Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a99c1376-9fd3-3d22-8eed-c104fccc112d.roa
File:                     a99c1376-9fd3-3d22-8eed-c104fccc112d.roa (raw, json)
Hash identifier:          sijhaipgEXi/xcTROOS5ipPlh6dy3KV4RHYJTOu7icw=
Subject key identifier:   AD:DA:E6:33:90:43:E1:9E:91:70:7A:E6:E7:68:90:A2:3A:6D:C4:51
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584EE38C99C1DF9B8925DB97C380
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a99c1376-9fd3-3d22-8eed-c104fccc112d.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     396986
IP address blocks:        139.177.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:99:c1:df:9b:89:25:db:97:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=eed9d4cf-67ad-462f-9f25-fd92bfe72e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:97:8d:77:dc:07:73:a8:89:ef:d2:e3:51:
                    ce:68:6a:90:32:97:79:1c:86:68:ac:b4:d9:a1:ee:
                    16:89:26:10:80:61:32:7f:25:ee:67:16:b7:27:0a:
                    98:ef:ae:a2:fa:1b:23:e8:85:77:ed:40:f4:73:ea:
                    b1:20:15:c9:e1:ae:84:2d:03:be:03:e1:fe:49:ee:
                    2a:c9:d6:8f:00:f0:58:34:cc:23:4c:01:51:b3:0a:
                    55:07:b5:2f:ba:33:15:fb:aa:33:2f:33:c0:10:97:
                    ca:5d:5c:01:5d:11:f2:70:08:74:b3:c7:ea:71:98:
                    9a:50:d3:06:43:1d:5a:3a:e7:52:20:86:0d:8b:b9:
                    6c:93:3a:d6:e5:67:bd:09:26:ae:63:d7:e3:33:3f:
                    d8:fd:51:e8:e5:3e:c5:ad:5c:8c:9f:dd:c9:d3:89:
                    c2:26:52:bc:b5:06:cb:88:d0:c4:f4:20:56:ba:54:
                    97:7e:54:fa:b5:aa:50:75:3c:3f:ff:da:29:63:2b:
                    3a:23:51:21:fa:c2:32:84:54:5f:70:ff:18:ac:87:
                    e0:eb:ab:9a:0c:cf:8b:53:7b:c9:c1:d8:a8:42:78:
                    32:71:9e:56:84:0c:16:f6:8a:64:4c:79:df:13:6f:
                    1e:1d:83:69:0c:2b:8d:3c:96:29:1e:09:1d:b9:28:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:E6:33:90:43:E1:9E:91:70:7A:E6:E7:68:90:A2:3A:6D:C4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a99c1376-9fd3-3d22-8eed-c104fccc112d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ff:0e:e8:39:6c:6c:7b:34:70:15:39:e8:33:a5:4f:fc:27:
         32:c9:62:ca:22:83:53:b8:84:25:af:01:06:b7:09:32:1b:66:
         05:fe:54:bc:ef:de:1b:71:f7:99:42:32:38:11:1f:06:1b:aa:
         b7:0c:02:46:ec:72:cc:55:3d:40:e2:a5:37:57:9f:11:d5:8f:
         bb:a7:c7:0b:d6:73:d8:28:63:3e:26:96:7a:c7:a7:e9:0e:48:
         d2:cb:6a:3a:47:1c:e2:cd:c8:bd:ca:24:4f:5d:e6:44:57:ee:
         46:b5:12:29:8a:00:e6:58:a3:e1:9e:d6:7a:ec:e5:6b:e3:20:
         ca:ff:ff:f0:c2:72:54:78:04:37:e4:20:bd:95:2f:e1:1d:bc:
         c5:f7:0e:86:8a:53:b0:06:14:42:71:b7:1f:05:68:bd:07:be:
         bb:3e:e9:32:b5:ea:d4:07:28:58:fd:b6:ca:5b:83:98:2e:0d:
         ac:3b:df:6b:46:4b:cc:b6:76:ef:ea:4f:1f:49:63:cb:34:be:
         20:ff:f6:31:0b:f5:95:11:4d:fe:ba:e1:8a:f7:c8:7c:41:09:
         06:bd:45:d2:bb:1a:4b:02:ab:32:0f:22:2c:85:04:d9:25:0c:
         fd:d3:82:72:a2:56:f5:5f:58:0d:f4:b6:be:0d:90:e8:54:67:
         d1:28:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:29:49 2026 by rpki-client