Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b1be7f76-5cd9-3be0-9fa7-7f7a90921506.roa
File:                     b1be7f76-5cd9-3be0-9fa7-7f7a90921506.roa (raw, json)
Hash identifier:          xYganb9nTy9Xj4D7r+QoCEjWs4N8vLy+6vK8JSpF5ZQ=
Subject key identifier:   A7:91:FB:B8:C7:EE:93:C2:CB:73:37:5D:ED:7A:57:DB:63:90:33:6C
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F216812E8E1DFD6033B6B98E0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b1be7f76-5cd9-3be0-9fa7-7f7a90921506.roa
Signing time:             Thu 10 Sep 2026 16:46:49 +0000
ROA not before:           Thu 10 Sep 2026 16:46:49 +0000
ROA not after:            Wed 09 Dec 2026 17:46:49 +0000
asID:                     399839
IP address blocks:        139.177.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:68:12:e8:e1:df:d6:03:3b:6b:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 10 16:46:49 2026 GMT
            Not After : Dec  9 17:46:49 2026 GMT
        Subject: CN=a8f3372a-bbab-46e8-921f-7d60bb55d88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:33:b5:66:60:c3:f8:fe:e6:17:10:d3:ae:
                    a1:cf:69:b3:68:e9:f9:4d:e0:2f:58:89:50:f2:68:
                    d7:9b:03:f4:28:7a:55:dd:99:89:8b:34:4e:1e:28:
                    9a:ed:a6:fa:f5:f0:11:c1:bc:f5:ff:bc:22:20:25:
                    cd:ae:1e:8c:fc:5e:1e:d0:a5:6a:47:32:12:2f:e0:
                    23:4a:34:30:0e:ff:e1:f5:7e:7a:b9:56:c4:fc:6a:
                    44:d4:df:02:50:18:7c:f2:0b:39:29:e3:27:b9:c8:
                    33:dd:16:ac:8b:b1:f1:9a:81:50:04:f3:0a:5d:1a:
                    24:d1:ef:a0:dc:c6:03:d0:91:e1:9d:65:83:c6:a5:
                    03:1f:f2:7b:c6:5a:d6:2d:5c:aa:b5:0d:11:89:d9:
                    90:e5:1d:87:2c:32:97:ea:9a:18:4d:1f:d9:8d:fc:
                    05:bf:b1:7a:2e:17:75:e4:b4:dd:ee:f7:d8:28:0a:
                    ed:97:bf:30:c3:ef:2e:73:af:d8:e0:3e:bb:95:62:
                    1c:1f:52:ae:0d:6a:fe:80:e3:5b:ed:0f:a3:c9:90:
                    a6:b0:be:04:70:da:53:fa:57:57:52:a7:7a:e8:b8:
                    7c:5d:75:d9:2a:e2:40:a9:ab:4d:a0:b0:e7:38:95:
                    d4:bf:78:73:52:a8:36:50:24:14:1f:dd:bc:6e:c4:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:91:FB:B8:C7:EE:93:C2:CB:73:37:5D:ED:7A:57:DB:63:90:33:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b1be7f76-5cd9-3be0-9fa7-7f7a90921506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:61:4c:ce:48:f7:66:30:aa:4c:8c:2a:b5:e8:5b:e2:5e:6a:
         f5:c0:89:75:9e:77:e3:0b:4d:b2:e9:e5:38:37:37:ac:9f:c5:
         8b:22:39:8d:95:7a:14:68:99:84:19:6c:95:ee:37:1c:0a:e8:
         d0:36:a1:11:1c:cc:2b:9e:42:f2:4b:97:4d:20:e8:be:29:dc:
         48:06:95:88:5c:d3:b0:67:2b:c4:c2:b7:77:84:04:48:22:79:
         fb:12:48:c1:45:b6:b1:ad:e7:41:12:3e:bd:8b:d6:a1:ae:88:
         81:e3:c6:90:76:ae:80:73:35:32:bf:e1:41:52:28:1c:3b:de:
         82:b1:fd:fa:7f:e2:ea:19:e2:43:5c:69:75:34:98:bf:ff:0c:
         2c:49:3c:2e:ba:9b:19:ef:a5:e5:57:b8:3e:db:5a:5b:62:c5:
         f5:b1:d9:23:ff:fd:d3:f0:a0:db:c5:f2:fe:0e:90:3a:d6:29:
         99:d3:19:da:fe:95:56:ac:e4:30:06:51:74:4e:5b:5f:6a:3d:
         89:33:13:db:c4:51:d4:ab:e7:38:23:7c:6c:d1:38:c0:22:e7:
         11:aa:fc:b1:27:d7:5f:62:cb:fb:be:af:98:31:4d:0c:e3:51:
         38:8a:c4:d5:07:74:16:f6:d1:e7:86:bd:5c:9c:fe:fa:ef:88:
         e2:e2:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:22 2026 by rpki-client