Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/3df7d045-30e3-35d8-bee7-2ac56831e374.roa
File:                     3df7d045-30e3-35d8-bee7-2ac56831e374.roa (raw, json)
Hash identifier:          PdYCqhP3xhyqqvaQJDd2OhbKF6AvvFlRT0Y8Xa6CbmU=
Subject key identifier:   1E:A8:26:54:92:24:9B:1E:8C:04:A2:94:5A:BD:C7:E0:BE:0E:6F:AB
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584EAD1C4B41C3B968A486EEE580
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/3df7d045-30e3-35d8-bee7-2ac56831e374.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     683
IP address blocks:        146.139.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:4b:41:c3:b9:68:a4:86:ee:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=58b910d4-4aaa-4ccb-8b9f-a629d831a2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:1a:09:18:62:bd:c6:c2:7c:3c:c3:3f:59:
                    74:b2:80:d6:7e:eb:d2:84:0a:eb:80:62:b0:35:0d:
                    c1:26:8c:f1:7e:7f:a7:a6:95:d6:52:db:6a:e6:ac:
                    ba:9b:89:0f:6f:e3:e7:21:f6:93:5e:89:7c:6d:53:
                    ae:83:5b:4e:fd:7c:8f:07:4b:39:ea:b2:68:a0:51:
                    ca:72:b6:a1:ef:97:3b:ce:b4:e3:fc:ab:7d:5f:c6:
                    71:6d:9d:3f:7b:e3:c4:92:15:18:36:21:7e:f6:54:
                    b8:79:01:29:53:87:d6:9b:bd:f7:12:22:b3:79:a1:
                    ce:a2:55:8d:d8:6c:96:66:1e:ad:f9:d9:49:99:00:
                    07:62:ae:9c:a7:c2:46:e8:f7:06:d4:56:2c:ce:a9:
                    ae:cf:e9:d4:39:c8:51:57:37:25:c8:2e:87:47:10:
                    00:2f:9b:1e:bc:ec:47:83:17:8a:4d:2b:53:b0:cf:
                    c2:40:29:73:0a:46:ac:78:de:48:a3:3d:53:45:07:
                    e1:38:38:84:52:57:15:9d:d3:fc:d5:36:c1:f1:fe:
                    a1:ba:24:ee:a8:2f:10:4e:67:79:c6:e4:c6:1b:72:
                    37:32:f5:ee:ba:c1:0a:d0:8e:36:35:c3:be:6c:de:
                    2c:84:9c:10:76:c9:e6:7a:c4:b4:8e:e6:6c:f1:dc:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A8:26:54:92:24:9B:1E:8C:04:A2:94:5A:BD:C7:E0:BE:0E:6F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/3df7d045-30e3-35d8-bee7-2ac56831e374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:ea:18:11:69:69:9a:bf:c4:45:99:de:67:3e:a6:60:2f:
         03:a4:f5:84:c9:30:14:39:61:72:cf:eb:e6:f2:fe:c3:b3:76:
         1e:74:cf:a3:0c:ee:69:bf:73:9b:33:d9:7f:5e:14:3f:03:01:
         45:db:5e:65:08:a1:72:6a:19:9f:9f:60:13:42:91:df:d4:69:
         20:ec:e6:22:7b:56:36:03:05:8b:8d:35:24:29:22:cf:b4:75:
         e2:3a:73:ac:d5:65:35:38:f9:94:ea:73:8c:ec:3c:a5:b5:5a:
         c2:e9:16:7b:e2:9a:c2:81:f6:b0:73:7a:49:64:bf:1e:b4:85:
         fd:8e:5a:41:17:83:fc:3b:07:ca:6f:1e:a9:3d:83:6f:ba:7f:
         8a:19:47:e4:fd:f2:9e:b6:00:d9:36:e9:05:20:a9:6e:7d:1e:
         f6:3f:0f:29:95:97:61:51:61:f1:d6:fb:55:ca:cb:4c:16:40:
         f8:3c:aa:da:79:04:77:e0:cf:08:89:14:3e:fd:3c:95:81:04:
         b8:08:b6:93:51:f3:12:7e:1e:0d:b1:64:2b:4f:03:a0:bf:c2:
         a4:98:5c:0a:05:9a:f5:12:fc:f8:dc:17:40:1d:52:5b:f8:6c:
         ec:a7:ee:07:6c:85:cb:a5:1f:56:e1:de:f1:2a:75:24:6c:03:
         56:24:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:15:38 2026 by rpki-client