Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa
File:                     a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa (raw, json)
Hash identifier:          ZwdXdyhD4jOsEI+ycuFNNq4vguaqlZ82xE2Asemjz+Q=
Subject key identifier:   19:C9:61:08:D8:75:95:73:DE:F2:C1:72:FA:D0:C6:B5:C7:16:09:D8
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584EC7A1D5FF2DE756CA39140100
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16417
IP address blocks:        139.138.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d5:ff:2d:e7:56:ca:39:14:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a43b9067-a8af-48ec-80d0-b78e4cdb445b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:10:dd:11:dc:55:fa:0d:10:7b:32:8f:c7:
                    f6:67:e5:4f:42:6b:75:80:29:b4:d1:9d:a4:8f:e0:
                    7f:5d:a0:5b:a6:ff:be:52:2e:0c:48:a3:2d:2b:40:
                    4e:96:00:00:9b:2a:18:1e:27:6e:2e:27:01:15:3c:
                    aa:96:a7:46:42:13:b7:76:ed:68:43:1a:3a:e6:2c:
                    ac:65:0e:58:e8:72:a2:2c:0a:80:12:d8:a7:ab:3d:
                    51:ad:ad:20:a2:27:54:ab:a3:1d:37:dd:44:ea:26:
                    58:44:d3:e4:94:44:da:bf:17:d4:31:aa:dc:24:37:
                    bf:38:dd:3b:b5:cd:67:31:ad:54:4e:1f:6b:8c:b7:
                    37:e4:8e:15:96:f9:4e:2a:fc:a0:17:af:dc:f1:c2:
                    c5:b5:98:cd:1c:33:9f:85:d4:57:30:b6:3a:39:ed:
                    b4:7f:c3:d6:8d:93:c4:1f:3e:40:1d:78:08:38:9c:
                    dc:fe:79:d9:d4:74:04:64:33:f9:7d:29:d3:f6:de:
                    c4:54:94:91:d2:6e:2e:45:a4:59:55:c4:c5:e2:ba:
                    85:94:32:a4:60:30:aa:23:8f:f6:bd:58:07:d4:0a:
                    68:24:1e:dd:21:63:b7:28:f9:62:c6:ed:80:3d:5c:
                    ef:d4:eb:4b:96:4a:f8:48:7d:ee:81:b6:d4:86:81:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C9:61:08:D8:75:95:73:DE:F2:C1:72:FA:D0:C6:B5:C7:16:09:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d2:87:28:77:bd:95:fa:00:f2:03:aa:1d:dd:0c:3d:ac:09:
         ad:a7:71:35:c7:c4:b4:07:d6:b6:00:cf:af:46:fe:da:6a:77:
         22:5e:43:f9:32:3f:4c:5e:b9:9c:2a:d0:36:88:bf:ac:4b:66:
         40:b3:58:08:57:28:83:13:c0:ba:84:bb:73:7a:50:f5:c1:37:
         dc:c3:73:5d:72:ae:1e:30:d3:54:ac:e2:7a:4e:f6:9e:92:aa:
         9e:58:bc:85:23:52:34:ce:86:97:61:4e:47:b0:c3:61:94:0f:
         1f:ec:3c:49:b6:ed:27:34:70:6a:49:c3:4d:0a:b5:de:db:42:
         ab:4b:07:05:b5:28:0c:39:8d:cf:d0:89:96:32:0a:81:0e:da:
         fd:29:f9:4e:ec:7e:6b:3c:27:11:5d:4d:ed:c5:86:8a:cf:87:
         2a:37:95:42:33:c6:df:1a:a1:ca:a8:f3:ce:53:14:37:d4:6c:
         9c:24:9a:58:a0:c1:fc:61:69:f0:5f:56:17:8a:f2:54:e6:4c:
         38:c4:f5:08:08:e9:26:de:17:36:37:64:7d:ef:4e:6f:f1:bf:
         dc:8e:8f:34:99:d9:2a:ab:26:0f:45:de:68:6b:2e:f9:52:f2:
         ab:93:2a:0c:44:21:d2:4f:a0:5b:34:dd:67:5a:6c:24:79:97:
         58:bd:e8:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodX/LedWyjkUAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
YTQzYjkwNjctYThhZi00OGVjLTgwZDAtYjc4ZTRjZGI0NDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyAQ3RHcVfoNEHsyj8f2Z+VPQmt1gCm00Z2k
j+B/XaBbpv++Ui4MSKMtK0BOlgAAmyoYHiduLicBFTyqlqdGQhO3du1oQxo65iys
ZQ5Y6HKiLAqAEtinqz1Rra0goidUq6MdN91E6iZYRNPklETavxfUMarcJDe/ON07
tc1nMa1UTh9rjLc35I4VlvlOKvygF6/c8cLFtZjNHDOfhdRXMLY6Oe20f8PWjZPE
Hz5AHXgIOJzc/nnZ1HQEZDP5fSnT9t7EVJSR0m4uRaRZVcTF4rqFlDKkYDCqI4/2
vVgH1ApoJB7dIWO3KPlixu2APVzv1OtLlkr4SH3ugbbUhoELHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnJYQjYdZVz3vLBcvrQxrXHFgnYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTZjMDIwNDYtMDhlMy0z
MjI2LTljNzItMmVlYjk4NDZiNGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4onMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXShyh3vZX6APIDqh3dDD2sCa2ncTXHxLQH1rYAz69G/tpqdyJeQ/ky
P0xeuZwq0DaIv6xLZkCzWAhXKIMTwLqEu3N6UPXBN9zDc11yrh4w01Ss4npO9p6S
qp5YvIUjUjTOhpdhTkeww2GUDx/sPEm27Sc0cGpJw00Ktd7bQqtLBwW1KAw5jc/Q
iZYyCoEO2v0p+U7sfms8JxFdTe3FhorPhyo3lUIzxt8aocqo885TFDfUbJwkmlig
wfxhafBfVheK8lTmTDjE9QgI6SbeFzY3ZH3vTm/xv9yOjzSZ2SqrJg9F3mhrLvlS
8quTKgxEIdJPoFs03WdabCR5l1i96Po=
-----END CERTIFICATE-----
Generated at Sat Sep 12 14:26:33 2026 by rpki-client