Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/3e376bf9-b254-3c96-be6e-143db74b9f23.roa
File:                     3e376bf9-b254-3c96-be6e-143db74b9f23.roa (raw, json)
Hash identifier:          RC+2otzd9ACVxhd8W3+ad/sKjNQHkL34+e+DreARykQ=
Subject key identifier:   BE:40:EC:45:CC:A3:E1:42:67:74:0A:21:50:46:84:C3:AB:D9:06:3C
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584E9BE5189E4FE9E036A8BF0160
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/3e376bf9-b254-3c96-be6e-143db74b9f23.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396504
IP address blocks:        139.173.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:18:9e:4f:e9:e0:36:a8:bf:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=8722e9ab-e72b-4237-ba0b-205cfa2bf9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:06:b4:02:87:b8:80:e2:42:8a:60:74:7b:
                    ff:2c:66:db:75:80:4b:d8:b8:1c:15:cf:57:ea:1c:
                    b8:21:2b:bf:64:27:56:8a:ed:d7:75:95:db:88:8c:
                    9a:9b:1a:85:a1:0d:6f:86:97:dc:66:12:12:51:56:
                    19:19:a8:d0:7a:03:c8:e2:78:9d:82:72:e0:4e:ae:
                    06:97:14:81:75:04:d9:81:65:e4:75:67:e8:9d:0b:
                    ba:ac:8a:19:e4:01:2d:07:8a:92:6c:71:d9:5c:eb:
                    14:72:ee:0f:c4:a6:b1:bb:0c:05:75:12:ef:3a:ec:
                    96:a9:0f:19:fb:31:2f:c4:49:c2:cc:20:d2:76:9b:
                    36:e8:ea:dc:ff:2c:28:84:b1:68:83:54:d2:33:f8:
                    b7:bd:3c:87:86:9f:4d:0e:51:6a:21:fc:52:c6:f2:
                    5c:05:fb:d4:71:7f:58:c0:a6:a9:9d:42:ed:f0:a9:
                    02:e5:4f:cb:f4:b8:a3:94:ef:99:2e:5c:48:99:4a:
                    7e:06:86:da:d9:4f:d3:f2:aa:23:3c:79:bb:5a:1c:
                    31:be:1c:f8:c3:5b:97:4e:8f:f0:fa:29:01:57:68:
                    6b:a0:e6:03:f8:10:00:4d:c4:af:ae:62:95:8b:64:
                    5a:f2:b9:ae:6c:5b:d9:99:99:b5:e2:32:63:a4:c9:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:EC:45:CC:A3:E1:42:67:74:0A:21:50:46:84:C3:AB:D9:06:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/3e376bf9-b254-3c96-be6e-143db74b9f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.173.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b4:e5:d1:26:92:3b:14:34:ba:a9:03:8b:2b:fa:62:ad:ca:
         a3:4d:82:bd:1b:7d:99:a6:bc:f5:4e:e4:99:02:56:e3:5c:a1:
         fc:9c:fe:c4:e2:e5:f4:3b:c2:77:a4:e4:92:d1:0a:82:c6:e1:
         fb:30:f3:06:cc:ac:7f:6a:d2:13:6c:5b:ca:c5:4f:64:06:ea:
         3c:c4:a9:73:af:22:64:9a:4f:a6:5d:3c:ed:d3:75:27:f6:83:
         68:2e:58:67:eb:2a:a8:b3:51:38:ee:54:25:42:01:46:33:2d:
         1c:63:65:d1:b7:f0:fb:f9:11:4e:6b:eb:e3:aa:e1:f3:54:e2:
         0d:65:84:24:78:74:2a:77:3e:7e:5a:d5:ad:dc:86:cd:3b:d1:
         4b:2d:0e:12:4b:4f:d5:8d:6f:c1:56:50:64:bb:55:8b:e5:f1:
         3c:e3:c8:b6:9e:f6:f7:02:06:7f:b4:45:b6:ff:ce:c0:43:c1:
         3f:bd:a1:22:9e:68:9d:3c:7c:34:7d:7c:dc:ab:13:5f:53:be:
         80:6d:b9:4a:55:15:6c:62:bf:91:d8:bb:23:e4:cb:62:ee:c1:
         0e:c0:6f:dc:3c:3b:b1:e0:c1:f8:5c:99:b5:0b:d8:fa:20:49:
         a9:3f:40:b8:ab:e6:3d:8f:60:75:e2:80:c3:77:96:7f:a5:e6:
         d9:56:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:47 2026 by rpki-client