Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa
File:                     dddc9202-ebd8-3902-b874-00599a99fa9e.roa (raw, json)
Hash identifier:          I1d5ovVA0b0+rV4POm93q4CZL2J20v9QTEBsfYgXpvQ=
Subject key identifier:   02:4E:78:3F:4C:DE:61:9A:CF:6C:40:38:3C:96:CB:94:A7:4D:B4:5B
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584EE7BC9D7B7C63AA6B038D5460
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     14297
IP address blocks:        139.131.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9d:7b:7c:63:aa:6b:03:8d:54:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=64dcb376-8f7c-480c-9b0e-0f23374b423e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:78:b6:0f:20:71:43:03:b8:a3:b3:56:80:
                    2b:ab:71:e2:64:e7:e7:d6:09:f6:74:9e:54:41:29:
                    bf:3b:53:a8:ee:5e:e7:b2:43:05:44:0e:39:9a:a9:
                    eb:45:8e:5b:b2:66:83:4c:fd:a5:b0:91:e4:52:d2:
                    53:b3:47:01:9b:85:0e:64:e7:9c:04:c3:65:cc:01:
                    36:d6:df:11:a5:07:83:75:c9:34:05:cd:3e:09:b2:
                    19:7d:f2:b7:8c:29:31:a8:f5:ec:18:53:bf:b6:ed:
                    22:9c:ac:a1:81:95:76:ea:00:76:4d:6c:55:c9:75:
                    2e:67:40:ea:8e:c9:bd:59:d4:a2:e9:0d:12:b0:a5:
                    c0:09:07:c7:ee:e8:3e:ef:96:7a:e2:80:43:65:bd:
                    85:14:a0:6f:d8:17:c2:ed:c4:60:58:69:20:53:8b:
                    c5:f7:0f:d4:e3:ba:60:8b:c8:22:af:0d:29:81:76:
                    5a:83:95:d2:80:16:b6:ff:5b:f4:35:10:ef:64:7b:
                    39:a7:ad:07:38:ff:56:a0:23:46:b2:2c:26:1f:c2:
                    39:01:6a:3a:4f:f1:ca:13:07:3a:43:00:1f:db:18:
                    67:76:21:18:d6:f0:47:aa:57:f1:e3:16:f7:7f:e3:
                    3e:af:64:19:f9:44:74:f9:49:86:da:e1:f3:8d:3b:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4E:78:3F:4C:DE:61:9A:CF:6C:40:38:3C:96:CB:94:A7:4D:B4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:49:0d:91:b6:51:11:53:92:23:32:be:3c:1c:98:5d:b4:07:
         98:a9:cd:48:f4:81:86:33:73:5d:6f:48:18:6a:70:b1:c0:66:
         a6:23:1e:f8:5b:c2:df:02:a8:9b:d3:94:0d:fb:67:a4:73:10:
         e0:61:4b:31:c4:53:7e:bd:09:87:6d:62:d7:36:df:dd:6f:28:
         51:12:79:9d:64:a7:09:45:8f:3e:44:fe:e9:ce:f1:a2:28:cb:
         94:6e:aa:6e:1a:36:91:5d:0e:8b:95:fb:a6:a5:e7:d1:b3:f8:
         63:4f:35:3e:58:c4:b3:b4:3b:9b:48:16:a4:14:f7:0d:bf:94:
         a9:02:40:46:3c:46:86:15:ed:c5:9f:62:63:a6:f9:45:b7:2a:
         a7:a4:44:36:f6:c3:5b:5d:c0:db:aa:64:21:cf:98:e9:09:89:
         f3:a4:1e:ee:9b:56:40:34:7e:71:52:30:52:e4:2c:a0:3c:f5:
         09:9c:52:e3:0c:0a:56:d1:e7:d8:6d:5f:f9:31:e6:7f:07:8e:
         24:5e:13:7b:c2:47:37:e1:fd:9f:e9:70:7f:66:c4:89:7c:48:
         5b:9d:ec:7e:ad:ab:29:7e:69:65:15:92:ae:d9:19:7e:cc:5a:
         0b:34:b1:3c:7c:22:ef:57:0c:28:19:43:3b:61:a8:77:35:06:
         f3:81:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:14:24 2026 by rpki-client