Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa
File:                     f01ab467-e827-376a-850d-acf1578e53c2.roa (raw, json)
Hash identifier:          McfBMpQswVtqKPK70r48kUNQ5nB2DctBo0W9He43L5I=
Subject key identifier:   44:03:93:54:3F:B6:CC:23:8F:B3:C1:61:DF:53:8B:A9:79:7C:18:55
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584E4559DBB72CBEEB5D07454580
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     14297
IP address blocks:        139.131.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:db:b7:2c:be:eb:5d:07:45:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=8b9b6508-8d4f-407c-9a02-d5d6f6e2024d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:8a:ba:ac:9e:b6:70:fc:4e:03:e1:1b:eb:
                    85:73:a1:36:3d:4a:99:b8:30:20:9e:29:f7:f7:52:
                    a6:79:de:b9:77:66:d2:81:7c:f1:50:9c:26:c5:70:
                    2a:56:03:aa:55:db:a8:5a:98:db:f6:02:3c:d9:08:
                    c6:44:11:f2:83:9c:63:78:d3:c5:0c:ee:f4:ed:04:
                    41:ef:2c:d3:e2:8b:e6:cc:16:b0:34:db:50:61:a8:
                    f5:19:e8:3f:40:69:ac:16:96:c2:48:95:2a:19:2d:
                    d0:82:36:17:47:de:a1:35:0a:1f:4e:3b:5c:66:91:
                    88:56:2d:90:f1:fd:22:5f:eb:01:f3:b7:e6:22:4f:
                    31:38:48:44:ca:2b:f1:39:d3:b1:33:79:f4:3a:b2:
                    72:a1:63:3c:4e:d2:08:31:0d:ff:f2:b1:92:83:3d:
                    ae:96:f1:ca:df:05:9a:bb:0f:aa:f7:6d:ed:7b:5a:
                    7b:2c:39:2d:de:c4:23:90:04:89:ee:6d:b1:e1:ae:
                    a5:f9:ce:d9:a1:93:70:d2:a9:07:5a:5e:dc:d5:e5:
                    bd:77:fc:42:06:9a:2c:9e:22:6b:06:12:fc:37:79:
                    e6:b4:07:82:0f:e1:e4:03:7c:67:18:c0:8c:54:61:
                    e0:2e:5f:7b:7a:78:f2:69:1d:61:ac:12:6d:ff:15:
                    48:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:93:54:3F:B6:CC:23:8F:B3:C1:61:DF:53:8B:A9:79:7C:18:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:ce:41:d0:2d:75:56:ca:64:7c:41:34:2b:5f:d1:89:b8:
         d0:7d:1d:49:b6:46:ee:7d:e0:8e:11:ee:bb:26:da:fb:f6:f2:
         00:87:75:1e:03:f8:94:48:3e:06:f6:a2:9f:8a:15:6d:af:f2:
         8e:81:5a:e8:b6:67:b9:3b:93:f6:e4:3a:79:7c:dd:08:e1:36:
         d5:db:60:7a:d2:9b:ae:b5:f0:7c:f5:fd:b9:d1:3c:b3:6d:37:
         14:c1:16:1b:32:0a:25:e9:ca:6d:5e:8d:b2:e6:b5:81:97:14:
         dd:35:25:08:fc:32:46:de:3f:66:db:61:fc:a3:3b:5f:dd:49:
         08:fb:27:a8:23:3b:0b:f0:46:b2:45:a2:4f:e2:dc:c7:36:32:
         d7:4c:68:05:fd:93:9a:2c:4e:1f:8f:b9:54:e6:ec:a2:e1:6e:
         d9:6c:2f:c7:2d:82:9c:26:fc:37:4a:04:f5:78:c3:88:e8:7c:
         dc:db:a0:7f:95:54:b2:de:c3:c1:c4:12:93:d3:33:87:34:eb:
         ce:7f:14:cc:06:9f:ed:45:44:a9:8a:44:18:1b:91:e1:34:ae:
         6c:a5:fa:5b:b5:af:88:80:33:18:ff:18:b1:e8:df:0a:5f:be:
         df:40:3a:31:35:1d:e6:8d:a9:e2:df:bb:df:33:41:11:33:ef:
         23:59:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:59:29 2026 by rpki-client