Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa
File:                     d33ddacc-232f-3cc5-a6c6-833156127de4.roa (raw, json)
Hash identifier:          dmcEc2KCW1tQwLLpt3zWw+cGo653FGvH9ZWvjr2CAxs=
Subject key identifier:   0E:36:B7:A1:A7:ED:93:5D:B1:6F:E0:F8:71:17:4D:49:31:E9:03:CF
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584CCD0C9640A62C955434C919A0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     53927
IP address blocks:        139.131.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:96:40:a6:2c:95:54:34:c9:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=fe7f4189-d3ca-4966-ab5e-87af0dc25487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:c6:bc:da:c3:80:79:e3:59:49:3e:85:a6:
                    2f:eb:aa:90:cf:fe:91:f7:ce:83:79:44:76:eb:dd:
                    23:27:7d:de:df:aa:7d:82:79:a1:da:83:b3:1b:a5:
                    d6:fd:e0:ac:ee:0b:20:4f:15:61:50:6d:3a:1e:4d:
                    b3:6d:53:80:9b:17:2b:5a:87:ca:7c:47:87:d1:f7:
                    4e:8b:34:6e:af:9c:67:a9:de:3d:a7:8d:fc:cb:1f:
                    5d:8d:6d:94:43:1b:03:ac:07:45:15:9d:68:68:eb:
                    5b:33:9a:11:37:b3:97:22:98:ec:85:75:e1:35:dc:
                    70:ab:ac:ab:e5:99:f8:59:c9:3f:0b:a0:ba:ff:50:
                    5f:da:0e:2c:f5:d6:47:95:04:6d:e9:7d:ac:65:76:
                    56:43:72:37:12:d5:f2:76:b9:16:28:eb:9d:58:0f:
                    19:70:5f:cb:0b:ed:87:9f:2a:04:20:6b:c4:bd:4c:
                    f1:2c:6a:8e:6f:33:3f:88:df:f5:68:c9:d4:9d:17:
                    d5:90:e5:6e:68:26:82:78:d2:02:15:9e:63:90:68:
                    46:15:2e:81:af:0e:07:72:bd:58:d6:9e:fc:4a:40:
                    f8:64:39:6c:20:11:f2:e2:ea:19:28:83:0a:26:65:
                    93:91:a4:9e:14:d4:9f:c7:21:dd:0f:a8:93:8a:fd:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:36:B7:A1:A7:ED:93:5D:B1:6F:E0:F8:71:17:4D:49:31:E9:03:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8d:89:5a:56:0e:cb:cd:7f:a2:93:cd:39:04:9f:60:e0:bd:
         d0:64:28:f4:c1:a8:80:a7:7d:de:42:c3:fa:a9:83:8a:a1:0f:
         39:1b:ad:4c:31:9d:e9:a6:87:82:48:b0:69:57:ff:90:d4:de:
         29:64:19:6f:a9:48:60:f0:6b:2f:e0:1e:5b:c4:36:4e:3c:1d:
         38:f1:43:d6:f7:f7:c1:06:16:54:ce:3d:a5:1b:88:1f:0f:c8:
         9c:0b:13:28:ed:91:1c:19:d8:0e:02:32:6c:d1:2b:07:ed:51:
         a1:82:92:d5:01:be:bb:5a:ae:38:c5:12:24:8b:68:9b:f6:8b:
         89:f3:23:d4:7d:ca:84:3f:b0:31:6b:a6:96:2a:cf:12:da:8e:
         23:6a:af:b2:d9:39:ea:c3:4b:54:8d:48:ef:e7:bb:e0:45:71:
         2c:4a:e2:88:e0:b0:88:5d:68:ab:50:49:2c:cd:0e:cb:92:fa:
         4d:62:b4:d1:09:88:14:95:77:6e:56:10:d2:63:83:f9:91:a2:
         9f:ef:3b:1c:26:f1:69:04:6e:57:7b:6c:93:b3:e0:9f:ac:31:
         a1:c5:a4:8b:ce:54:44:be:0b:92:b3:ee:27:07:7f:c5:9e:7b:
         a6:53:ae:19:27:1f:5f:7f:8c:4b:51:5b:dc:7d:ca:37:c9:2b:
         13:9c:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:31 2026 by rpki-client