Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/f431cf16-b892-30e0-930d-eea11c817e45.roa
File:                     f431cf16-b892-30e0-930d-eea11c817e45.roa (raw, json)
Hash identifier:          x6wPZ8dZZUzCvx8jR1ZjclEgwg3OLQZZvdf+Vu0zUZE=
Subject key identifier:   88:47:03:BA:DF:BB:F0:8B:A3:14:09:52:7F:09:DB:F7:6E:1D:29:3C
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584DF640A60A9B8E01DB9DA8B180
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/f431cf16-b892-30e0-930d-eea11c817e45.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     14291
IP address blocks:        139.180.20.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a6:0a:9b:8e:01:db:9d:a8:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=3a70656e-48f8-47a1-9e21-a0eceb3c2037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:af:62:2d:0d:ce:1b:42:51:73:de:ef:99:
                    1a:74:03:55:97:71:a3:29:82:ed:0c:96:a7:7e:e1:
                    8a:87:6c:fa:87:5b:4f:f9:4d:a9:d2:5d:37:01:23:
                    e2:56:80:23:e5:7d:8b:9c:17:01:24:23:ff:f2:c0:
                    d8:3c:63:70:5a:69:d1:1a:d0:62:87:84:98:1a:bd:
                    23:27:1c:91:2f:ab:eb:64:e5:6f:df:e1:20:d0:1e:
                    df:75:4e:e5:21:3b:10:8e:ca:11:e6:74:5f:34:50:
                    b5:0b:44:2c:97:b3:51:74:8a:83:15:2e:15:4a:0e:
                    9b:bf:08:8d:8a:a7:e3:3e:88:86:ee:0d:73:43:77:
                    4a:b4:0b:92:77:18:65:94:09:e5:b7:7b:64:cb:53:
                    d2:63:03:b9:31:b8:f5:96:b7:8f:97:f7:e9:35:75:
                    4a:0c:86:d9:5b:ce:96:6d:5b:f2:74:1e:35:ca:5a:
                    44:7a:77:98:f0:31:09:91:13:37:0e:91:d0:b6:7e:
                    a1:e2:b1:26:e1:01:76:08:bc:61:b3:bf:e5:0d:a7:
                    55:bb:e9:a6:6a:fc:ec:a2:0d:7c:a4:c4:15:0b:7a:
                    f3:4d:89:92:c2:ea:86:71:09:89:ed:da:63:44:e1:
                    cf:39:b6:53:21:9d:e4:8f:20:67:4b:c7:6d:fd:e3:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:47:03:BA:DF:BB:F0:8B:A3:14:09:52:7F:09:DB:F7:6E:1D:29:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/f431cf16-b892-30e0-930d-eea11c817e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:1a:26:73:62:3e:c9:1c:b9:5e:14:2a:c4:c8:3e:c7:da:
         43:46:e0:4f:f7:fc:bb:53:37:72:b2:44:f2:73:ef:7b:21:d9:
         a8:6f:15:83:c5:52:c7:d9:fa:15:92:ce:9c:a7:3f:5a:f5:19:
         04:84:3c:02:2b:5a:61:51:a7:d3:31:47:50:25:c6:f2:3f:d4:
         52:f2:65:31:6d:9b:8b:92:6c:3f:4e:f2:e3:e7:13:c9:b9:bb:
         00:2d:ac:b3:b6:4d:68:d1:53:bb:69:9e:00:a7:05:22:2e:fb:
         9c:df:57:8e:44:ae:76:2b:15:dc:d3:d7:d6:da:fc:5c:6d:90:
         0d:af:37:3f:66:71:fd:b8:cd:c5:23:db:5a:c7:cb:2d:02:f4:
         2d:d6:82:43:92:5e:c8:52:87:a4:c8:5b:01:10:fc:4d:5c:f5:
         56:47:8f:84:1a:6c:d8:b0:4f:1b:91:d6:eb:2c:73:33:03:10:
         21:02:e4:91:94:da:9f:4b:70:64:2e:3e:7a:90:40:dc:83:dc:
         ad:8d:df:e0:09:a5:3b:7e:bb:aa:7f:a2:62:a2:0f:3f:29:f8:
         e5:0f:f3:20:73:dd:8d:d9:91:42:b8:94:66:1a:89:a1:a0:22:
         42:e4:02:4e:65:05:97:15:b3:9c:0a:cd:3b:a2:84:7b:ea:aa:
         59:80:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:41:08 2026 by rpki-client