Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dc4f9077-040b-3e21-9f21-41fa00bdc246.roa
File:                     dc4f9077-040b-3e21-9f21-41fa00bdc246.roa (raw, json)
Hash identifier:          qzjhHkDBjcd0mnoQtdCiLJyCrIJzCx3z55FeHGJS2Fg=
Subject key identifier:   E5:9A:35:76:AE:CF:D4:A0:06:F3:3F:65:37:B2:DE:77:71:AC:84:D4
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D896050EFCC49F5B9C4150200
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dc4f9077-040b-3e21-9f21-41fa00bdc246.roa
Signing time:             Fri 17 Apr 2026 13:01:23 +0000
ROA not before:           Fri 17 Apr 2026 13:01:23 +0000
ROA not after:            Thu 16 Jul 2026 13:01:23 +0000
asID:                     10753
IP address blocks:        139.177.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:60:50:ef:cc:49:f5:b9:c4:15:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 17 13:01:23 2026 GMT
            Not After : Jul 16 13:01:23 2026 GMT
        Subject: CN=7ddd0814-9b93-4782-99ab-b0709f1fa9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:e8:00:20:ce:a3:07:3d:84:65:47:ce:28:
                    c1:80:34:84:70:06:8f:7b:26:eb:77:51:cd:45:70:
                    d3:50:94:2a:cb:01:e0:10:ba:08:f0:64:ad:78:f0:
                    d1:e1:ac:a7:24:67:e8:ec:3d:3f:e3:9e:a7:8f:be:
                    f3:ed:2d:60:e9:49:b2:ab:d7:80:02:55:78:c1:c7:
                    45:b5:91:d9:08:e8:6f:2a:cd:24:67:64:c9:34:fe:
                    37:a7:c2:66:49:8b:d0:c0:78:c2:bb:74:d6:fa:17:
                    ad:00:10:61:cd:39:37:38:f4:73:1d:39:1e:38:37:
                    a0:57:5a:dc:e2:7c:9e:f4:fb:34:84:54:62:a8:99:
                    80:b1:e5:f5:aa:ba:52:fa:cc:d8:b4:93:aa:5f:b3:
                    5c:59:27:ed:b7:c4:29:d5:c5:cc:7d:ef:62:43:a6:
                    33:75:18:03:12:fc:32:58:11:ba:6b:81:39:d0:1a:
                    06:93:69:82:e7:bf:38:fd:59:f0:71:5c:e9:83:93:
                    eb:77:fb:ab:ba:05:c1:c5:a1:9c:f0:4b:fe:d1:64:
                    5d:6f:44:65:76:91:6d:18:37:83:1a:43:b2:4f:f2:
                    af:c0:f2:84:27:1e:3c:a7:e6:0b:39:a2:74:46:23:
                    c6:60:3a:fe:21:5b:20:67:2f:f9:74:b9:77:fe:e0:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9A:35:76:AE:CF:D4:A0:06:F3:3F:65:37:B2:DE:77:71:AC:84:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dc4f9077-040b-3e21-9f21-41fa00bdc246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:41:d5:26:d8:a2:b8:e6:44:b0:79:5f:49:06:f0:00:71:43:
         99:58:16:0e:a6:be:7a:97:25:93:64:f7:cd:63:f8:35:31:51:
         46:43:d8:e3:8e:67:99:c8:39:a5:d4:aa:e0:8c:73:a4:57:b7:
         58:5a:6d:d5:8a:e6:87:34:db:b9:47:25:8f:9e:c6:dd:63:7c:
         8f:aa:d3:41:a9:91:57:66:90:4c:39:3b:71:ea:93:6b:b2:d7:
         c8:d2:dc:56:12:07:9a:00:f8:09:e7:be:54:8d:80:fd:ae:8f:
         e6:d6:58:d9:35:11:d3:c9:51:db:cf:1f:cc:f5:15:54:78:d1:
         df:9d:ea:4d:27:52:a6:21:f8:37:ac:26:7f:b0:d5:4f:33:96:
         87:33:20:25:1f:6b:f1:6a:a7:12:31:e8:97:bf:71:2a:c4:08:
         34:43:ec:a9:d0:25:2e:e9:f0:bd:8e:c4:e6:21:fc:f4:d3:a2:
         a8:25:b9:9f:f8:4b:4d:ed:26:05:b2:82:4a:2f:bf:49:8e:4e:
         72:fe:1c:25:8a:f1:0b:9c:5a:7e:06:47:61:c2:f8:8b:1c:6e:
         ab:82:9d:f6:5d:9d:db:32:da:30:38:60:b3:46:df:d4:1f:df:
         cb:30:22:42:ab:e5:ce:f0:27:e3:b8:a7:c7:01:57:ee:9f:e9:
         60:9c:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:30 2026 by rpki-client