6b:3a:
                    fe:75:95:93:d2:84:92:d9:d6:63:38:8b:cc:44:e5:
                    df:05:af:e2:ff:e0:b4:38:38:b3:ba:a5:20:d3:13:
                    b2:e6:cd:86:30:7c:d5:0a:3e:b3:8a:1c:24:f7:75:
                    46:43:62:4c:1c:a0:74:79:92:5d:92:10:79:09:55:
                    52:bb:d4:c8:50:78:72:2d:4c:4b:4e:16:60:38:0a:
                    7e:bf:b1:43:11:8a:cf:29:7d:d4:e5:68:53:ba:f8:
                    6b:7a:47:f8:36:4b:94:5f:73:44:5d:8c:62:f8:0e:
                    d8:c6:db:0c:2e:c5:52:27:59:31:51:fb:a3:94:2a:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E7:41:AC:54:64:A4:EB:6A:4E:23:04:7F:1E:3A:CB:EA:0B:5D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:c8:70:07:e0:65:bd:bd:71:4f:8c:2f:16:55:5e:48:26:
         c7:68:ac:80:cb:dd:53:bd:11:b7:18:a5:9c:c1:be:9d:e3:24:
         8d:a5:12:59:80:48:55:28:a7:ec:7e:ab:2e:05:e4:e0:d0:98:
         57:63:a2:7d:6c:dc:19:91:3c:37:28:d3:e0:18:06:4d:2e:81:
         75:cd:65:5b:99:08:b7:5f:85:f0:e3:1e:2e:91:93:a0:88:9e:
         d4:0b:b4:fa:54:9f:d9:24:d3:4d:82:e5:52:cc:0b:e8:cd:db:
         22:dc:f4:62:74:17:cd:42:00:e6:8d:67:3c:5c:3b:c6:1e:83:
         74:6a:00:e5:42:c2:16:c3:87:4f:03:64:2e:03:0d:3d:0e:69:
         7a:a5:c9:08:44:a7:72:83:21:93:65:a2:56:f1:c1:b9:e4:f1:
         5b:4f:74:db:f2:77:43:f2:1f:87:22:55:c6:b7:8c:88:16:76:
         a3:60:54:65:ba:8a:37:48:58:af:86:db:06:5d:2e:95:19:12:
         ae:cd:2f:87:3a:64:17:8a:12:60:44:3d:fe:f1:18:ba:89:83:
         49:16:95:9d:30:01:03:68:69:b9:97:10:4f:53:fc:01:8b:bf:
         71:eb:11:3b:48:57:85:64:e0:2d:d7:3a:15:2e:ce:09:73:ab:
         33:1e:68:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:15:52 2026 by rpki-client