Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/56d1460e-74a5-38f4-bcda-1e45f2a66969.roa
File:                     56d1460e-74a5-38f4-bcda-1e45f2a66969.roa (raw, json)
Hash identifier:          vhxmTAf4CrG19+HcfC0XRHTBcuNojvxRAN59E+JpXtc=
Subject key identifier:   C7:5E:2E:83:17:E3:8F:FA:0C:35:68:A1:7D:48:E3:2F:B2:1C:43:EA
Certificate issuer:       /CN=21536be2-b559-4b5e-9749-413cb6af0bc1
Certificate serial:       010D0C9F4328584DD1F5BC1A3924305CC52DCC80
Authority key identifier: D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/56d1460e-74a5-38f4-bcda-1e45f2a66969.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        139.84.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:bc:1a:39:24:30:5c:c5:2d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21536be2-b559-4b5e-9749-413cb6af0bc1
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=38d67647-46a7-4531-b3ba-b8e6cd0be0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:4c:bb:ed:95:35:17:c7:8b:84:0e:80:ab:
                    7e:85:e3:d7:5a:77:4d:fc:05:21:31:b2:c2:d0:9b:
                    c2:39:1e:6c:4b:d4:23:a6:71:75:8d:bb:9c:0c:7d:
                    06:f2:cf:81:6f:06:49:f1:12:70:05:57:41:fd:5d:
                    70:20:8d:58:1a:5c:a2:09:2b:86:af:be:61:36:2f:
                    a0:ad:ab:bb:26:77:4a:07:5c:ba:6a:ad:4f:d3:e0:
                    0d:26:ba:50:b9:34:ec:ae:e4:7e:66:55:53:5b:32:
                    94:7d:0f:2f:c8:0b:b1:56:65:74:ec:f8:34:36:aa:
                    ca:03:12:9c:dd:7c:a4:ae:3e:1e:34:26:6e:6f:c0:
                    fe:74:8a:c3:4e:1d:3a:ea:05:13:9d:ba:cb:9b:7b:
                    59:d7:62:a7:88:76:5a:a8:69:01:e2:ea:bf:c9:63:
                    c4:2a:d5:f5:47:54:61:3d:36:72:d4:ce:05:61:bc:
                    d9:0b:f3:66:0c:9e:11:99:7e:a3:e6:47:a2:1e:86:
                    0b:22:3f:e8:21:ad:36:a1:b1:d0:6c:86:57:8f:1b:
                    72:2f:63:ad:fc:c0:1f:9a:02:85:19:bd:34:38:79:
                    da:32:09:54:95:af:39:61:5b:3d:ee:d0:f5:82:66:
                    39:cd:f6:03:32:b4:6d:9c:82:e3:68:56:62:d2:51:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5E:2E:83:17:E3:8F:FA:0C:35:68:A1:7D:48:E3:2F:B2:1C:43:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/56d1460e-74a5-38f4-bcda-1e45f2a66969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.84.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:3a:1a:e7:a5:12:d6:3d:a3:36:30:fd:5d:e2:f7:7b:0f:
         6a:dc:0a:20:c3:6b:6d:90:11:b3:6d:de:71:17:b9:15:fb:82:
         d4:da:db:bb:a2:a5:7a:e4:68:16:1b:f4:51:01:84:24:72:35:
         15:0d:83:27:79:c3:da:ec:c6:1b:50:7f:91:a7:23:23:3c:64:
         d7:2c:23:14:e8:39:26:c9:cb:ab:b3:1b:71:9c:ee:56:d6:e2:
         9e:e9:05:32:e3:d4:70:07:36:9a:d8:0f:95:e9:a2:38:5e:f0:
         58:bf:fa:37:db:14:7d:09:7c:54:2c:9e:6e:ca:b8:e7:2a:3c:
         05:2b:1a:43:90:3d:45:3a:6d:fe:09:5a:51:37:45:28:25:fa:
         c8:e7:e9:63:2e:b3:14:21:f7:19:45:75:1b:a4:91:dd:82:b7:
         ea:3c:dc:8e:f4:f0:8f:fb:26:84:ba:e0:83:2f:4f:93:9b:50:
         cd:fc:07:4f:52:07:d1:cb:8c:a5:47:80:a1:8b:dc:b2:9a:7f:
         14:f1:38:d6:20:ca:cc:17:e7:48:ed:c5:df:0f:56:c8:43:ab:
         f9:fa:c4:20:5a:1b:75:0a:5c:e4:93:60:15:76:fe:8f:9b:14:
         7a:8f:6f:bb:05:c6:03:85:4f:98:05:9b:5c:34:1c:bb:f3:9c:
         45:0f:b7:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9bwaOSQwXMUtzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjE1MzZiZTItYjU1OS00YjVlLTk3NDktNDEzY2I2YWYw
YmMxMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk
MzhkNjc2NDctNDZhNy00NTMxLWIzYmEtYjhlNmNkMGJlMGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqRMu+2VNRfHi4QOgKt+hePXWndN/AUhMbLC
0JvCOR5sS9QjpnF1jbucDH0G8s+BbwZJ8RJwBVdB/V1wII1YGlyiCSuGr75hNi+g
rau7JndKB1y6aq1P0+ANJrpQuTTsruR+ZlVTWzKUfQ8vyAuxVmV07Pg0NqrKAxKc
3Xykrj4eNCZub8D+dIrDTh066gUTnbrLm3tZ12KniHZaqGkB4uq/yWPEKtX1R1Rh
PTZy1M4FYbzZC/NmDJ4RmX6j5keiHoYLIj/oIa02obHQbIZXjxtyL2Ot/MAfmgKF
Gb00OHnaMglUla85YVs97tD1gmY5zfYDMrRtnILjaFZi0lFWvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdeLoMX44/6DDVooX1I4y+yHEPqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMTUz
NmJlMi1iNTU5LTRiNWUtOTc0OS00MTNjYjZhZjBiYzEvNTZkMTQ2MGUtNzRhNS0z
OGY0LWJjZGEtMWU0NWYyYTY2OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjE1MzZiZTItYjU1OS00YjVlLTk3
NDktNDEzY2I2YWYwYmMxLzIxNTM2YmUyLWI1NTktNGI1ZS05NzQ5LTQxM2NiNmFm
MGJjMS5jcmwwHwYDVR0jBBgwFoAU2W+D3+NNa/YJSIZIxzQMXWl0aTAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMTUzNmJlMi1iNTU5LTRiNWUtOTc0OS00MTNj
YjZhZjBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi1QOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3dOhrnpRLWPaM2MP1d4vd7D2rcCiDDa22QEbNt3nEXuRX7gtTa27ui
pXrkaBYb9FEBhCRyNRUNgyd5w9rsxhtQf5GnIyM8ZNcsIxToOSbJy6uzG3Gc7lbW
4p7pBTLj1HAHNprYD5Xpojhe8Fi/+jfbFH0JfFQsnm7KuOcqPAUrGkOQPUU6bf4J
WlE3RSgl+sjn6WMusxQh9xlFdRukkd2Ct+o83I708I/7JoS64IMvT5ObUM38B09S
B9HLjKVHgKGL3LKafxTxONYgyswX50jtxd8PVshDq/n6xCBaG3UKXOSTYBV2/o+b
FHqPb7sFxgOFT5gFm1w0HLvznEUPtxs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:37 2026 by rpki-client