Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/9d12cb2d-ff52-30fe-8956-3282181704de.roa
File:                     9d12cb2d-ff52-30fe-8956-3282181704de.roa (raw, json)
Hash identifier:          DCMF8ZR0agpJtDRr4Yy6CQjdta8lrlzw2TBkA/6D7a0=
Subject key identifier:   07:66:D0:5C:C8:2A:8A:75:BF:03:7F:28:18:37:B0:D9:F5:6D:16:E0
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584F30527FE90E25F4E5E2E38C80
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/9d12cb2d-ff52-30fe-8956-3282181704de.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        139.173.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7f:e9:0e:25:f4:e5:e2:e3:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=a08c28d1-c85a-4722-a6f5-639392d85126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:24:6b:6b:af:31:e0:66:4f:8d:2e:5c:c2:
                    32:11:62:25:5b:3d:e6:81:f9:55:6a:59:ef:ec:81:
                    41:f1:06:6b:8f:e7:9d:67:fb:52:ee:05:3d:65:9a:
                    dd:31:46:ec:c3:a7:30:83:ae:c7:67:b4:1f:ad:f8:
                    46:b5:47:89:a5:36:53:83:83:7a:a6:b3:77:52:91:
                    f2:5a:c9:a3:98:89:a8:90:73:d8:f3:fc:8a:a4:5c:
                    b2:50:42:46:98:cb:42:6c:a8:a9:a3:bc:87:63:05:
                    0b:e6:22:d3:84:b0:df:6c:b1:cf:92:a9:e4:5b:63:
                    3e:21:11:82:90:c4:8c:f4:f5:6a:c4:72:13:aa:37:
                    ed:1d:5f:3c:5f:59:c5:b2:8a:53:df:d4:0c:5e:66:
                    64:86:0b:07:c5:1f:ab:d1:9b:93:24:0c:6c:00:5d:
                    0d:82:26:fc:e8:cc:95:87:67:78:bd:61:02:2d:fd:
                    bf:9e:7a:5d:57:41:48:d1:9d:88:9d:73:2e:a7:37:
                    90:10:d8:6e:ac:a3:36:18:19:19:fb:5f:05:3e:fa:
                    8e:a7:ee:19:01:4f:6a:45:1b:40:cd:18:82:7c:af:
                    8f:b6:56:2a:b1:f5:2c:60:09:b1:1e:86:51:9b:d3:
                    b3:34:2c:68:f9:23:57:b7:52:9e:ba:ad:7a:d0:27:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:66:D0:5C:C8:2A:8A:75:BF:03:7F:28:18:37:B0:D9:F5:6D:16:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/9d12cb2d-ff52-30fe-8956-3282181704de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.173.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:67:2b:be:da:b4:88:2b:57:07:00:e6:05:1e:11:33:0e:
         16:c8:89:c7:a7:54:7f:de:77:0a:ea:7d:cc:85:42:b0:15:3c:
         21:fa:05:4e:ca:d1:38:bf:09:a1:16:32:d9:11:d3:86:ce:20:
         96:60:5d:79:7b:37:9a:04:5e:9a:af:ff:70:46:13:69:02:7d:
         64:9a:e2:90:ae:f6:f1:c6:50:ba:8d:e1:5b:21:6f:f5:00:53:
         74:28:43:8d:69:d6:76:84:99:a3:a5:89:f3:c3:13:ff:d6:0b:
         38:72:4b:a2:8b:34:66:80:de:61:26:a8:7b:76:6d:1c:b3:92:
         ad:df:71:3f:72:b1:f8:9a:25:1b:da:9c:ef:8d:66:99:cb:bf:
         b0:70:ad:08:87:e4:86:7e:77:51:2c:80:93:7d:99:05:3f:1a:
         65:15:3b:5d:09:2c:06:3c:bc:aa:0b:75:f8:89:0f:59:ec:9c:
         56:ff:2b:f3:f0:12:2d:0e:01:b7:18:18:34:f2:95:e7:77:08:
         a9:0a:4f:a0:2a:16:60:2d:02:7e:54:2e:41:ce:1a:2b:83:5f:
         98:1a:ee:3a:b6:ab:dc:9c:46:d9:e4:29:d8:d5:81:7b:f4:18:
         06:b1:41:3c:0f:85:cb:55:b9:56:8b:c7:2e:95:31:7c:05:13:
         d5:a3:3c:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUn/pDiX05eLjjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUwMzFhNzAtNmVhOC00NTIxLWFjYmQtMDIxN2FkYTRj
ZjU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
YTA4YzI4ZDEtYzg1YS00NzIyLWE2ZjUtNjM5MzkyZDg1MTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqUka2uvMeBmT40uXMIyEWIlWz3mgflValnv
7IFB8QZrj+edZ/tS7gU9ZZrdMUbsw6cwg67HZ7QfrfhGtUeJpTZTg4N6prN3UpHy
WsmjmImokHPY8/yKpFyyUEJGmMtCbKipo7yHYwUL5iLThLDfbLHPkqnkW2M+IRGC
kMSM9PVqxHITqjftHV88X1nFsopT39QMXmZkhgsHxR+r0ZuTJAxsAF0Ngib86MyV
h2d4vWECLf2/nnpdV0FI0Z2InXMupzeQENhurKM2GBkZ+18FPvqOp+4ZAU9qRRtA
zRiCfK+PtlYqsfUsYAmxHoZRm9OzNCxo+SNXt1Keuq160CfRbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdm0FzIKop1vwN/KBg3sNn1bRbgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NTAz
MWE3MC02ZWE4LTQ1MjEtYWNiZC0wMjE3YWRhNGNmNTcvOWQxMmNiMmQtZmY1Mi0z
MGZlLTg5NTYtMzI4MjE4MTcwNGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTUwMzFhNzAtNmVhOC00NTIxLWFj
YmQtMDIxN2FkYTRjZjU3LzU1MDMxYTcwLTZlYTgtNDUyMS1hY2JkLTAyMTdhZGE0
Y2Y1Ny5jcmwwHwYDVR0jBBgwFoAUaUC6AnOab36XYxkORGEp6YzixzcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NTAzMWE3MC02ZWE4LTQ1MjEtYWNiZC0wMjE3
YWRhNGNmNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi61YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtVZyu+2rSIK1cHAOYFHhEzDhbIicenVH/edwrqfcyFQrAVPCH6BU7K
0Ti/CaEWMtkR04bOIJZgXXl7N5oEXpqv/3BGE2kCfWSa4pCu9vHGULqN4Vshb/UA
U3QoQ41p1naEmaOlifPDE//WCzhyS6KLNGaA3mEmqHt2bRyzkq3fcT9ysfiaJRva
nO+NZpnLv7BwrQiH5IZ+d1EsgJN9mQU/GmUVO10JLAY8vKoLdfiJD1nsnFb/K/Pw
Ei0OAbcYGDTyled3CKkKT6AqFmAtAn5ULkHOGiuDX5ga7jq2q9ycRtnkKdjVgXv0
GAaxQTwPhctVuVaLxy6VMXwFE9WjPOo=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:18:25 2026 by rpki-client