Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/139fd43d-6166-3cd3-9aa4-ccddb540e4a8.roa
File:                     139fd43d-6166-3cd3-9aa4-ccddb540e4a8.roa (raw, json)
Hash identifier:          ihRa8JflKpCa16su144A9giXXnJm5efZEMzB0Pledpg=
Subject key identifier:   AF:8D:DE:37:E0:17:A4:3D:7C:7E:F4:D3:52:A5:98:85:DD:D3:1E:34
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EDB2C969E577E30E83E219E00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/139fd43d-6166-3cd3-9aa4-ccddb540e4a8.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     199524
IP address blocks:        205.179.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:96:9e:57:7e:30:e8:3e:21:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=05e90e6f-dd0b-45cf-b755-c7b7797240c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:e6:26:1d:bf:3b:7c:5a:f5:35:38:7b:2d:
                    36:f5:6d:ec:a5:52:a4:39:63:31:56:dc:c8:01:90:
                    28:4f:34:26:4b:cc:53:ea:dc:ea:80:08:fc:bf:32:
                    33:5d:27:96:80:b9:d7:2c:73:86:2e:00:0a:1b:9f:
                    15:ec:bb:e2:d0:31:6a:b3:03:da:01:9e:e2:be:9e:
                    3b:34:90:7b:37:45:d1:62:a0:18:7d:19:29:ec:09:
                    b9:05:14:64:a2:31:f2:f7:93:fb:c4:ab:72:97:b4:
                    76:0b:26:6a:ad:c6:cc:38:9a:bb:8b:60:31:25:18:
                    4d:d0:31:63:19:f7:91:94:fe:ae:80:ca:aa:5e:27:
                    56:cc:95:82:ca:3a:a4:8f:63:a2:9e:93:68:4b:7e:
                    ed:f1:e5:0a:ee:06:17:dd:4e:b4:76:44:5c:b7:83:
                    fa:a7:47:a6:aa:02:00:a7:bf:23:28:91:d7:e3:22:
                    4a:ab:47:c6:c4:8e:20:d1:9e:5e:e5:de:29:f9:a9:
                    77:3b:32:17:60:bc:33:6f:fa:57:5f:96:1e:43:93:
                    7a:43:da:6e:ab:00:d3:de:87:2f:fc:98:d0:96:93:
                    a0:f0:5f:b9:80:93:47:7a:96:12:5c:ef:d3:29:04:
                    8e:15:02:d2:ab:ad:8d:49:1c:5e:44:1f:6f:cd:cc:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8D:DE:37:E0:17:A4:3D:7C:7E:F4:D3:52:A5:98:85:DD:D3:1E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/139fd43d-6166-3cd3-9aa4-ccddb540e4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.179.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7b:56:ce:bd:ee:39:85:2f:d4:34:d3:e0:57:b4:3a:af:47:
         a2:85:3c:e1:50:dd:24:63:20:f8:0f:02:13:3c:c2:17:06:d0:
         81:51:5e:9e:24:2b:59:d4:ea:1d:e1:ef:c2:d5:6f:a7:d6:23:
         f0:c6:74:58:f6:bb:2c:76:f0:9b:17:46:ec:18:c4:9e:a3:f9:
         31:99:da:74:46:a5:01:ac:f2:59:93:95:ce:3d:d2:11:ec:3d:
         89:53:8e:1d:95:5c:48:e0:9c:e1:9e:0a:fb:76:3d:43:85:07:
         e7:8c:18:b3:f1:56:5a:8f:4c:16:46:4b:fa:9a:65:2f:9a:07:
         cd:62:f0:41:47:04:05:04:2c:3e:fa:06:a4:2c:a4:db:36:b1:
         23:1a:93:32:68:71:63:6f:27:4d:5c:7a:e1:80:ca:83:cd:a2:
         54:28:a0:dd:56:25:8a:0f:71:6d:18:87:cf:d6:71:90:94:69:
         3b:f8:1c:78:9c:27:79:9f:2f:05:0f:a5:be:f7:02:76:c9:64:
         6b:72:1e:4c:99:d4:f1:74:33:88:dd:6d:16:65:58:ec:c5:56:
         c2:0a:02:ab:f3:ad:7a:b1:45:6f:2f:6f:a1:14:70:e8:b4:aa:
         80:d8:9b:76:98:6c:f5:42:81:ef:c7:f1:72:5a:64:5a:69:9e:
         8f:bb:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:51:39 2026 by rpki-client