Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/284da1ab-e145-32e5-9815-b76ae11f531e.roa
File:                     284da1ab-e145-32e5-9815-b76ae11f531e.roa (raw, json)
Hash identifier:          USuW2f4P7pEzGfepaetJC2sEYjrIM4ZJPBJAkxyQKw0=
Subject key identifier:   89:B3:0A:0E:10:2B:17:12:B6:FA:8E:12:5B:E7:DA:31:0B:4C:04:5B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4973EA0440B7D03B6F05D980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/284da1ab-e145-32e5-9815-b76ae11f531e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63949
IP address blocks:        139.144.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ea:04:40:b7:d0:3b:6f:05:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3046fb3f-5463-4cd5-8bd6-3220aeeef93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3a:f5:a7:db:69:78:5c:cc:51:81:6e:cc:c8:
                    ff:c2:b3:58:08:ce:78:d4:6f:26:18:e4:e8:08:3d:
                    aa:e7:06:f6:27:74:42:d6:b4:77:31:57:e2:42:0e:
                    2e:02:a3:da:c6:33:b7:cc:75:69:5b:21:b0:ea:74:
                    33:f9:f6:ea:af:53:5e:b6:3b:f6:c3:d8:0e:0b:84:
                    ae:30:a7:ef:3c:2e:fd:a1:9a:eb:a2:18:2e:67:7f:
                    e7:de:c2:7d:02:f7:d5:8c:f2:2b:a8:fc:b5:b9:e9:
                    a6:3a:ce:be:25:70:cb:ef:d7:64:8c:c2:4c:13:e1:
                    ef:51:2d:70:5d:ae:fa:a0:29:97:08:b2:f4:90:3a:
                    59:0b:bd:46:7c:3e:03:60:79:5e:8d:8a:ca:da:e6:
                    44:71:d2:54:e4:5f:b9:ac:d0:51:75:2d:87:e0:ab:
                    25:a9:f0:51:19:e7:b9:7b:88:ba:3e:43:8d:75:8b:
                    98:04:44:92:18:8f:47:6d:9d:d1:02:a2:fb:b9:86:
                    88:01:67:a1:ca:e7:5d:ab:e2:2e:56:c0:fa:16:f3:
                    ef:7e:b8:39:fe:e1:24:0c:36:0c:96:67:f6:5c:19:
                    c9:ee:af:83:0e:f6:a3:90:ef:50:da:11:81:1f:f2:
                    1b:7a:c8:a2:18:b9:3d:0f:e5:bb:94:0c:90:87:f5:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B3:0A:0E:10:2B:17:12:B6:FA:8E:12:5B:E7:DA:31:0B:4C:04:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/284da1ab-e145-32e5-9815-b76ae11f531e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.144.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:ec:32:8c:84:71:62:0e:25:c5:e8:bd:56:c9:fe:e4:8c:
         71:10:85:a0:7f:74:3d:8f:17:0b:6a:68:46:18:87:d6:90:11:
         cc:08:d4:21:83:02:f9:22:7f:7e:be:31:fc:6b:2d:7d:15:1b:
         1e:8b:d6:65:ea:82:83:8f:c0:84:01:33:e9:54:9f:02:67:8b:
         22:29:3e:8c:af:57:b8:ae:c3:bc:d1:29:de:31:e3:ef:d2:27:
         02:75:0c:f3:f6:69:46:0b:64:ff:fe:1e:52:bb:7b:3c:49:b5:
         bd:d5:e8:cf:6e:3e:69:99:b6:c2:d3:d9:e1:e5:42:2b:55:a1:
         a3:9f:08:44:d1:80:53:8e:e2:51:54:28:b9:fb:cd:86:e2:cc:
         5a:cf:90:87:37:74:f8:b4:e9:c1:1a:62:99:02:16:71:5f:b3:
         18:ba:dc:cc:38:dd:cf:4c:89:c9:c1:3a:c8:6d:3e:61:60:63:
         8c:83:31:a9:3d:55:0e:d3:13:e9:35:b8:38:a5:80:36:15:14:
         9b:21:b1:d8:fb:30:b9:49:9e:cc:fa:5a:59:56:2c:c5:b2:e2:
         a9:01:c3:d0:40:37:83:a1:4f:c6:39:ee:e9:3d:ef:37:37:76:
         24:04:84:b8:cb:d3:b6:68:5a:70:d0:76:43:19:c8:bf:7c:00:
         06:cc:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:07:03 2026 by rpki-client