Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/e86c7040-6f8e-3422-91ca-31eaa3bbe645.roa
File:                     e86c7040-6f8e-3422-91ca-31eaa3bbe645.roa (raw, json)
Hash identifier:          M0/AvYx4nxZoAbYJmyL4/sqYYuRzsNFGU7BATh+2IZQ=
Subject key identifier:   95:4E:40:9A:6F:5B:28:E7:19:77:B6:CF:82:78:BA:C1:5E:A9:2F:42
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F5E62B070AF5B49D13F959F80
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/e86c7040-6f8e-3422-91ca-31eaa3bbe645.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     2685
IP address blocks:        32.139.239.0/24 maxlen: 24
                          198.133.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b0:70:af:5b:49:d1:3f:95:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=84d5d26b-0148-4da3-8966-0dddde0520c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:b8:54:c5:5c:b0:cb:c8:a4:c0:a8:77:ff:
                    ef:23:c2:2f:2c:7f:18:f6:b0:09:8d:8c:6c:f4:0e:
                    d0:30:d3:ab:e5:e0:70:9c:41:45:5b:40:c2:82:b4:
                    c5:1a:4b:ed:35:c1:8e:80:20:4f:a2:53:4f:52:a4:
                    3a:25:34:61:02:44:c2:4f:00:7a:08:59:4f:fc:f5:
                    92:b1:bd:8b:ec:a4:d2:7b:59:21:18:7e:8d:fa:b1:
                    a2:5f:ce:67:33:a2:01:a6:c3:5b:f6:63:07:da:67:
                    60:1e:01:b3:3e:e3:fc:ca:c3:3f:f5:60:8f:09:a0:
                    29:ac:2d:44:a7:6f:f9:29:40:1a:9d:52:0b:e2:2b:
                    15:00:f6:cb:9a:d4:26:f0:48:ee:8b:4d:b5:c0:ef:
                    a0:c2:fd:43:9e:38:d1:3f:c9:4f:79:8b:a3:d5:8b:
                    7c:76:79:0b:c2:62:09:00:f9:3a:2b:a2:ed:66:0c:
                    5d:2e:1b:df:7c:61:70:59:33:48:84:a2:eb:17:d8:
                    af:02:ce:20:7f:33:50:f6:86:a4:6a:f9:e7:e9:4d:
                    41:42:c4:72:aa:16:b1:a1:16:ff:91:e8:90:f0:8f:
                    ab:68:cb:ae:47:c9:d8:8a:5b:b7:c4:32:d6:bd:73:
                    67:93:1f:2d:90:37:f1:11:42:37:24:f6:3f:68:f2:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4E:40:9A:6F:5B:28:E7:19:77:B6:CF:82:78:BA:C1:5E:A9:2F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/e86c7040-6f8e-3422-91ca-31eaa3bbe645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.139.239.0/24
                  198.133.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:16:1f:f6:39:be:8e:70:8b:74:7e:bb:d1:46:98:57:7d:
         41:9d:27:ad:ad:1d:4b:96:06:64:76:31:08:0a:20:cf:c9:6b:
         a8:02:8d:12:3b:db:20:a8:29:4b:52:8d:1d:9a:bf:24:3c:eb:
         51:50:c5:d2:cc:e3:e6:64:f5:5e:6f:29:11:dd:51:20:32:e6:
         e8:f4:36:d4:59:2d:8a:3c:e4:d2:75:e9:f0:30:ef:40:17:24:
         b4:13:46:d7:3a:37:14:1e:79:51:62:a6:7a:44:14:59:fe:51:
         9e:92:e6:bd:9d:49:fe:8f:ce:2d:2e:96:7f:10:09:ee:0f:2a:
         54:8e:8b:04:67:51:9a:71:3e:66:98:cc:7f:a9:84:f5:0b:a7:
         cb:69:9c:df:1e:07:0c:a0:26:db:8f:11:20:57:db:93:44:7f:
         e8:99:14:28:e3:70:5a:d4:25:07:6e:7b:b6:e7:eb:35:c9:6a:
         81:a0:dd:3a:f9:5c:c8:4a:fe:46:6f:67:67:ea:6a:28:42:33:
         ce:00:91:70:2b:7d:34:f4:47:b9:73:5e:46:cc:70:63:75:c4:
         6e:de:f3:3c:40:86:46:fb:17:6a:43:59:98:a9:2f:45:1a:ac:
         bb:34:ac:52:87:8c:2e:ab:76:fa:fb:d5:b5:f9:0b:84:ee:8d:
         98:4b:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:36:59 2026 by rpki-client