Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa
File:                     a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa (raw, json)
Hash identifier:          PUc1EamRzHpYUIjED9MCM21qCwtRv/xCTHJaq+Yi4Yg=
Subject key identifier:   60:52:41:5E:B5:3E:C8:75:69:8F:DA:E1:7F:5B:31:D6:48:DA:84:8A
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584EA8EC3F186860D2BD7B184E00
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     399490
IP address blocks:        139.104.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3f:18:68:60:d2:bd:7b:18:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=79dcdc05-10dd-424e-a989-234dbf57b549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d7:b1:29:ac:64:f8:5a:d4:01:0a:a9:4c:35:
                    87:14:c4:d4:f0:91:f1:55:4a:0d:0b:54:b0:24:b0:
                    64:20:49:a7:fb:04:4a:c0:09:fc:1d:e2:a5:8c:28:
                    15:a3:09:9c:e4:8e:ed:38:61:e8:ef:6b:eb:0f:fb:
                    da:8e:8d:04:4f:3b:d7:0e:a3:2f:26:5d:15:7e:fe:
                    79:64:d9:b8:51:de:8f:7f:e4:08:1b:48:e5:32:33:
                    bb:41:35:3a:c3:28:b1:76:3f:74:9c:21:99:49:57:
                    61:58:2c:7b:1a:ae:23:27:03:19:9c:3b:2a:13:79:
                    dd:02:1f:16:e0:38:01:71:84:2e:fd:01:8f:e9:ce:
                    57:23:2d:65:49:e6:4f:b8:3e:80:84:b2:85:a1:a3:
                    c1:36:f6:50:53:25:87:84:59:7d:89:fc:a8:fd:a6:
                    e5:b8:51:ad:82:88:2b:9e:9f:28:eb:b0:77:63:2d:
                    3e:58:96:f7:f7:32:9d:fb:51:f6:39:80:f9:33:50:
                    74:50:e0:25:45:38:24:83:02:a9:f9:e0:2e:21:df:
                    f1:51:6c:6b:b4:6d:5c:ce:78:19:69:c2:ee:33:51:
                    73:f0:f2:d9:11:67:ea:b0:81:f3:13:ae:02:14:33:
                    35:d5:e2:43:c8:b1:83:41:4e:f2:18:45:74:35:62:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:41:5E:B5:3E:C8:75:69:8F:DA:E1:7F:5B:31:D6:48:DA:84:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:cb:06:92:cf:82:be:c4:0a:6e:b4:dd:9b:5f:76:01:6d:
         d9:72:f0:97:e8:3f:b7:29:99:01:8e:dd:dc:18:1f:6b:16:a6:
         21:f3:55:19:3a:3d:1f:45:0b:73:90:19:cf:fb:e6:b6:5a:cb:
         f7:91:25:86:35:96:73:c3:f1:14:de:a0:62:b6:11:a1:57:1e:
         0b:b7:ed:e4:5e:a6:80:f5:b8:d1:64:14:22:97:cd:5c:28:55:
         04:e3:a6:3b:39:a4:bc:2c:40:78:08:88:d4:5d:6b:63:0f:33:
         03:c0:98:f2:45:58:c1:19:df:bc:a5:fe:03:04:aa:ce:1d:fb:
         40:ad:34:88:89:82:bd:45:00:ed:f0:80:a0:ff:06:c3:33:0c:
         f1:8c:5f:8f:f0:34:5d:7f:bf:ca:d3:ce:c9:cb:56:3e:6f:e7:
         fc:1c:43:7f:42:a9:ff:a1:00:8f:bf:a0:8f:03:85:f8:9c:23:
         af:de:d7:32:90:16:24:8a:04:10:d9:01:96:2b:3c:89:7e:61:
         22:34:b3:bc:ee:c0:64:d4:b1:be:9d:d3:06:d2:90:17:72:83:
         5a:de:71:04:e5:9c:0d:d1:2c:e0:bf:b2:8d:8e:e2:72:f5:04:
         7e:e8:1c:a2:43:70:2d:39:ab:69:78:aa:c6:eb:de:15:e2:7b:
         83:87:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:04:53 2026 by rpki-client