Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa
File:                     057636be-53d3-33be-86cc-79dd80d5e92f.roa (raw, json)
Hash identifier:          Zv4QY2nPXP+CUwn55bX4X1DHuE+AY1QOpUj0kY3LblE=
Subject key identifier:   84:0C:8E:9B:46:01:44:0D:AB:59:2A:2D:64:18:30:96:7F:7B:0F:CF
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584D8EF571ABC39A3D2A65886900
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     30238
IP address blocks:        139.138.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:71:ab:c3:9a:3d:2a:65:88:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6a1f0dcc-72fd-4082-b911-14035c9b513a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:fb:f0:69:4d:a7:a7:61:a9:6f:e8:d2:8f:
                    b5:0b:ae:7f:fa:83:cf:56:74:0a:30:e0:96:34:88:
                    6c:00:1f:11:13:b7:15:29:bf:40:37:d7:25:f7:37:
                    4a:2f:e7:3b:b1:9e:52:5c:c5:ed:59:38:b1:c6:a1:
                    bf:15:e4:a9:00:ff:d8:81:55:5c:4c:ea:ce:4c:98:
                    6c:a9:1d:ff:25:55:46:af:7f:c2:9b:8d:18:d5:a9:
                    2e:20:2f:5e:cd:1d:4a:87:9a:fb:76:70:96:31:b2:
                    17:68:15:e1:13:ab:e5:0c:09:78:fc:8c:c9:16:c5:
                    48:18:5e:02:2b:c3:23:4f:05:6c:02:21:e9:8f:7d:
                    9b:fa:c3:47:36:51:05:6b:31:ed:c1:bb:ba:01:83:
                    64:18:52:db:5a:9f:60:b5:44:a1:f7:08:e5:d2:01:
                    0a:4a:d9:1e:e8:4d:e3:f4:c8:66:86:3a:d6:ac:9c:
                    b4:6f:1f:01:f0:8e:a8:a5:18:5e:56:e7:61:07:53:
                    a8:23:60:78:a4:95:8d:35:78:50:1d:14:f5:fa:f2:
                    52:70:46:03:51:0f:46:f6:ad:b6:b4:24:e2:e0:ef:
                    4f:af:22:f4:cd:14:4b:18:8d:ea:54:cf:b6:a7:a7:
                    a8:94:2c:d5:c7:b7:e9:f2:0b:4c:93:03:f0:60:74:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:8E:9B:46:01:44:0D:AB:59:2A:2D:64:18:30:96:7F:7B:0F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:21:cb:3d:a8:24:ed:57:83:3d:83:a9:67:a4:6d:03:64:fc:
         eb:a2:48:fd:f9:d1:e9:19:e1:ca:12:78:b8:8d:cb:e9:92:c7:
         6f:ec:ca:a8:f5:32:08:3e:1d:92:fe:fd:06:d2:b7:bb:1d:24:
         9d:4a:28:3b:8d:0e:e7:3c:2d:29:26:30:ae:ff:1e:83:a2:6c:
         68:93:96:ad:cc:5b:91:ac:48:da:76:40:96:e5:b4:11:71:77:
         84:40:6e:97:17:7e:d7:fc:bc:b8:94:61:11:da:aa:e5:83:c6:
         12:bf:51:61:c4:10:45:46:3a:01:59:09:cd:a3:39:e2:f6:60:
         30:56:67:11:9f:69:8b:23:66:15:6e:92:7c:a7:86:43:ce:21:
         0b:9d:95:39:4c:b4:0b:90:3c:53:3c:c7:31:82:b1:17:33:e3:
         4a:3b:96:8c:46:3c:77:ec:ff:1d:15:a5:0e:0b:98:51:85:1c:
         90:b0:12:89:44:ca:72:63:ba:ff:dd:60:99:c6:90:1b:59:13:
         5c:0e:c7:1b:81:c3:38:2f:b0:cc:8f:83:06:84:e1:96:88:a3:
         90:85:c7:1b:1f:2b:47:a2:29:56:f7:e4:90:a2:91:42:d5:1b:
         43:1d:2a:f7:e9:e3:cf:84:52:2e:ce:3f:2b:6a:1c:bc:a7:63:
         22:2a:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:21 2026 by rpki-client