Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/139733d8-5267-39dd-8037-e273c89394e2.roa
File:                     139733d8-5267-39dd-8037-e273c89394e2.roa (raw, json)
Hash identifier:          yVgWj3cFRwm/8KRySP3OvJcKxOK4bBpuQAm/vBBrkLk=
Subject key identifier:   04:2B:EE:1B:7C:69:CE:22:83:CF:17:AD:77:14:0B:4A:6A:10:86:72
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584D4427FD3A33C171A9AEED1100
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/139733d8-5267-39dd-8037-e273c89394e2.roa
Signing time:             Mon 23 Mar 2026 17:57:07 +0000
ROA not before:           Mon 23 Mar 2026 17:57:07 +0000
ROA not after:            Sun 21 Jun 2026 17:57:07 +0000
asID:                     834
IP address blocks:        199.48.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:27:fd:3a:33:c1:71:a9:ae:ed:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Mar 23 17:57:07 2026 GMT
            Not After : Jun 21 17:57:07 2026 GMT
        Subject: CN=63177e07-a196-4e15-a7df-1d3ada16cb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:81:15:1a:14:96:01:2d:32:c1:3c:b6:4f:
                    4d:19:a2:ce:e2:55:75:65:af:f2:37:40:5c:b3:11:
                    22:12:68:52:bd:fc:2f:de:cf:45:d0:90:3a:52:ad:
                    2c:50:22:ea:05:a1:0e:b9:26:2d:23:6d:14:18:ea:
                    3a:8b:1e:5e:7c:b2:2d:a4:5f:97:26:ff:f4:cd:ca:
                    43:70:b2:4f:e6:07:85:75:10:ff:d9:b2:46:ec:ad:
                    54:b4:19:29:be:39:03:f6:b4:05:10:cd:2a:1e:08:
                    58:cd:b9:82:4a:e6:8b:9a:d3:4c:d2:ad:d4:ff:83:
                    ae:1b:cc:62:4d:74:f0:87:c0:c2:c1:e8:bb:13:91:
                    d2:0b:c6:42:33:9c:98:51:47:0b:de:1a:77:ba:3f:
                    c2:56:7e:a1:e1:a6:f5:49:0a:97:a4:95:c2:10:eb:
                    88:d4:35:37:6d:58:c7:25:63:f2:0e:94:5d:e2:2f:
                    aa:8a:33:b2:2a:9d:74:28:1e:18:f0:62:5f:5c:71:
                    56:b7:84:b5:76:d8:5c:4b:a4:50:ca:0f:ed:bf:e7:
                    0d:61:7c:dc:87:51:3f:d0:1a:7e:39:a2:70:d7:78:
                    5a:0f:75:72:c0:b4:8c:77:69:89:d0:46:96:c4:a8:
                    9f:47:2f:57:52:81:fc:34:bc:43:e2:e2:3e:1a:fa:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:EE:1B:7C:69:CE:22:83:CF:17:AD:77:14:0B:4A:6A:10:86:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/139733d8-5267-39dd-8037-e273c89394e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:f2:f4:d9:88:4d:2c:f4:31:d0:fc:cc:76:02:63:ad:d0:
         a4:06:39:3f:57:37:74:09:6e:4f:31:78:85:91:7d:44:4d:50:
         cc:5b:dc:1b:66:e0:a8:0d:7b:1e:99:af:93:fe:f8:3d:29:42:
         78:1c:3d:6e:cf:1b:2a:ae:a3:b2:0b:33:f0:d2:1d:43:60:85:
         7a:f6:d9:3f:5c:5d:7e:1b:e4:51:79:b7:4a:ef:5f:86:59:af:
         24:07:f1:b3:33:ef:8d:1a:01:cd:fa:f7:b5:0a:26:05:61:41:
         55:39:e8:06:0e:90:77:14:57:05:45:6a:e4:eb:88:26:c3:59:
         fa:92:2f:20:35:1b:0d:e5:f7:2a:ee:a4:42:5e:68:a0:11:0b:
         5e:59:25:13:fd:8f:ce:e6:1e:80:72:d1:b9:25:ea:85:b7:1f:
         df:c8:9a:07:1a:18:81:d8:af:e0:54:38:ba:57:1f:d3:be:91:
         c2:22:5c:64:bc:0f:bc:5a:ae:10:96:76:6f:fa:12:4b:fe:2a:
         75:55:5d:c6:ce:a9:c0:d0:5d:d6:4c:ba:63:8b:50:c5:ad:30:
         14:da:16:34:5c:c8:82:9d:7f:3e:fa:36:ce:45:c0:88:cc:f7:
         6b:63:26:76:8b:3f:72:b1:b0:5f:97:08:28:68:c7:59:64:50:
         bb:4c:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:35:10 2026 by rpki-client