Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa
File:                     aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa (raw, json)
Hash identifier:          TIHsOgPchLfRsc1VYU2GwYhExS+W0fVQ8OOB6uHdMgk=
Subject key identifier:   11:B0:73:A4:99:32:84:8C:D4:B8:C5:21:04:CF:1F:F0:3B:43:DF:42
Certificate issuer:       /CN=2805bc8b-434a-454a-85db-2fe9075e8548
Certificate serial:       010D0C9F4328584EC7A1CDA263BE9A51ED5E5FF0
Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        139.60.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cd:a2:63:be:9a:51:ed:5e:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=8539629e-ff36-4ec8-b84b-b35384a69a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:79:d5:46:b2:fc:5c:91:ca:14:56:88:68:
                    fc:bf:81:3e:5c:92:7c:1c:72:21:7b:1a:a3:f5:0d:
                    70:f6:58:4d:59:21:36:df:80:b1:ba:37:e5:a4:a3:
                    68:e5:58:1c:25:13:c7:00:f5:26:dd:bd:d0:52:9f:
                    6d:ad:7c:a6:ef:3f:04:9c:43:b0:05:e7:8a:e0:41:
                    1e:0e:39:ec:d0:09:4d:a4:6c:da:7d:f0:56:98:62:
                    7d:46:e7:14:65:58:09:0a:f6:fc:b2:5a:93:a9:94:
                    bc:ca:6b:b6:76:92:52:e8:b2:e3:cf:30:a0:3b:26:
                    5e:55:e5:60:e4:48:5b:86:49:87:d5:7f:28:96:ca:
                    d4:a9:12:23:eb:26:3c:fc:fa:8c:8c:8e:67:0f:ca:
                    30:2c:1b:32:94:cc:a8:f3:5d:44:40:97:84:89:10:
                    a2:c1:d3:dd:0c:fc:66:b2:e3:de:35:ff:ff:03:9b:
                    0d:f2:ce:fe:d7:0e:9d:0d:ce:31:15:4d:fa:8c:0d:
                    3b:14:c5:9e:2e:2c:33:d8:ea:c3:e8:71:f1:8a:df:
                    49:19:b8:0e:9a:fb:fa:c9:b6:aa:33:70:d3:aa:3e:
                    db:37:48:9a:e0:5b:8f:a5:ad:28:8e:b8:30:aa:b5:
                    c1:43:f4:19:d3:8c:b5:dc:64:c1:26:e4:3b:5f:02:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B0:73:A4:99:32:84:8C:D4:B8:C5:21:04:CF:1F:F0:3B:43:DF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl

            X509v3 Authority Key Identifier:
                keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:16:7c:73:45:3c:3c:23:04:5f:cf:73:0d:29:b8:f8:b2:5c:
         75:5b:3b:87:4f:48:7f:81:c2:fc:85:12:3d:f7:fa:a1:41:2c:
         ba:e0:20:90:7b:00:8e:e0:8a:1d:c0:e0:ce:26:d4:b0:31:1e:
         6a:59:2a:9d:cc:8e:d7:73:71:4b:da:d7:7d:ec:21:de:05:58:
         94:bd:df:13:c4:d9:ac:a6:9b:ba:fb:c2:2d:2f:11:95:17:18:
         e8:12:07:be:f0:43:22:01:ae:e5:ad:16:a3:f4:99:24:f7:b8:
         34:bd:44:8a:60:5c:0b:0e:92:1f:52:0c:15:f9:80:9e:6c:6c:
         7e:a2:75:c7:d0:2f:ab:7e:ec:24:e0:5a:97:69:1e:02:a4:47:
         b8:4e:8b:6d:9a:2c:98:51:0f:6f:42:65:10:42:47:66:fa:5f:
         0f:de:63:13:7f:ae:6c:63:6e:f2:7b:33:ef:54:08:6d:89:c6:
         bc:dd:45:72:bd:69:e6:ea:8c:e0:dc:0e:da:0a:21:4e:94:c3:
         bf:0a:0c:25:1c:bd:fb:c4:96:03:5a:b8:c0:a4:2d:22:08:ac:
         aa:a8:26:df:00:ed:68:f4:88:c0:6a:a3:b1:73:e4:9e:04:70:
         bc:f2:0e:e0:62:49:94:d5:09:81:d3:f1:44:0d:67:a4:47:f5:
         93:af:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:19 2026 by rpki-client