Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
File:                     fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa (raw, json)
Hash identifier:          Ej/x5H9+Gugz6Zd6b2DUhZqoMFSZHpFfgLoOKQVb70E=
Subject key identifier:   93:7A:08:FC:09:3C:C6:72:57:69:C8:E7:B3:AB:54:56:36:68:9A:31
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584D703FE09373DE2E340308DC00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     398202
IP address blocks:        137.239.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e0:93:73:de:2e:34:03:08:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=21110f85-5fee-46b7-8e4f-6b70960404cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:c9:34:58:51:4d:b5:dd:89:6a:e2:3a:94:
                    d0:8b:88:79:ea:ac:2f:13:6f:ce:40:b7:de:62:cb:
                    1e:66:7d:01:bc:a7:9b:2a:42:50:e7:f0:2c:34:be:
                    3e:4c:76:ec:29:a7:7a:a1:3d:f1:1f:2e:e0:8c:72:
                    c9:bc:32:f9:3a:f2:4a:88:63:7d:98:d4:b8:41:c4:
                    58:68:90:46:79:7b:9b:57:d6:4e:5f:22:e7:8b:ec:
                    ed:20:05:be:32:d2:25:c8:1c:f9:94:a0:ac:61:88:
                    ec:4d:2c:ec:49:f9:e8:b1:e8:57:3c:ac:c2:ec:b8:
                    09:5c:55:15:fc:22:db:d0:7e:1e:ca:af:a6:44:64:
                    d5:7f:8c:41:75:41:c4:2a:d1:a7:b2:8c:1b:69:6f:
                    67:9a:7e:6e:e1:cc:d7:4c:81:23:17:02:ec:ba:71:
                    e2:3c:08:12:7b:54:e5:83:52:62:06:e1:df:50:77:
                    7e:ae:7a:7d:83:60:bf:23:7e:5b:1b:12:67:08:6d:
                    0e:82:56:c9:18:11:aa:1d:2b:1c:67:53:e5:15:00:
                    9a:fd:62:b7:7e:30:3a:12:60:26:34:96:86:36:75:
                    da:7a:80:08:29:91:b9:f7:48:3d:30:4a:d8:f2:69:
                    a6:2f:8e:3f:32:cc:21:06:5b:b9:21:0c:a8:6a:dc:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7A:08:FC:09:3C:C6:72:57:69:C8:E7:B3:AB:54:56:36:68:9A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:42:3e:0b:37:b2:fb:01:37:34:40:1a:22:57:5b:6a:bc:aa:
         12:25:31:ae:2c:83:c9:2b:bc:24:d1:d7:c3:28:ee:e3:9a:29:
         b4:7e:e6:ae:80:62:dc:65:37:9e:f5:94:01:66:9b:7e:93:fc:
         a5:c3:67:59:9c:90:ac:26:eb:8c:2f:5f:d2:b2:9e:90:15:d6:
         66:1a:2b:69:76:c2:29:da:98:7a:09:b6:83:2a:7f:54:0a:42:
         2a:de:6c:cf:5c:32:91:01:50:e1:44:e6:22:50:78:62:f0:28:
         e3:0d:6b:16:ba:2f:16:5a:2c:aa:95:bc:c1:b3:d0:91:50:71:
         f2:ea:0f:4c:e4:d7:78:67:ea:43:c8:1d:06:5a:66:85:c2:ad:
         c8:b1:8d:0e:42:e4:70:a0:bd:d5:a5:8c:28:bf:02:db:94:74:
         86:83:a1:30:68:84:8c:34:d1:ce:c0:40:2f:b9:25:8d:f3:b7:
         4a:61:d6:2e:a9:18:37:2f:f3:97:d2:33:95:90:bc:e0:a9:78:
         90:ba:84:68:0d:a0:19:a9:1d:db:64:46:2f:94:a0:c3:5b:46:
         95:89:cb:43:a3:22:59:22:22:a3:f9:fc:62:1c:4d:d6:8c:ec:
         a9:1f:5c:58:b3:8a:0d:86:69:30:f2:f3:f9:a2:68:d0:81:98:
         9b:0f:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:48:40 2026 by rpki-client