Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa
File:                     b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa (raw, json)
Hash identifier:          6dohqD/AxwcIwiRM5BWrhdoLXmrk2sfhDuEda8y0AqY=
Subject key identifier:   56:E3:D1:8A:95:E7:7E:52:DC:2B:6E:D2:CA:CD:37:D9:C3:5C:32:22
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584E8DEFA2180F6FD0FD53B46880
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     53927
IP address blocks:        139.131.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a2:18:0f:6f:d0:fd:53:b4:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=46e87dbd-0c2d-4223-9c14-1aba3022b056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:71:17:18:31:0a:aa:0d:87:fc:e1:d7:ca:
                    f2:b4:14:9d:b7:4e:64:e7:0c:a6:90:b3:8b:eb:a6:
                    0f:ef:ee:8e:a8:ff:fa:1d:66:56:83:04:8c:b9:33:
                    9c:12:27:05:94:73:51:3e:b9:1a:3e:e0:fe:7e:cc:
                    b6:25:1d:47:ea:cc:e0:82:c1:61:09:34:fd:34:8d:
                    e6:9a:94:82:c8:15:96:e2:47:b1:c0:87:78:3a:73:
                    11:1f:2c:d0:5c:17:79:6e:52:27:78:dc:b4:6f:d3:
                    b2:97:55:7d:1f:9d:c5:5b:e6:0f:97:ba:2c:76:c9:
                    04:c2:4e:7f:1f:53:64:88:99:fe:e5:e3:f8:a1:d5:
                    b2:7b:bc:01:87:d5:72:c8:6f:b7:20:75:3c:64:28:
                    07:c0:6a:c1:c9:d8:fe:78:90:06:05:cc:4f:7c:de:
                    66:f3:ff:f4:fa:c0:4f:1c:fb:f2:12:52:11:61:16:
                    86:49:46:8a:5e:73:a5:4a:4d:4e:7c:07:6f:94:25:
                    e4:b3:b6:59:d4:46:7b:07:9d:ba:3e:10:20:44:16:
                    11:b2:8e:ab:fc:98:37:bf:c9:0c:f3:fe:f0:8b:db:
                    53:22:0b:31:eb:9e:f0:5d:e0:95:ef:70:43:83:80:
                    bc:08:c6:65:ab:a7:bf:a9:57:ae:b6:3c:be:9d:01:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E3:D1:8A:95:E7:7E:52:DC:2B:6E:D2:CA:CD:37:D9:C3:5C:32:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:67:b4:82:57:f9:f1:4c:33:86:54:58:c9:2b:24:a0:8d:
         04:1b:94:b9:58:0b:94:6b:50:de:78:94:1d:e7:35:ae:ea:3b:
         44:29:84:71:72:27:e4:3d:d7:12:c1:f8:dc:59:27:0f:af:26:
         24:46:84:95:8f:2e:03:ba:64:aa:0d:7f:f2:a6:97:e1:a0:e3:
         6c:49:8c:6b:64:5f:df:56:8b:73:29:34:82:d4:15:41:92:37:
         fd:9a:ce:57:f6:88:e9:dc:f9:8b:0a:83:4e:21:9d:84:b0:42:
         1c:dd:43:53:db:f4:7b:1f:89:dd:41:dc:ff:67:4a:48:ad:25:
         2c:69:96:04:e2:d3:4c:5a:69:04:1d:3f:46:e4:a1:49:d0:91:
         6c:7e:29:3b:d2:58:20:a5:c4:d0:e2:0c:c4:15:a1:de:0b:f2:
         cf:d9:cd:8f:a4:91:8e:8d:10:93:37:55:b3:b3:0a:15:3b:09:
         76:7b:d6:48:16:6f:90:51:f0:f3:ed:01:84:e8:4f:13:c1:1b:
         24:0c:b7:9f:f6:10:b7:86:26:d8:20:e8:89:9d:91:c7:99:79:
         b1:1f:5e:ce:56:19:23:f0:60:aa:2c:b9:cd:6b:af:b1:5b:ce:
         f7:90:45:c6:75:0c:f2:8f:34:cb:5e:a6:30:76:1b:72:3d:55:
         22:1f:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:44 2026 by rpki-client