Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/f431cf16-b892-30e0-930d-eea11c817e45.roa
File:                     f431cf16-b892-30e0-930d-eea11c817e45.roa (raw, json)
Hash identifier:          2+KZD959EvUhIvTTwH65SA53f8MPXje11OyVcZqEHco=
Subject key identifier:   40:7C:6D:E6:EE:B8:27:28:32:F9:90:35:0D:B5:FB:AF:D6:44:26:C1
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584D15A24D19C1E2BAE83EDBE9A0
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/f431cf16-b892-30e0-930d-eea11c817e45.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     14291
IP address blocks:        139.180.20.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:4d:19:c1:e2:ba:e8:3e:db:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=53128c92-d7ab-480f-bb74-258e77940d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:60:a0:99:86:28:6d:54:26:5f:21:ff:77:
                    30:c0:59:93:4e:34:d8:02:84:a8:2f:c8:aa:65:0e:
                    09:da:ea:77:d4:41:a8:9b:f4:00:7b:01:37:36:91:
                    cd:bc:44:8f:13:f5:b7:0f:9e:48:3c:05:25:08:f8:
                    c9:28:d3:90:c5:00:42:27:8e:ad:c1:1d:dd:8b:20:
                    7d:dc:99:e3:a5:f9:18:b4:a1:79:ce:5d:cc:e2:c4:
                    92:e7:da:da:99:78:13:b9:f2:63:4a:b5:f1:0e:72:
                    41:f3:48:1c:ab:c1:97:20:5b:99:64:a1:09:b9:65:
                    5d:51:db:6a:95:68:4d:c0:ca:21:a0:76:47:fc:d1:
                    75:b7:18:df:9c:9c:45:f5:49:a3:e4:42:c3:90:ab:
                    e7:1f:58:72:85:d3:59:77:95:bb:be:23:22:22:69:
                    5e:0b:b9:c9:03:f3:27:e2:9f:2c:53:f6:f4:be:d5:
                    bb:d1:4f:cf:6e:2c:14:94:d2:51:d2:01:4f:47:2b:
                    6c:83:d1:a6:d9:6c:67:3c:6c:27:73:0d:44:76:38:
                    fe:c6:5e:7a:18:45:13:cd:f0:25:f8:9d:71:7d:08:
                    1b:4c:6e:34:d6:a3:a9:c4:69:a0:9e:b1:14:5a:1f:
                    39:af:fc:e5:b9:3d:79:5d:9c:f6:18:98:aa:00:4d:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7C:6D:E6:EE:B8:27:28:32:F9:90:35:0D:B5:FB:AF:D6:44:26:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/f431cf16-b892-30e0-930d-eea11c817e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b6:d4:d9:70:f3:1f:7b:50:ac:f0:29:4e:1c:6d:d9:bc:13:
         c0:93:48:f0:d4:65:61:48:8c:a6:bc:70:55:07:63:17:a3:cb:
         b2:f0:05:cb:f5:aa:55:a8:7e:0f:5a:85:b7:a6:e8:bb:31:fa:
         39:e6:ad:58:fe:26:57:71:16:88:8c:0c:26:ce:f4:0e:97:f8:
         ca:70:cf:47:15:00:7b:38:72:a5:07:dc:8e:77:32:28:c5:80:
         46:d0:30:c7:5f:3a:a2:c7:4f:49:a9:7a:8a:85:da:33:36:c9:
         28:03:b1:b4:16:0c:d7:fd:47:83:f1:8a:0c:71:e5:e3:1e:01:
         5d:30:45:fd:00:f1:08:be:ba:de:48:25:16:c9:70:17:00:a9:
         12:4a:d4:7b:f7:16:f2:14:13:94:b5:fe:6a:f7:4c:8a:de:b7:
         ae:dd:25:6a:87:bd:b4:d8:e9:ca:f7:5d:17:61:61:ea:6c:cf:
         e3:75:3b:63:31:a3:95:3b:76:4a:01:d8:13:8a:14:fe:5e:d2:
         28:b9:26:da:99:69:14:c2:0d:14:4e:a7:07:a8:9a:17:35:a0:
         17:bb:40:fe:c2:d7:82:0f:d1:29:f7:e6:1d:ce:4e:b1:02:7b:
         b6:36:fd:04:61:4d:7f:de:af:4a:50:fd:5a:5f:29:f9:a0:3f:
         6e:47:07:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vok0ZweK66D7b6aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1
MzQ4MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
NTMxMjhjOTItZDdhYi00ODBmLWJiNzQtMjU4ZTc3OTQwZDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx05goJmGKG1UJl8h/3cwwFmTTjTYAoSoL8iq
ZQ4J2up31EGom/QAewE3NpHNvESPE/W3D55IPAUlCPjJKNOQxQBCJ46twR3diyB9
3JnjpfkYtKF5zl3M4sSS59ramXgTufJjSrXxDnJB80gcq8GXIFuZZKEJuWVdUdtq
lWhNwMohoHZH/NF1txjfnJxF9Umj5ELDkKvnH1hyhdNZd5W7viMiImleC7nJA/Mn
4p8sU/b0vtW70U/PbiwUlNJR0gFPRytsg9Gm2WxnPGwncw1Edjj+xl56GEUTzfAl
+J1xfQgbTG401qOpxGmgnrEUWh85r/zluT15XZz2GJiqAE3VxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEB8bebuuCcoMvmQNQ21+6/WRCbBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm
OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvZjQzMWNmMTYtYjg5Mi0z
MGUwLTkzMGQtZWVhMTFjODE3ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1
NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw
NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk
YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi7QUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAES21Nlw8x97UKzwKU4cbdm8E8CTSPDUZWFIjKa8cFUHYxejy7LwBcv1
qlWofg9ahbem6Lsx+jnmrVj+JldxFoiMDCbO9A6X+Mpwz0cVAHs4cqUH3I53MijF
gEbQMMdfOqLHT0mpeoqF2jM2ySgDsbQWDNf9R4Pxigxx5eMeAV0wRf0A8Qi+ut5I
JRbJcBcAqRJK1Hv3FvIUE5S1/mr3TIret67dJWqHvbTY6cr3XRdhYepsz+N1O2Mx
o5U7dkoB2BOKFP5e0ii5JtqZaRTCDRROpweomhc1oBe7QP7C14IP0Sn35h3OTrEC
e7Y2/QRhTX/er0pQ/VpfKfmgP25HBwI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:59 2026 by rpki-client