Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa
File:                     e0379946-4a18-3a0c-a538-1fa6a4f52463.roa (raw, json)
Hash identifier:          FqKOjIV3vjCPS36eWIdAMffdA0kmkjGFMQxiK14l2qI=
Subject key identifier:   8A:EB:72:5B:F9:C8:D6:3F:32:7A:FE:25:15:75:79:1B:02:83:D9:65
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584C8476D116ECEC1A61747C6610
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     14297
IP address blocks:        139.131.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:d1:16:ec:ec:1a:61:74:7c:66:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=be3c6291-8fa2-4f1f-916d-0b2f341d2b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:cd:97:16:99:4e:55:57:18:dd:79:2d:b6:
                    fc:c4:f7:76:be:6c:b0:a2:c6:45:82:99:c7:09:56:
                    9e:44:d6:02:6e:53:33:5c:fd:a0:5e:30:a5:ad:a2:
                    44:56:0e:a8:7c:ce:28:79:59:15:21:2e:2f:57:6e:
                    38:e8:6b:cf:12:3b:60:2a:dd:7f:c9:33:a1:7b:15:
                    18:5f:ae:bf:a3:95:f0:11:84:96:0f:89:fd:0b:df:
                    9d:8b:b3:21:ac:8c:cc:ae:66:22:8c:bb:94:11:8d:
                    09:48:da:6d:2e:f4:91:1a:69:58:a9:37:e3:ea:15:
                    cc:b5:aa:7e:de:1a:0f:45:2d:49:f1:92:bc:73:be:
                    8c:86:6e:d4:06:f3:cf:84:cd:57:87:ac:61:89:6f:
                    4a:d8:f8:a6:62:02:ca:89:07:82:23:fe:1e:3d:b6:
                    ac:08:41:df:8e:43:75:c8:99:e8:b0:83:67:42:94:
                    14:84:5e:a0:81:7b:cd:a6:d2:58:70:f4:91:74:fb:
                    ad:5c:ad:f6:f1:00:a6:e4:06:94:e1:63:86:88:c9:
                    cf:1e:cd:59:33:70:bb:9a:74:d0:4c:85:42:72:64:
                    9c:1b:8a:47:e9:dd:53:05:f8:37:70:b4:53:01:4c:
                    83:94:4c:3c:7e:b9:cb:2d:04:e5:98:e9:50:cf:db:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:72:5B:F9:C8:D6:3F:32:7A:FE:25:15:75:79:1B:02:83:D9:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:53:e7:49:ea:56:3d:5b:90:22:1e:f5:f2:5c:6b:fd:fe:13:
         f9:2f:83:fc:89:b7:1f:72:fa:f9:60:75:b3:8e:b1:29:24:fb:
         c3:69:ee:1f:f4:4d:89:fc:f2:5c:0a:3d:70:23:41:94:02:5f:
         0a:10:4d:de:a4:92:6a:1e:be:78:31:2b:dc:14:f6:ea:1e:68:
         1e:7c:67:4a:8c:f2:47:81:d7:fc:c0:d3:08:75:81:80:db:38:
         ec:25:e9:a2:4e:19:fa:14:63:ee:5a:e0:60:9e:ec:9b:11:ac:
         75:b9:6b:a2:20:93:32:0b:57:29:4e:0c:91:6e:03:ba:bd:cf:
         67:64:6c:a7:ff:5e:8a:61:87:bb:c1:03:09:18:ec:11:15:2b:
         1e:9e:50:a6:e5:f2:5f:a7:dd:8c:fc:15:40:8e:a4:6a:11:59:
         25:61:c8:f9:9b:46:f9:f9:05:d5:fc:ae:b8:3f:88:a4:aa:33:
         63:68:a9:29:14:63:e9:f5:73:b7:fe:bd:18:2c:5b:8f:96:01:
         13:c3:cc:36:ee:71:c2:24:ce:ea:ff:38:00:3d:ab:69:68:1e:
         0f:74:ca:23:e7:4e:a4:55:20:7d:2e:9a:ed:ee:d8:23:55:f9:
         0b:49:09:db:c9:ce:42:e2:94:78:dd:c0:44:b9:68:6a:17:88:
         9f:70:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:24 2026 by rpki-client