Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/91378d63-a95d-3670-a5df-9ecffe86cc19.roa
File:                     91378d63-a95d-3670-a5df-9ecffe86cc19.roa (raw, json)
Hash identifier:          FE1oCskdQT4Sc3uE3ZBmpbjFJCjyUVCyka26bKoW754=
Subject key identifier:   C6:AC:BA:A5:12:CA:F6:B2:5B:29:E7:CB:CF:A2:E6:01:96:16:12:B1
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584EA787D89A3F11677CC98A5A40
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/91378d63-a95d-3670-a5df-9ecffe86cc19.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397453
IP address blocks:        216.120.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d8:9a:3f:11:67:7c:c9:8a:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=08b9fa69-ef6d-4821-8155-f067ac01bc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:2f:13:6e:8d:ab:eb:0a:15:80:48:f4:09:
                    de:b1:53:2f:5a:d1:f3:6d:b9:a3:da:0f:ee:4e:4c:
                    d7:df:78:6f:b9:59:87:ba:10:f2:b7:e9:cd:1e:a0:
                    08:06:73:d8:73:86:be:c5:6f:30:f2:6b:b3:a9:80:
                    be:11:58:a6:6e:d5:76:4b:fe:ce:80:b9:08:ef:b8:
                    f3:52:e7:73:13:d7:3c:59:b8:e0:66:06:1c:9b:bb:
                    57:ba:e8:ee:93:84:7c:70:b1:2a:ef:16:6b:0b:09:
                    7f:c2:e6:60:7f:92:5d:a3:5e:cb:53:be:39:63:52:
                    91:40:0d:81:7a:b4:3c:8c:28:52:9f:9d:86:2b:bc:
                    57:a9:f7:86:9d:4a:28:0a:df:84:c6:70:dd:42:61:
                    f5:9a:9f:d5:16:4a:56:75:35:42:db:ca:d9:8a:6c:
                    0e:8c:76:a9:28:d9:08:9d:e1:90:10:37:06:ac:7b:
                    51:ac:98:6b:9a:d1:a3:fd:69:c2:d3:c2:e9:f0:8c:
                    c9:5c:6a:08:9b:a4:55:75:37:bd:5c:2c:0a:c3:92:
                    e4:a1:1e:40:70:bf:cf:32:73:f2:12:2d:08:14:8f:
                    25:37:f1:a9:8b:07:89:00:ee:f8:da:ad:f6:4b:59:
                    77:c3:fa:24:33:bc:4b:f6:59:a1:3d:e2:1f:08:6e:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AC:BA:A5:12:CA:F6:B2:5B:29:E7:CB:CF:A2:E6:01:96:16:12:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/91378d63-a95d-3670-a5df-9ecffe86cc19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:66:32:d0:e7:40:57:05:2b:35:bf:c0:c3:29:87:ac:78:
         2b:7c:7e:5d:ba:21:5d:e2:aa:29:c4:3f:92:54:fd:2a:1e:92:
         7c:f9:e6:d1:c1:29:cb:68:c1:a7:a3:bb:ea:af:13:63:0d:ec:
         45:61:99:95:66:df:4c:34:17:ec:6d:36:61:1b:a1:a6:3d:68:
         da:9d:78:9a:a5:22:0d:eb:0b:42:e9:38:fd:46:03:65:bb:d6:
         67:ed:8b:f3:5f:e9:f0:40:8a:cc:2e:fc:a9:35:fd:54:93:1d:
         4c:75:2c:e1:3f:a5:96:cd:4a:91:ce:2b:e4:3f:17:62:e9:3f:
         c9:30:f5:f4:40:ea:ab:7c:fd:bf:f2:17:8e:0e:2b:7b:94:a3:
         4c:22:d7:e4:e5:22:04:83:2a:6c:8b:aa:22:d2:87:65:cb:0a:
         8b:14:99:d6:09:22:0d:82:36:37:b6:70:a6:e8:10:09:90:5d:
         19:46:d0:5b:62:d0:98:40:1b:cd:a5:8d:14:58:fb:29:ef:ad:
         c3:79:ff:f5:20:87:d8:77:c2:c6:f9:ac:46:74:41:e6:40:75:
         59:f8:4a:19:91:a3:92:4f:87:a7:7f:c4:d5:69:3a:12:ab:91:
         ad:c6:7d:b7:1e:1b:44:b6:50:28:4c:5e:9f:6d:84:10:6a:86:
         8f:9e:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:16 2026 by rpki-client