Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa
File:                     098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa (raw, json)
Hash identifier:          xLu5KcYjk3Hub30r/MjTNB9icJaEi+WN0J501CSrcfk=
Subject key identifier:   9B:43:99:A8:8C:33:21:C1:2B:B6:AA:30:17:A3:83:06:E1:64:FC:4C
Certificate issuer:       /CN=ba584605-7948-4c75-be73-29a89eca8940
Certificate serial:       010D0C9F4328584E1E4456B2CE3FF294B6852CE0
Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     399315
IP address blocks:        139.102.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:56:b2:ce:3f:f2:94:b6:85:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=59079fd5-494b-4a73-8b4c-43cfe6b64b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:ee:3a:65:a7:63:0f:08:3a:90:17:62:6e:
                    06:23:df:18:ed:d5:ba:c5:38:ce:12:e3:59:93:7e:
                    4a:73:86:9c:a4:20:96:d4:55:50:5e:ec:e4:74:82:
                    9c:38:cb:d3:2e:11:ac:30:39:86:b5:b5:ad:cf:97:
                    a9:e0:df:e7:08:17:57:d7:b5:1d:16:aa:3f:4e:c3:
                    d7:92:1c:9f:9f:b2:fb:e4:4c:a9:99:67:b5:3d:c7:
                    bf:c2:5a:00:44:e1:4b:ad:be:1e:8f:5c:fd:d5:f5:
                    1d:4e:44:03:64:29:f9:45:4f:44:61:80:13:2a:37:
                    f7:87:70:eb:58:7a:05:00:ef:a0:c1:ba:fc:fe:8f:
                    d7:c1:6d:b1:d9:c4:fa:27:bd:6c:1b:dd:ec:65:e8:
                    09:0a:79:cc:62:ee:e6:f5:ab:d0:e8:5c:46:25:cb:
                    23:29:34:c1:c8:50:ed:d5:05:b4:38:64:47:be:8d:
                    16:53:c0:87:fb:1a:2e:ab:94:dc:68:e5:05:9a:81:
                    75:71:59:b2:ec:65:3c:e4:f3:13:c5:08:d5:21:e3:
                    4b:f7:1d:61:aa:52:af:e8:0b:7f:57:62:b6:bc:24:
                    5f:e4:15:0f:a0:f2:1d:c0:39:68:86:bf:a9:c3:fa:
                    79:12:66:53:6d:8a:ad:1e:48:27:ac:c0:d2:cc:6f:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:99:A8:8C:33:21:C1:2B:B6:AA:30:17:A3:83:06:E1:64:FC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl

            X509v3 Authority Key Identifier:
                keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.102.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:00:33:27:a5:8e:65:16:59:79:6f:50:b3:94:70:2f:02:75:
         3a:d2:fa:a2:44:97:84:34:89:b9:cd:b7:54:83:6c:06:67:6e:
         87:35:33:32:b8:dc:7c:a2:1a:11:80:bb:09:c3:db:f7:79:cb:
         cb:7a:13:fa:1c:ff:7e:ef:08:21:85:8e:e8:85:b8:b8:c0:03:
         e8:a3:2c:c2:78:8b:51:5e:9e:6f:2d:41:1a:db:50:58:55:e1:
         d2:43:f3:95:cf:48:81:b6:c7:ab:ea:f0:fb:36:26:07:f6:08:
         08:c1:d3:0e:ae:08:5f:84:d3:da:a3:c4:9c:b3:a7:10:06:2b:
         da:37:55:81:d8:08:07:18:04:e6:b8:82:a8:68:5f:18:f7:0c:
         ad:91:fb:fc:12:e5:58:16:5d:58:32:70:6a:d3:64:73:f9:de:
         d4:06:2d:a6:53:bb:71:e1:33:fc:46:68:b3:0b:3d:90:b5:ab:
         38:ab:43:e5:9a:42:8e:cf:55:d2:80:86:f3:e0:34:c1:f1:bd:
         b2:9c:c2:49:79:ba:4a:a9:9a:53:13:ae:cc:8d:14:07:05:b7:
         04:2e:cb:88:68:35:fb:3f:79:b2:e3:d3:45:65:d7:4c:17:a5:
         35:6d:49:5b:d8:0a:40:66:bb:2b:7b:1a:14:20:b5:58:ca:00:
         76:4b:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:28:49 2026 by rpki-client