Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa
File:                     68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa (raw, json)
Hash identifier:          FcGBp2Knai8dWyHMEOmTXdCaPVjdlDhLVgAwIYzx+wo=
Subject key identifier:   83:89:30:28:B9:6F:0C:6E:D6:3F:3B:4F:F3:AF:E0:1B:BE:C6:A1:41
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584DADAAD17549D79AF0B1BD16C0
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     394625
IP address blocks:        139.64.176.0/24 maxlen: 24
                          139.64.177.0/24 maxlen: 24
                          139.64.178.0/24 maxlen: 24
                          139.64.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:d1:75:49:d7:9a:f0:b1:bd:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=525b746f-529d-4011-8867-8035c1fd2d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:79:2c:9a:47:2b:26:39:03:c6:23:1e:04:
                    38:da:19:d6:a4:7b:1a:c2:fa:03:fa:0d:34:36:12:
                    f8:b4:d9:91:e2:89:eb:36:9e:0f:d0:c5:81:4f:29:
                    a8:71:65:d4:50:d4:17:9b:49:81:71:96:27:5b:eb:
                    8b:5a:56:31:60:28:de:6c:01:20:f8:17:7c:ed:8e:
                    f6:a8:09:72:15:c4:48:43:a5:d2:90:f6:63:a4:fd:
                    cb:d7:79:f2:19:c6:cc:b9:a1:f3:8b:ee:80:6f:7f:
                    b5:28:e6:15:e5:0a:87:4e:1b:18:49:b7:e7:43:c7:
                    39:f9:b8:07:0a:15:50:38:5e:96:a9:02:df:09:91:
                    c9:63:cd:d5:df:ca:4b:38:e9:e0:2e:64:bd:ab:e6:
                    57:0f:52:f4:ce:9c:e3:9c:eb:c8:62:b6:93:1d:e0:
                    45:91:c3:c5:b4:a4:fb:b5:41:14:45:13:a3:5f:02:
                    bd:93:65:34:e9:eb:1a:6e:01:fd:b5:38:11:f0:ea:
                    da:a2:ed:69:be:ce:75:c7:b2:9e:36:ab:9e:3a:ff:
                    b7:ae:da:3a:eb:89:95:52:9a:ca:65:a4:73:82:4d:
                    e5:bb:10:9a:bc:c3:64:00:d7:78:34:73:e0:20:84:
                    83:21:da:2a:ec:d8:0d:67:a3:6a:1f:1f:24:3e:b0:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:89:30:28:B9:6F:0C:6E:D6:3F:3B:4F:F3:AF:E0:1B:BE:C6:A1:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:58:f8:cf:04:b3:ff:2b:ae:df:4c:b3:9e:df:f8:83:c3:dd:
         87:c6:7b:7d:b1:c2:af:bb:7a:9b:20:fa:f1:2f:89:85:16:54:
         37:f3:bc:31:07:65:30:f2:d2:37:83:e3:7d:dc:84:00:0d:63:
         e9:bd:13:3b:30:07:93:e1:06:54:49:ca:7f:07:0a:34:be:0a:
         02:f4:fa:e1:05:fb:79:f6:cf:80:fe:4f:eb:4f:bd:26:7a:0b:
         a3:b4:25:01:c5:c6:64:42:69:77:41:b4:85:00:44:95:0e:c8:
         d2:af:d4:a5:95:04:00:22:ed:bc:ba:a5:b2:47:04:37:c2:32:
         b9:09:2b:2d:03:f9:94:6a:fc:96:59:7c:76:9a:9b:b1:56:3e:
         8d:3e:9a:28:73:34:65:1b:62:f3:c8:da:ec:53:7c:52:df:9c:
         a0:09:66:a6:e3:a7:64:5e:2c:b5:50:2a:8a:b6:98:be:be:04:
         58:c3:6f:ae:7b:d3:e0:4a:68:7c:4f:e4:9c:d4:66:66:e6:0e:
         db:f3:e5:b3:d7:bb:e0:73:51:1b:15:c5:25:80:83:f9:03:c4:
         dd:bc:23:6b:c4:bb:4c:2d:18:79:a6:41:99:bb:3c:df:af:01:
         2a:11:fe:a1:06:bc:03:c3:26:b0:4e:43:63:03:36:ab:65:e3:
         83:87:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:13 2026 by rpki-client