Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa
File:                     b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa (raw, json)
Hash identifier:          fJdI/PT6HPrKEzKNFpDnhwyGX4zchqsGOLa03lOyvZw=
Subject key identifier:   1B:AA:70:3C:12:5A:5B:41:1C:F6:D4:4B:0E:E7:42:A8:69:CD:FC:81
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E6F3A35B0B403F5B4DA02FD00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     30238
IP address blocks:        139.138.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:35:b0:b4:03:f5:b4:da:02:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c50adbf9-56a7-455e-a1ac-075051ec257d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:90:66:de:62:f0:92:1e:ed:3d:8d:a1:c6:
                    48:7f:1e:37:60:3e:a0:09:c0:f2:96:be:f3:fd:b3:
                    f1:c0:54:b1:66:86:f7:b2:04:42:3d:3a:c6:3e:1a:
                    37:f8:0e:c9:4f:67:9c:45:37:23:a5:08:8f:e8:6b:
                    54:45:04:87:34:c5:19:be:7f:65:4c:74:82:52:0d:
                    77:a4:7a:4a:56:8d:81:66:8e:69:8c:f2:04:8f:df:
                    db:8f:fb:be:e7:56:da:b7:17:17:f0:eb:ea:49:e9:
                    9a:25:3b:a7:9a:07:8a:b9:22:3a:18:c9:6a:eb:ad:
                    64:5b:fa:c6:37:cd:6f:18:b8:86:0d:ba:fa:4b:b8:
                    a5:4d:aa:0d:2e:22:60:63:5b:c2:71:9d:a1:64:f4:
                    fa:c1:af:04:03:bb:76:ea:1d:51:69:82:7e:12:30:
                    41:30:13:ad:d9:e5:6f:f3:b4:15:b6:10:31:d5:1f:
                    df:99:2c:fe:23:32:db:f2:c0:76:b5:a1:ef:7c:b8:
                    0a:95:28:62:21:3c:ce:18:e0:08:39:ad:3a:a7:7d:
                    41:2a:46:17:59:82:b4:be:a6:33:e3:2b:91:fe:4d:
                    5d:0e:6f:a0:bc:98:f2:e9:98:23:1b:22:72:ef:7f:
                    d7:c8:bc:cf:9b:10:bf:4d:c3:b3:25:92:de:a5:2f:
                    14:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AA:70:3C:12:5A:5B:41:1C:F6:D4:4B:0E:E7:42:A8:69:CD:FC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:f5:e7:14:cc:eb:a0:f0:c2:52:09:ac:d9:01:07:0b:d5:
         0e:09:aa:3d:3d:2d:d1:1b:8a:f2:44:2a:8a:72:e3:c6:e8:df:
         36:fa:e3:aa:99:dd:12:a3:5a:55:54:c3:91:28:54:36:00:8b:
         62:84:9b:bd:51:92:03:69:96:3d:29:ea:6d:63:d8:70:cb:5b:
         1a:01:0d:03:e8:d3:3f:af:9f:d8:d7:1a:e1:0f:be:95:68:2b:
         36:5e:68:53:7b:ec:2b:35:ad:09:9c:d5:b5:5b:78:58:85:f3:
         6d:94:12:01:5d:cf:3d:eb:dd:1c:ce:dd:79:db:05:95:94:0a:
         f4:fe:86:19:b3:ac:3f:e9:71:4c:0a:73:a9:ab:3b:df:27:63:
         2c:17:14:ef:2a:66:59:dc:1a:19:af:dd:32:61:1a:69:1c:98:
         dd:25:63:d2:80:3a:54:5f:92:16:34:20:8a:dc:62:dd:bb:b2:
         12:9d:e4:bb:4d:83:53:f9:39:fb:46:9b:82:99:89:76:f5:39:
         01:87:ad:5b:dc:d1:c8:38:4b:b3:7c:66:b3:8a:6b:30:87:cb:
         67:0c:f4:f9:76:b3:fb:b9:05:da:93:d4:5e:83:12:7a:09:e3:
         2e:9c:65:0b:5b:c5:0f:91:bb:a8:db:3b:81:f1:39:cd:e7:20:
         8a:39:b5:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjWwtAP1tNoC/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
YzUwYWRiZjktNTZhNy00NTVlLWExYWMtMDc1MDUxZWMyNTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn16QZt5i8JIe7T2NocZIfx43YD6gCcDylr7z
/bPxwFSxZob3sgRCPTrGPho3+A7JT2ecRTcjpQiP6GtURQSHNMUZvn9lTHSCUg13
pHpKVo2BZo5pjPIEj9/bj/u+51batxcX8OvqSemaJTunmgeKuSI6GMlq661kW/rG
N81vGLiGDbr6S7ilTaoNLiJgY1vCcZ2hZPT6wa8EA7t26h1RaYJ+EjBBMBOt2eVv
87QVthAx1R/fmSz+IzLb8sB2taHvfLgKlShiITzOGOAIOa06p31BKkYXWYK0vqYz
4yuR/k1dDm+gvJjy6ZgjGyJy73/XyLzPmxC/TcOzJZLepS8UPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBuqcDwSWltBHPbUSw7nQqhpzfyBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjQ5Y2Y3OWYtZmUwOC0z
ZDc5LTljMDAtZDlkOTZmNGZkZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyi9ecUzOug8MJSCazZAQcL1Q4Jqj09LdEbivJEKopy48bo3zb646qZ
3RKjWlVUw5EoVDYAi2KEm71RkgNplj0p6m1j2HDLWxoBDQPo0z+vn9jXGuEPvpVo
KzZeaFN77Cs1rQmc1bVbeFiF822UEgFdzz3r3RzO3XnbBZWUCvT+hhmzrD/pcUwK
c6mrO98nYywXFO8qZlncGhmv3TJhGmkcmN0lY9KAOlRfkhY0IIrcYt27shKd5LtN
g1P5OftGm4KZiXb1OQGHrVvc0cg4S7N8ZrOKazCHy2cM9Pl2s/u5BdqT1F6DEnoJ
4y6cZQtbxQ+Ru6jbO4HxOc3nIIo5tSs=
-----END CERTIFICATE-----
Generated at Tue Jul 14 11:59:15 2026 by rpki-client