Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa
File:                     d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa (raw, json)
Hash identifier:          z4EmwQOan9XM2CBXKXmHiGTpsgx2859Bfp6yZFDXjeY=
Subject key identifier:   D0:41:77:FA:41:62:57:1A:1C:36:86:FA:4C:56:FA:EC:91:E8:B0:4D
Certificate issuer:       /CN=8cd8b5a8-2c0e-4d74-ac62-73293f8780ae
Certificate serial:       010D0C9F4328584DB4CFFED5C7A841AD9797AD00
Authority key identifier: FB:1D:9E:DB:74:4B:13:B7:D6:F5:66:25:0D:85:09:12:8D:22:70:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa
Signing time:             Sun 03 May 2026 02:26:10 +0000
ROA not before:           Sun 03 May 2026 02:26:10 +0000
ROA not after:            Sat 01 Aug 2026 02:26:10 +0000
asID:                     394382
IP address blocks:        192.139.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:cf:fe:d5:c7:a8:41:ad:97:97:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd8b5a8-2c0e-4d74-ac62-73293f8780ae
        Validity
            Not Before: May  3 02:26:10 2026 GMT
            Not After : Aug  1 02:26:10 2026 GMT
        Subject: CN=bfc5ebdc-bd2f-4eaa-91f8-4ef94607c28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:79:73:f7:35:15:0d:ce:5f:74:4f:40:18:
                    f2:0e:17:5a:87:60:96:11:86:f0:54:c5:71:c4:93:
                    7c:26:79:0e:47:a3:c0:eb:99:d5:f9:a0:82:88:16:
                    bc:4b:67:10:8a:dc:dc:9f:98:49:6b:03:59:05:5b:
                    ee:fe:a1:9b:ec:f5:02:88:04:1a:b1:77:38:b8:39:
                    1e:54:5f:3b:2b:9b:32:ac:fd:47:39:2d:f3:c8:82:
                    15:38:a6:a9:6f:1f:2e:ef:86:db:e6:52:14:d1:90:
                    6a:d4:26:5e:07:de:7a:1f:9a:83:a4:8b:63:94:c2:
                    91:8b:59:fb:2c:2a:17:2f:aa:b9:7e:1b:c8:57:54:
                    a3:ce:36:90:cd:85:98:9b:c4:53:13:d8:c2:79:9d:
                    ba:c9:72:99:79:0c:1a:e7:9c:5d:90:f9:0e:7e:5a:
                    8c:bb:c9:c4:89:3f:85:d6:79:c5:17:30:f7:0c:c3:
                    58:f0:4e:6f:aa:c4:93:04:b6:3e:99:a0:00:93:d6:
                    66:01:03:7c:11:40:dd:56:46:22:df:b9:cc:14:ae:
                    48:27:ec:20:01:75:1c:17:b9:db:42:d5:c6:7c:69:
                    5a:14:07:96:cd:9c:16:93:16:7b:c4:79:28:97:bf:
                    02:a7:71:f1:44:02:83:e9:85:2b:aa:95:b3:7d:e0:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:41:77:FA:41:62:57:1A:1C:36:86:FA:4C:56:FA:EC:91:E8:B0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.crl

            X509v3 Authority Key Identifier:
                keyid:FB:1D:9E:DB:74:4B:13:B7:D6:F5:66:25:0D:85:09:12:8D:22:70:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:72:fc:d8:e8:f8:50:74:c8:de:fa:85:7c:5b:bd:27:7e:48:
         44:09:f8:49:96:64:b5:3a:af:ef:ee:26:f4:79:cc:cd:4f:dd:
         3c:0b:ad:d9:f9:c5:b6:12:d2:3b:ce:ad:f7:9d:78:67:60:70:
         9c:e1:bc:85:0b:2c:c8:2e:aa:82:08:b6:f3:25:31:54:e8:59:
         d8:3d:ac:1d:f4:9d:b5:b0:89:c7:08:92:d6:26:c0:1d:29:50:
         69:d4:5c:ff:97:3e:70:1e:da:cf:21:cd:6b:fc:13:55:2c:a7:
         63:9f:27:03:fc:50:dd:ab:e5:2b:ed:3d:d6:a8:14:eb:36:69:
         bf:61:ba:8d:4b:67:dc:9e:8e:2e:06:fe:ae:4c:34:0d:38:48:
         05:cd:87:f8:02:6d:e0:97:4f:f0:7b:3b:41:cd:0c:86:db:01:
         df:2e:ba:01:28:38:6e:b9:83:7b:eb:a9:ed:42:d8:ab:22:90:
         a9:2b:e0:09:16:59:d1:c4:46:05:22:7c:91:f8:e7:d3:b6:d0:
         3c:62:33:ef:dc:78:63:10:19:f5:2c:61:65:47:84:6c:e8:f1:
         19:f2:6a:d3:1b:5b:8f:34:2a:c2:11:a0:50:91:ee:9d:12:74:
         49:2e:bf:8f:e5:4e:a5:21:af:32:74:ec:73:65:90:6a:9c:88:
         ed:3b:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:03 2026 by rpki-client