Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/831399c8-9859-3845-bb04-afed3c7dddd6.roa
File:                     831399c8-9859-3845-bb04-afed3c7dddd6.roa (raw, json)
Hash identifier:          vmenHxxmZ9uBIc1c1YjW3j/QPF8Hupsd9CguEWr7pig=
Subject key identifier:   CE:8F:FC:7C:D4:41:CE:37:AD:46:A5:0B:0B:13:25:94:2B:37:B3:49
Certificate issuer:       /CN=e606b373-1397-4ee9-854e-85cd917bae32
Certificate serial:       010D0C9F4328584D00B24E298974D681BB433800
Authority key identifier: 4F:6B:AB:9E:74:A4:95:78:EF:98:99:BE:7E:21:1A:68:E9:EC:23:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/831399c8-9859-3845-bb04-afed3c7dddd6.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     16475
IP address blocks:        139.57.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/e606b373-1397-4ee9-854e-85cd917bae32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/e606b373-1397-4ee9-854e-85cd917bae32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:4e:29:89:74:d6:81:bb:43:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e606b373-1397-4ee9-854e-85cd917bae32
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=d1facc94-22ed-41b3-84f3-14833d368ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:cf:11:1c:bc:d2:35:b8:91:b2:8d:22:71:
                    7a:29:4f:23:78:66:ae:ef:9a:04:f1:ae:ef:df:58:
                    b4:da:02:ac:af:0c:d1:ca:21:3d:d4:31:da:67:08:
                    8b:ad:17:9d:c7:da:6e:5b:69:64:dd:a3:f9:23:ed:
                    ae:37:db:82:a1:68:e6:e3:04:46:5a:9e:e0:cf:2e:
                    16:3e:be:6a:fd:54:ee:03:11:3a:ab:d6:6f:cd:40:
                    72:3a:40:91:41:9c:7c:a5:6d:a8:0c:37:b3:32:ec:
                    53:3a:a4:68:9b:2d:82:e8:77:20:00:2a:7c:f8:18:
                    11:2f:9b:57:86:ad:84:21:d9:bd:d8:ea:d4:8b:06:
                    6c:2b:16:c1:66:ab:36:2d:4d:e7:4d:c1:1e:cb:15:
                    76:d9:34:90:8b:3d:e9:7b:aa:34:7f:1e:33:79:17:
                    d0:73:6c:2e:00:51:5c:49:84:0d:8a:55:37:e1:64:
                    c6:7a:d4:21:39:18:8c:03:13:68:29:f6:82:72:25:
                    ea:39:1c:e8:2d:0a:5a:e9:59:cb:b1:f2:d9:4a:0b:
                    40:ee:a2:5e:ef:1b:a3:c4:4c:27:d0:59:34:d1:f8:
                    27:38:90:ab:e1:73:f4:a0:ef:1e:cc:13:51:28:d8:
                    fe:27:8d:d1:55:3c:08:4b:9a:8b:ff:34:34:be:bd:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8F:FC:7C:D4:41:CE:37:AD:46:A5:0B:0B:13:25:94:2B:37:B3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/831399c8-9859-3845-bb04-afed3c7dddd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32/e606b373-1397-4ee9-854e-85cd917bae32.crl

            X509v3 Authority Key Identifier:
                keyid:4F:6B:AB:9E:74:A4:95:78:EF:98:99:BE:7E:21:1A:68:E9:EC:23:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e606b373-1397-4ee9-854e-85cd917bae32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:4b:8b:fa:9d:ab:c2:ec:a1:03:45:86:33:79:dc:5e:f3:
         7c:cf:1c:5c:f7:3c:67:da:49:87:f6:ac:50:9b:9e:7d:bb:75:
         06:f1:24:3b:f0:b4:5b:17:9c:5b:6c:e9:93:19:17:e4:6b:75:
         d1:c1:a8:1d:63:5f:ac:fb:dd:a6:a0:fe:2f:82:46:9d:ed:25:
         e5:c2:dd:84:af:a0:b8:27:42:07:03:55:cb:80:c7:c3:ee:20:
         2d:a9:f9:6d:52:ab:70:e5:86:d1:7b:21:84:73:90:ce:cc:f0:
         56:c7:2d:80:38:a3:3b:90:ec:11:0b:75:89:4c:23:54:be:84:
         db:d8:dd:46:b7:fe:14:ae:90:b8:a3:a6:38:bf:61:38:c0:79:
         e4:49:bd:63:13:a1:96:46:27:17:0e:1a:8c:63:c1:d1:8a:19:
         b4:74:5f:8f:06:94:80:ae:ab:23:30:ea:12:c3:94:5a:11:18:
         8f:81:3f:7d:5c:e7:8d:ff:53:59:51:93:98:5b:b5:cc:6a:2c:
         b3:6a:e7:2f:26:df:36:be:2a:28:c7:65:fd:e8:23:b8:78:31:
         9b:54:fa:51:be:f1:8e:94:5f:d1:22:54:41:69:d2:50:7f:68:
         4b:2f:1f:55:c8:d0:03:e4:3c:90:ef:87:65:02:2e:45:58:c4:
         15:83:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:06 2026 by rpki-client