Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa
File:                     4d2e1153-33f9-3d70-a2d1-dc9545320444.roa (raw, json)
Hash identifier:          slTD6yI63P6lW0irCm0BztGQLB410b0ABDU2DKpAtTc=
Subject key identifier:   23:12:D3:E4:DE:44:BC:6E:2B:F2:0F:71:4E:16:27:21:AB:E3:30:F5
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584F89A8595555C5D29C0A3F8D20
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     14297
IP address blocks:        139.131.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:59:55:55:c5:d2:9c:0a:3f:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=9d952066-b40e-491c-9a35-3489ef449ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:eb:80:53:05:3b:9e:33:87:c2:48:7c:c7:9e:
                    a6:32:98:77:f5:71:10:3d:39:f6:aa:d8:90:a9:5f:
                    b5:71:b8:ae:87:aa:b1:cc:43:e3:a6:f6:c9:2f:56:
                    ba:48:e8:e0:25:cc:6d:78:b0:b0:cf:79:d1:7b:5f:
                    1b:3f:1f:f7:bf:57:14:9a:8a:31:44:9d:62:50:55:
                    ec:67:b7:a8:0e:d6:3d:a0:53:43:17:15:8c:54:0e:
                    53:4f:42:b1:b4:07:1e:d0:da:e1:80:0c:23:68:48:
                    bf:2d:cd:ed:93:5e:64:89:22:9f:39:f3:36:e3:4d:
                    bb:9c:b0:cc:b2:1f:14:34:d2:a5:75:30:dd:47:4c:
                    2d:db:35:c0:6c:0b:47:bc:dd:0e:e9:06:ea:25:9b:
                    cf:39:dc:74:99:6f:d4:31:9a:4f:ed:4b:93:2f:fe:
                    50:3b:34:42:83:37:c3:ef:d6:2d:9a:c4:dc:15:2a:
                    5c:52:e5:e7:84:07:94:1c:b4:e3:96:e5:53:20:dd:
                    f7:e6:22:5b:33:b9:ba:f3:59:b5:a2:1c:c5:b8:d1:
                    b8:96:ab:e4:0c:bf:c0:28:6f:18:de:1a:08:9c:83:
                    73:42:c2:40:32:d9:9c:59:dd:80:7f:63:73:90:2e:
                    13:c8:69:af:4b:63:67:10:0f:f6:ae:01:14:ac:bd:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:12:D3:E4:DE:44:BC:6E:2B:F2:0F:71:4E:16:27:21:AB:E3:30:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7a:ff:4a:d4:f6:bc:15:aa:c8:51:46:6f:7a:d2:00:a1:f1:
         89:15:9f:09:96:f4:8e:da:d9:58:d0:86:74:48:e1:5b:4e:72:
         ad:49:e6:42:37:85:c3:55:72:7b:77:4f:7e:1f:c3:9a:1f:d9:
         ab:97:f0:4f:13:9a:65:3e:49:43:b3:28:ed:bc:6c:1f:18:6c:
         25:cb:f3:65:d8:59:77:b4:47:d6:f7:0d:14:47:ed:42:a5:a0:
         10:4a:57:aa:59:44:30:cc:62:55:f7:e3:f4:98:c2:c9:f9:84:
         2d:97:7d:52:84:ec:88:14:05:2e:17:83:29:69:22:f1:c3:fa:
         1e:df:73:01:2c:ca:be:57:b7:dd:bb:b8:d3:50:17:d3:f3:88:
         a4:dd:94:98:db:e4:88:2b:ac:01:af:bb:e6:34:20:f5:ac:ed:
         75:30:cc:f7:d3:93:59:77:74:9c:3a:ed:9e:9b:c4:07:c0:94:
         58:02:b3:0c:8f:3a:ef:db:ae:bc:80:93:cf:54:9d:7a:58:cd:
         97:80:dd:6e:d6:86:28:0b:fd:39:71:9d:6f:31:20:35:e3:6f:
         d2:b3:9a:39:3d:d7:d8:07:f4:5b:c3:07:57:3f:26:24:07:80:
         aa:08:09:d5:02:fa:8a:d2:60:9d:6f:d7:f3:5e:b3:31:5c:21:
         24:87:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 16:26:55 2026 by rpki-client