Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa
File:                     84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa (raw, json)
Hash identifier:          uQKGB3XWVzLp3txjp+rXSQoejFAuDHxESHNjNZTRX94=
Subject key identifier:   1A:0E:37:8C:B3:FA:D7:20:A3:3F:6F:0C:D5:6D:67:C1:66:AA:05:11
Certificate issuer:       /CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
Certificate serial:       010D0C9F4328584D7F9A8616943D9592D780BF00
Authority key identifier: 73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     19430
IP address blocks:        139.61.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:86:16:94:3d:95:92:d7:80:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=8c6d6597-85b8-4692-b91e-23f14ba5009b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:ab:02:5f:55:48:38:0a:f1:f0:d4:c9:ea:
                    f8:ed:df:27:47:3b:f9:1d:85:ac:0c:93:a5:3a:03:
                    aa:60:25:d9:47:b0:e8:c8:96:74:cb:bb:c1:0e:21:
                    84:ac:5a:a8:ee:8c:16:ce:d4:12:77:04:84:aa:10:
                    12:36:35:33:55:51:c2:e9:88:0c:8e:98:cc:38:2d:
                    d6:7f:eb:21:9c:97:a3:4a:87:11:82:9b:c0:27:70:
                    68:26:a6:07:07:45:b9:d5:0b:66:16:62:b6:aa:3f:
                    4c:33:3c:4a:07:5c:b1:d4:b3:54:ae:7c:ac:57:34:
                    f7:3e:72:d7:8b:3d:97:81:22:0e:1f:87:b8:a4:ed:
                    2f:5c:0a:48:61:b1:23:de:e9:a1:7e:2b:d0:d7:67:
                    4c:3f:ae:b4:27:74:c7:01:71:60:0c:d8:08:1e:c0:
                    68:c8:68:2c:aa:ff:5d:ad:61:1c:be:20:f1:a3:47:
                    9f:76:55:6a:f4:2f:47:5e:b9:c1:86:8b:99:39:49:
                    04:22:41:09:2d:f4:58:2e:fd:b0:72:2d:3f:84:1a:
                    4c:67:be:11:12:db:98:ba:8c:65:2b:9a:d1:f2:a4:
                    b9:94:8a:f4:f7:4c:19:39:17:a9:f5:ed:e6:2e:cf:
                    13:41:1a:f7:c0:f7:d9:7f:17:cf:92:c6:55:a9:f8:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0E:37:8C:B3:FA:D7:20:A3:3F:6F:0C:D5:6D:67:C1:66:AA:05:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl

            X509v3 Authority Key Identifier:
                keyid:73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.61.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d4:50:68:5e:29:53:0f:47:40:11:62:f0:62:e3:f2:a4:dc:
         7b:14:8b:e4:a2:99:6e:ce:8e:56:b1:d5:8a:ad:89:d1:38:c0:
         e0:f1:63:8e:0d:74:e3:f0:c0:86:53:1d:08:b3:ac:e8:d0:dd:
         0a:c6:ae:ee:0b:d1:fb:65:f0:81:39:72:e4:2a:81:99:18:a2:
         ec:cf:b5:f1:07:69:c4:d8:b7:ae:33:3e:90:7b:4c:40:d6:4e:
         5c:8d:ac:6f:6c:36:2c:06:dd:ff:be:55:5a:a6:74:25:d0:b9:
         96:20:d7:ed:9f:00:17:f3:a6:c1:67:25:33:e7:8d:54:2c:40:
         96:e2:8b:fb:a5:77:c7:16:30:8c:9d:d1:6f:94:d5:4a:7e:6a:
         a5:d3:1a:25:31:18:ff:b7:c0:14:1e:47:c3:9d:97:20:94:cb:
         73:a9:4f:ae:3b:a4:6b:0f:7e:31:14:5a:ae:80:6d:81:dc:46:
         c3:45:f8:a0:c0:08:1e:03:2b:2a:c8:75:2c:e3:e9:c0:26:84:
         51:be:cc:2c:d4:ae:3f:15:94:99:7d:80:2b:24:93:25:47:be:
         8e:b1:85:cc:92:38:61:fb:9e:17:a6:fe:ee:95:89:e9:cd:5e:
         9d:00:f6:d9:b8:e3:0f:ee:e6:9a:36:d5:b0:31:51:27:25:3e:
         6e:1f:31:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:41 2026 by rpki-client