Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa
File:                     098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa (raw, json)
Hash identifier:          ND+ON6gR3YVE4IkGRuGjzvjpq+rr6H13ZUBpPGhVLfs=
Subject key identifier:   CD:96:3B:C3:99:7D:99:E5:2B:56:82:B2:26:59:24:EA:6B:B6:21:1F
Certificate issuer:       /CN=ba584605-7948-4c75-be73-29a89eca8940
Certificate serial:       010D0C9F4328584F6292E08F6C8242C25F56FA00
Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     399315
IP address blocks:        139.102.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e0:8f:6c:82:42:c2:5f:56:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=e65fbf41-28df-4592-9f81-a9d0ab7ec5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:e6:7f:fe:5c:bd:39:37:e4:ce:5f:17:8b:
                    a9:96:fe:c8:53:8f:e1:9b:41:3e:76:55:5c:dc:c8:
                    3f:4c:6e:f9:e6:44:9a:22:20:c2:17:0f:3c:3b:c4:
                    2c:3b:b9:12:5e:c4:3f:da:e1:c2:cf:e5:69:e9:cc:
                    10:47:92:eb:a2:d0:9d:64:ad:38:cc:31:70:c8:47:
                    5c:dd:8c:2e:f0:93:f4:12:12:fd:8d:b4:88:d4:bd:
                    f9:29:07:fb:17:9a:b1:b0:4f:9a:22:be:cb:4a:0e:
                    65:68:85:5e:29:af:30:58:55:06:0e:b6:a0:43:d3:
                    34:25:af:69:c5:65:07:54:ba:aa:53:de:da:21:c5:
                    93:2d:fb:42:07:b1:1e:4b:97:e1:7f:93:3e:bd:cf:
                    30:37:b6:11:ce:2f:9a:f6:59:f1:42:5a:52:12:8f:
                    6d:9d:48:e8:6d:e8:eb:47:51:e8:15:fd:99:d0:19:
                    5e:56:50:43:ec:51:44:6a:a4:89:ee:6a:b0:4e:be:
                    6c:b0:2e:1a:09:a0:e2:9c:22:6e:2d:94:90:d4:58:
                    7a:dd:dc:01:20:49:9c:49:c7:a2:ce:c6:77:66:97:
                    f1:cf:c9:1d:a7:eb:f1:29:b5:b4:3c:5d:09:06:1b:
                    1f:a2:0b:e6:c1:7d:c6:01:7d:14:ff:00:af:46:d0:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:96:3B:C3:99:7D:99:E5:2B:56:82:B2:26:59:24:EA:6B:B6:21:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl

            X509v3 Authority Key Identifier:
                keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.102.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:57:d1:9b:96:2f:9d:9e:11:c0:3b:c8:6e:3f:c7:7c:bb:
         60:f9:2a:9e:b2:6e:ff:b8:6b:23:ae:c2:3b:c2:14:55:82:27:
         54:b5:d2:c8:e2:a4:d4:8d:f0:46:1f:8c:ad:7b:b5:69:ab:50:
         53:7a:43:94:3b:d8:de:28:87:84:a1:c1:7d:1c:12:bd:66:00:
         a5:00:14:06:7a:14:50:48:2a:aa:5c:1e:f5:80:e2:bc:27:f2:
         9b:d1:03:a7:37:cd:d3:cb:02:d3:89:0c:11:62:cd:ad:11:09:
         cc:30:22:f0:ef:37:81:2f:b3:5e:8b:4a:30:13:10:8d:03:5a:
         40:e6:09:de:c7:72:e2:bf:d5:a3:f8:8d:21:93:ef:bb:73:24:
         25:7a:7d:4f:b9:c0:03:dc:e1:ce:72:00:aa:86:43:00:e1:07:
         55:29:7b:99:9d:84:fe:17:ee:04:34:85:a1:d4:52:6f:6f:5c:
         f9:19:4c:d1:fc:01:bf:29:39:d3:1b:5a:95:d6:89:da:40:1b:
         a6:3a:9c:91:d6:b6:60:8e:24:20:8c:84:e8:2e:45:fc:60:e5:
         cf:da:2e:f6:ae:3d:ff:a3:85:ed:46:1c:f6:7a:20:ef:1e:dc:
         0d:04:c8:26:6f:ba:6c:13:69:f6:a4:da:8b:6e:d6:be:fc:83:
         86:05:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:12 2026 by rpki-client