Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/9c929b55-a6d9-3f8f-a9a3-90d8ccb1a3e5.roa
File:                     9c929b55-a6d9-3f8f-a9a3-90d8ccb1a3e5.roa (raw, json)
Hash identifier:          XpN/0L2ryKtk/Mr16GQb+DW+X2/UuCSYTFU2c+r8Hbw=
Subject key identifier:   5A:E0:3D:D0:66:AE:EF:8B:A3:91:07:D6:92:C7:37:F8:3A:90:A8:85
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F4112B395B743DBC959E35680
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/9c929b55-a6d9-3f8f-a9a3-90d8ccb1a3e5.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     399937
IP address blocks:        139.177.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b3:95:b7:43:db:c9:59:e3:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=83a4f3e6-1fad-453f-b610-3cf8529234b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:51:46:f1:ae:6a:fb:2a:1c:6a:6e:e2:0a:
                    dd:b0:e8:8b:75:c3:29:bd:bb:ad:55:db:da:d0:85:
                    9c:e2:ae:eb:6e:6c:f7:7c:d4:a4:42:90:be:27:ae:
                    5a:4a:ee:d0:3d:47:3f:b3:d6:cf:6c:80:58:5e:63:
                    50:68:3b:7a:a2:30:8e:27:6b:3e:93:1e:22:60:ee:
                    28:5c:34:1f:d0:1e:ef:6b:83:b3:fb:62:d2:e0:37:
                    cc:df:5d:f5:98:50:7d:bd:d5:68:9f:0c:0c:fe:ce:
                    f6:de:0d:39:fb:64:af:26:7b:01:2c:67:31:08:6e:
                    96:53:09:63:a1:86:65:63:2c:d6:f0:91:07:f9:e2:
                    96:ba:18:2a:1e:01:f8:ee:ad:9b:cf:4b:ff:91:91:
                    2b:d8:4c:a1:ac:b3:b0:03:7d:03:ee:b5:4f:8a:6b:
                    5d:ae:35:3c:7a:79:b4:28:a3:4d:f3:91:45:e5:9f:
                    34:11:1a:1f:37:97:87:8d:46:dd:60:6c:80:5a:0a:
                    42:68:ce:d3:d9:8f:49:9b:c5:01:7a:4d:43:eb:c8:
                    43:ff:84:ef:e1:f6:c7:38:73:e6:6b:4a:4a:60:27:
                    20:b9:96:c8:d0:cd:e1:af:d7:9d:53:c1:fd:e9:40:
                    81:fb:70:34:79:dd:1a:81:14:e3:3e:14:b7:a4:b4:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E0:3D:D0:66:AE:EF:8B:A3:91:07:D6:92:C7:37:F8:3A:90:A8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/9c929b55-a6d9-3f8f-a9a3-90d8ccb1a3e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5f:6e:ac:40:1e:be:bc:54:b0:ab:b0:2e:d7:1d:e5:98:61:
         c8:d4:c2:8e:52:66:0f:59:b9:26:04:ad:30:d7:24:92:6b:39:
         29:31:77:a7:3a:76:d9:f9:39:9e:ad:67:f4:dd:98:68:c9:7d:
         d5:07:a8:7c:5a:f1:08:e8:e2:5e:bc:e6:57:6a:47:86:c4:e9:
         c1:22:64:c3:ca:e4:70:2e:07:db:98:24:6d:75:4c:64:cd:54:
         16:2c:b1:6e:4e:c7:86:d0:8a:eb:61:a2:f1:76:8d:a5:69:31:
         04:d4:cb:e4:ce:5d:ac:24:b7:be:01:d6:e1:92:5b:1d:eb:c7:
         5a:f3:3a:76:da:26:7b:6d:6e:ed:69:a1:6c:59:2b:d5:f1:1c:
         20:96:91:5c:a8:51:3a:67:1d:c6:3d:30:30:20:f0:79:be:d5:
         da:dd:71:ef:96:74:53:64:59:52:59:25:bf:da:7b:eb:b9:64:
         28:ff:52:1d:c3:b3:b5:5f:41:49:08:42:3c:37:5b:fc:d3:22:
         43:b7:f9:66:ea:43:a4:b7:c8:9e:d4:a0:ae:aa:d4:5e:66:24:
         64:16:30:32:77:be:e6:f0:60:c3:63:21:3a:d5:95:2a:1b:93:
         c9:61:bc:f7:37:c0:65:5f:28:5d:2a:6f:30:e9:f0:58:08:45:
         84:22:2f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:58:11 2026 by rpki-client