Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d016d2a0-374d-32b7-bd21-b96f19f7369d.roa
File:                     d016d2a0-374d-32b7-bd21-b96f19f7369d.roa (raw, json)
Hash identifier:          poHgV5TOPxxl7pIPkfGVn5/1fNUBdDZZNzNcVNJF9OQ=
Subject key identifier:   97:58:FB:C1:70:76:DE:C3:02:43:2B:CF:26:2B:4A:CE:22:38:ED:F1
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584C8476D0CCA83A7086A96EEB10
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d016d2a0-374d-32b7-bd21-b96f19f7369d.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     14297
IP address blocks:        139.131.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:d0:cc:a8:3a:70:86:a9:6e:eb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=aed3c968-d430-4fc3-a631-d02aac9bdaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:e9:37:26:80:b8:6f:c3:30:aa:5f:99:d1:
                    de:7f:15:5a:d1:0e:07:6a:d7:f1:b2:8d:d6:b3:5a:
                    e7:0b:50:0e:6b:d0:d1:0b:9e:88:ec:69:c9:75:a3:
                    c5:b0:be:e6:0d:d7:03:2e:10:70:d4:ae:54:c2:a0:
                    16:c4:1f:f8:96:90:68:47:b6:79:ac:71:d4:30:fc:
                    f0:3a:58:27:36:08:80:23:99:69:fa:c1:f7:05:35:
                    42:e1:f0:54:67:ac:b6:70:32:4b:87:0e:da:48:e8:
                    1a:5d:d5:1e:5c:1b:c6:01:cd:dc:0d:60:cf:99:90:
                    f6:ec:23:a5:a4:af:df:e1:04:23:f9:3c:db:fb:bf:
                    6f:13:29:6e:cf:33:5e:05:63:ed:f8:f7:6d:56:8c:
                    69:e5:31:62:1e:dd:2d:63:bc:d6:c6:ea:b0:03:8d:
                    d6:63:9f:5a:d9:5a:c2:2d:c7:32:62:f4:d5:46:b2:
                    0b:bd:a5:3e:9e:42:0a:6c:2f:81:66:f7:a2:0f:47:
                    1b:0f:0b:91:f3:ef:f3:13:d4:a7:90:05:4d:9f:77:
                    42:dd:18:71:a9:f8:51:bb:04:a3:ba:7f:c1:0e:03:
                    c5:97:1c:4a:04:8c:da:dc:0a:bd:b6:73:3f:6a:ad:
                    1a:8a:a5:80:52:18:92:59:60:be:23:0f:b3:4c:41:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:FB:C1:70:76:DE:C3:02:43:2B:CF:26:2B:4A:CE:22:38:ED:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d016d2a0-374d-32b7-bd21-b96f19f7369d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e1:94:96:5c:df:a3:e0:ec:c7:df:f5:7e:e9:e4:e8:76:2f:
         4e:2c:a5:53:53:43:4f:7a:b8:d2:d7:a9:20:cb:05:39:a2:88:
         8e:bc:84:3c:5f:40:e0:8f:b7:ad:f2:44:87:6c:5d:cd:97:9b:
         e2:da:8f:c8:5d:84:25:1c:ad:af:0c:c4:f6:b4:6f:33:9e:08:
         8a:f7:38:5d:67:d4:91:b6:c9:54:8f:0d:db:5d:0e:18:65:d7:
         0e:4c:c6:96:4e:9b:5d:ee:fe:fe:13:d7:60:fc:0b:3b:28:09:
         f4:78:3a:f6:27:80:57:1c:6d:fb:40:5b:de:2e:b7:77:6c:90:
         5b:98:cd:cd:65:4e:25:05:2e:48:23:b8:d9:0e:1e:d4:98:be:
         75:4f:7b:a6:03:9f:99:27:07:3f:9d:16:3c:d6:71:92:ea:51:
         3c:19:ff:39:00:60:c5:1c:fb:87:1b:26:b2:01:08:86:78:3c:
         c3:ed:9c:a8:a0:a8:10:21:2d:78:3a:ec:50:84:82:86:0e:aa:
         61:e1:a0:a5:f3:fb:15:f0:50:1e:28:ed:3a:6f:1b:5b:f8:f5:
         5f:e3:76:6d:d1:76:37:6b:b9:ad:50:56:89:d8:ff:43:b3:7e:
         d7:7a:06:ab:8d:1e:e3:7b:11:06:3b:75:35:f2:3c:bb:3a:0f:
         c7:fc:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:22 2026 by rpki-client