Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa
File:                     f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa (raw, json)
Hash identifier:          G2gZhXllaz32xkA3HAh8fRzRT3jTWItlIoku7ToFBfg=
Subject key identifier:   A6:B6:63:58:E0:70:A7:3B:67:AD:44:AA:59:65:B0:BE:B7:E0:A7:A2
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584CAE571643728F56975BA59A00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     53297
IP address blocks:        139.131.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:16:43:72:8f:56:97:5b:a5:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=fb7f0f35-1a2f-4b92-a312-a33c0d28b007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:dc:84:f1:86:e7:79:bf:39:fe:df:bd:f2:
                    e0:03:68:d1:b4:48:8b:7d:17:d7:46:83:73:ba:04:
                    be:e6:5e:82:e5:60:2f:c3:e1:82:33:ab:44:1b:1e:
                    67:22:0c:84:84:c2:10:6f:6c:c3:7e:35:6b:7f:6e:
                    e9:dd:60:ee:6c:23:5a:52:b6:32:32:74:65:e0:b7:
                    41:67:fc:0e:b8:12:4f:26:fd:ff:15:ac:0e:e7:23:
                    f0:e0:6c:80:97:6c:97:b6:9d:9c:ec:3c:e7:cf:6f:
                    b9:7c:e5:8f:9a:8a:f7:7d:7f:73:51:19:49:ee:7d:
                    82:41:89:32:df:7e:d4:58:3c:b5:8d:3a:41:ee:11:
                    8b:1b:2f:13:fe:f8:28:25:2a:7a:db:ca:59:8f:0f:
                    0d:60:8c:5a:b6:3d:e6:06:88:dd:df:e4:8f:25:23:
                    6c:d5:d2:80:2d:3e:df:d5:22:74:4b:39:e1:cc:b1:
                    31:9b:b4:7b:a3:f8:98:e7:88:09:36:19:ce:bd:c2:
                    65:d8:3a:84:e1:95:5c:91:82:46:e5:03:7f:76:43:
                    99:81:0a:84:da:d9:ff:05:fd:a0:b4:40:0b:16:cd:
                    5d:f8:66:da:ef:11:06:a4:7e:3d:e6:e1:74:45:05:
                    7a:af:c4:23:74:a4:1b:d6:ee:db:3a:29:0b:b0:59:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:63:58:E0:70:A7:3B:67:AD:44:AA:59:65:B0:BE:B7:E0:A7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:84:af:47:58:ff:c2:31:e6:6b:ae:8e:94:22:ef:e1:d1:46:
         73:54:50:92:51:30:8d:bb:68:64:8e:dd:45:c6:3a:b0:51:ee:
         4f:ad:8f:9a:18:a9:8c:87:e0:c0:cd:d9:4f:63:ba:22:21:7d:
         6e:24:6f:3a:de:36:1e:ca:43:f7:9b:6a:10:07:db:47:37:21:
         f6:15:e2:76:10:4f:85:7e:aa:0d:40:35:8c:0b:5c:47:3f:df:
         36:0f:d5:1e:48:03:4d:1d:3e:4b:cf:95:47:dc:fe:85:c6:e8:
         70:f5:ee:d1:96:6a:a1:de:68:ad:51:ea:25:c0:0d:e6:f9:09:
         fd:5d:fe:08:db:15:f3:ad:32:c5:ec:b2:05:06:e7:8c:ee:dd:
         7a:93:87:dd:43:40:b6:63:44:04:e4:34:49:e2:0a:47:b8:e6:
         8d:fd:f4:7b:59:7a:21:ed:51:9e:c9:1e:52:55:85:2d:9a:1a:
         50:66:65:1d:31:5b:2c:67:9d:24:d7:46:29:0d:d5:30:57:ba:
         18:32:8e:60:b6:fb:06:87:a6:5a:f5:f0:4d:72:4d:59:f6:5b:
         4c:2f:cb:15:e8:94:26:b5:c6:d5:1e:75:3b:49:43:37:0b:4d:
         06:66:56:e5:be:d2:2b:1f:6f:4e:c9:f6:af:40:8c:00:96:c3:
         b5:78:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:15 2026 by rpki-client