Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa
File:                     dddc9202-ebd8-3902-b874-00599a99fa9e.roa (raw, json)
Hash identifier:          FIsShvf3RhdzJCkkFxAD0MBeZ4wkSVJit9s/2hCMqPs=
Subject key identifier:   2D:A8:8A:9F:86:11:D6:CA:35:26:4B:66:FA:F4:F7:53:67:80:F7:BD
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584E4559D1DDD825702462B31400
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     14297
IP address blocks:        139.131.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d1:dd:d8:25:70:24:62:b3:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=e3196cb8-fefd-4763-8b3a-bcc5c80dc3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:40:6d:50:c4:1e:99:4b:a6:d4:7c:6e:4d:
                    77:f5:39:44:1d:8f:56:2a:b6:3e:0e:17:3d:8b:50:
                    43:68:a6:bd:9c:4b:83:89:91:3b:cd:72:02:6f:99:
                    18:48:ec:c4:64:b8:20:17:fd:1d:7f:04:53:2e:bd:
                    34:d5:98:12:92:8f:16:9c:8a:b4:c6:66:ad:5e:47:
                    75:2f:09:a4:14:2f:0e:35:0d:b8:94:32:34:b9:2d:
                    8f:0c:69:68:7b:e0:0f:59:2a:3b:19:25:42:27:80:
                    60:08:35:fe:db:1b:8f:26:45:04:9d:ba:82:33:61:
                    76:d1:fe:ae:25:4e:4c:d6:a9:b4:d8:db:4f:f6:41:
                    46:31:96:eb:fe:20:fe:80:fe:6e:a1:db:de:28:4e:
                    bc:3d:92:70:81:bb:74:ab:68:51:11:c5:2d:ba:81:
                    b0:0d:6c:d2:4a:35:92:74:90:b0:2f:0f:dd:c3:12:
                    53:cf:52:e7:f8:d0:a1:87:b0:06:ce:10:36:55:c4:
                    8f:f0:12:55:72:77:54:75:1b:10:a1:31:e1:28:49:
                    d9:e1:a6:2a:4e:a0:b1:e5:3e:30:18:c0:60:de:8a:
                    3b:ac:1c:d7:33:c9:0a:27:8f:8e:df:4f:16:43:18:
                    54:12:62:af:87:8b:a9:c6:6c:33:15:b7:b6:58:90:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:8A:9F:86:11:D6:CA:35:26:4B:66:FA:F4:F7:53:67:80:F7:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c1:f8:63:3a:aa:c4:b8:75:da:bb:b7:4b:a2:80:37:7e:56:
         59:9c:31:98:82:6e:1e:64:a9:3e:1b:eb:f3:fa:f6:d7:47:d9:
         38:b8:5c:17:ba:f2:f7:e7:26:f5:ed:d1:5d:2d:23:8c:aa:91:
         ff:5b:b8:60:7b:ed:47:35:ce:8b:09:a8:21:39:ce:d1:16:50:
         e0:df:06:be:99:b3:2e:7c:10:5a:37:40:8f:3b:ca:e1:dd:e9:
         32:0d:51:9f:ce:21:a4:15:6d:cc:45:ec:de:2d:46:a4:20:10:
         1b:82:32:37:64:07:7d:56:8f:ea:16:f8:46:5b:dd:2f:82:f2:
         08:74:aa:62:88:5e:26:8a:9e:27:9c:72:6b:fa:c2:b8:7d:82:
         c6:2b:a9:0b:d6:f8:3a:b6:66:28:bc:cb:db:d9:aa:63:26:24:
         1d:89:7d:11:af:ca:04:f8:a2:60:ba:09:18:68:42:09:a8:35:
         70:6c:2d:7f:ff:50:5c:fc:d4:cf:47:7b:32:2b:97:dd:e1:1b:
         50:51:f6:50:2d:54:03:c9:82:51:74:7e:bf:85:82:aa:dc:14:
         c3:36:bb:9a:80:19:f3:e9:99:72:8b:9a:87:11:d0:fa:e3:12:
         ad:40:75:35:98:a4:cd:dd:c8:ca:9f:7d:31:d6:f9:bd:ef:dd:
         09:2d:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:58:56 2026 by rpki-client