Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa
File:                     441c4f19-758d-3201-afca-03467cbc3620.roa (raw, json)
Hash identifier:          DnYc1bviZ+XLf3Ztk7wweInAuDQtHBilPdIgO7t1Hzw=
Subject key identifier:   43:15:6F:01:41:AD:20:DB:DB:9A:2A:5E:4D:DD:84:12:E6:65:2F:86
Certificate issuer:       /CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
Certificate serial:       010D0C9F4328584DA81577942555D0F4AE3BC580
Authority key identifier: 1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     400734
IP address blocks:        139.60.210.0/24 maxlen: 24
                          2620:13c:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:77:94:25:55:d0:f4:ae:3b:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=2e7b588b-5308-47b6-a5e5-eba0bdd294ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:7e:6a:01:42:23:26:c5:15:bc:4b:48:56:
                    a8:ff:66:93:ad:31:7c:18:9d:58:b2:db:31:74:57:
                    13:08:38:99:d7:56:d3:b5:b2:4e:9c:43:5b:fc:9a:
                    0a:fc:fa:f6:0e:18:d6:04:76:6f:85:45:8b:51:c4:
                    0f:04:b8:76:ba:f0:43:ad:29:3e:81:f1:62:ba:d4:
                    9b:3a:17:b7:0c:b0:66:29:0f:21:06:94:e2:2a:39:
                    b9:c0:cd:e2:30:dd:ef:7a:9b:18:b5:70:05:c7:0a:
                    a1:68:86:2f:cf:4a:94:ee:ad:74:59:95:6e:5a:61:
                    bc:b0:68:7f:58:09:e7:c7:93:92:07:3a:a7:e8:f7:
                    e7:ac:0e:db:8c:cf:f8:19:ae:d3:29:34:c8:71:c6:
                    d6:55:31:bf:a2:ff:22:24:2d:53:78:03:c8:05:98:
                    63:b2:c1:4c:59:90:76:b7:b9:ff:2c:f1:68:e5:05:
                    a9:68:46:72:f0:9f:15:71:a6:fc:f3:fa:d2:4b:77:
                    68:79:5d:c1:2b:77:43:84:03:fa:34:98:89:e2:fa:
                    f1:85:68:98:41:87:dc:3d:c1:ea:72:6c:28:e2:19:
                    96:39:4d:b3:31:26:7b:c9:83:23:ed:15:c5:c1:ba:
                    6b:2a:f1:b4:f6:a8:55:0f:67:e4:64:20:ff:7e:7e:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:15:6F:01:41:AD:20:DB:DB:9A:2A:5E:4D:DD:84:12:E6:65:2F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.210.0/24
                IPv6:
                  2620:13c:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4c:b3:19:6c:27:bc:47:87:9b:b7:37:db:25:72:39:8d:5f:
         b5:dc:1a:a7:db:64:07:44:3b:e3:79:91:5c:e4:c0:e5:74:13:
         db:98:21:a1:54:d6:95:87:f5:97:b7:ff:f7:a4:1e:ae:76:40:
         a5:0d:3c:4b:50:e2:3d:b2:c9:ad:00:ae:7a:b4:13:5a:f3:df:
         3a:1f:b9:8b:51:3c:e3:db:cd:a7:16:e4:4d:42:62:38:02:e0:
         49:00:5a:cb:69:56:20:8a:12:98:b5:ae:97:1b:41:88:04:60:
         f3:08:5f:08:55:b1:a6:c1:76:d8:1e:9e:dc:c9:c1:2e:1c:12:
         43:37:28:2b:1b:9a:9e:53:5a:0a:75:d1:0c:c6:75:9b:4d:f7:
         e7:d5:d2:6e:57:94:e1:f7:e8:05:12:49:89:92:3d:2b:f3:5b:
         6b:6f:c6:97:96:dd:61:ea:5e:03:b3:86:80:ec:30:d9:b9:5c:
         2f:a8:bf:2e:4e:a0:f3:27:ee:2f:a1:44:07:d9:71:e6:38:86:
         8e:9f:45:69:4b:60:02:f9:9c:b6:5f:7d:a9:25:05:19:a6:2c:
         ad:6a:b5:f6:72:66:ab:d5:1c:b0:b0:fc:d2:9a:36:56:ed:28:
         ac:c5:b3:d5:aa:7a:07:28:59:9c:35:2c:c3:9e:c4:d4:32:76:
         46:f2:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:26 2026 by rpki-client