Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa
File:                     f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa (raw, json)
Hash identifier:          YegwO4pVStLbj+gyJcuE4M474S85nmpbC75dhKvlgv8=
Subject key identifier:   65:0D:2A:48:C8:E9:FA:CA:E3:77:A1:AE:13:A3:E1:14:EA:1E:71:87
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584D8EF563764983BE636F122E80
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     53297
IP address blocks:        139.131.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:63:76:49:83:be:63:6f:12:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=65619e04-f80e-40d5-bb96-83b8f2ad0388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:11:eb:ec:e2:2f:34:f8:71:ab:6b:6e:4e:
                    3e:03:fc:da:64:91:54:f4:7b:60:69:9c:cf:9d:00:
                    93:a7:91:2f:6d:0d:b3:52:f4:51:ef:47:1e:14:ad:
                    17:b0:e9:8a:75:19:9a:df:e2:f2:1d:2b:9d:26:3f:
                    87:46:5d:84:54:6b:ea:4e:8b:0e:1f:69:0a:81:db:
                    a3:3a:62:6d:e5:40:f2:7e:3f:ce:53:4c:9b:dc:47:
                    8e:72:2e:86:3f:d6:e1:0d:3c:c0:96:91:17:a3:1f:
                    c3:12:2c:b1:a2:71:41:c4:89:dc:1e:8f:d9:86:be:
                    df:c3:79:a9:bd:4c:37:4a:fe:85:55:b5:aa:9c:d4:
                    ea:7d:ef:df:55:f5:d5:78:90:7d:05:3f:8a:08:6f:
                    69:17:6a:43:03:ff:16:f9:29:64:e9:d5:ec:5a:38:
                    a7:36:b9:3a:fc:8d:b0:ed:f0:04:1d:4e:a3:b6:65:
                    4b:e4:a1:81:b1:c3:9a:2d:ee:54:1c:60:48:02:75:
                    57:47:30:22:be:ac:ef:29:4f:89:05:07:db:18:82:
                    8f:56:c7:a7:1d:e9:0c:2c:d8:cc:b5:51:09:d4:33:
                    01:2a:bc:4b:6b:17:c8:55:af:4d:44:fd:7f:a5:3b:
                    95:db:6a:81:e1:93:41:92:26:60:fa:6d:20:20:52:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:2A:48:C8:E9:FA:CA:E3:77:A1:AE:13:A3:E1:14:EA:1E:71:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:83:c4:6e:9c:dc:0b:bd:80:5f:f0:f4:13:8d:64:33:5a:ce:
         d0:8e:bb:a8:53:22:33:84:cf:21:dd:56:cd:77:e8:35:17:37:
         0f:51:6d:17:96:51:13:08:26:21:b5:f0:7a:eb:9b:b7:99:e0:
         78:50:55:c2:d8:86:2d:c4:de:9d:d2:cc:ef:c4:37:96:f0:3d:
         4b:23:be:e7:ad:35:6e:df:49:96:69:0a:7e:11:3d:b1:aa:d5:
         29:dd:23:5d:71:86:20:33:f6:16:20:75:1d:61:3e:00:ce:76:
         b3:32:ef:43:ba:9f:32:e9:f2:c3:d5:2a:95:e2:84:ed:d5:2b:
         9e:ec:2f:27:55:82:a6:02:a2:6c:b4:39:e1:f1:b2:56:72:21:
         5f:d3:47:54:76:b8:eb:a7:89:89:34:a2:f5:3c:36:f0:9a:6e:
         19:27:20:9b:c1:b8:27:b2:96:b7:12:62:58:0c:74:6b:fb:50:
         c3:8b:23:f1:38:f1:9d:cc:c1:8c:43:0a:b0:2b:52:b3:22:da:
         a4:91:f0:b5:ff:db:86:82:e9:a7:2f:c3:b4:e6:03:fb:fc:10:
         bf:4c:7f:5c:84:32:3b:e0:37:3b:72:d0:7d:5e:fc:f2:2d:aa:
         50:9b:4f:1e:27:4a:42:35:fb:1e:56:8e:05:c3:9f:e7:d3:f8:
         eb:0d:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:01:30 2026 by rpki-client