Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/4ac12027-491f-3aff-8379-47ac6a88e681.roa
File:                     4ac12027-491f-3aff-8379-47ac6a88e681.roa (raw, json)
Hash identifier:          p+lNTgn0KivfI6V3jh1n+uD8vlVoRp7tFK9OzddALDU=
Subject key identifier:   92:8A:E5:BD:8B:34:D0:07:EB:95:54:E8:13:15:83:6C:1D:3F:83:BE
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584E1FA9937574D97958D035D140
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/4ac12027-491f-3aff-8379-47ac6a88e681.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     21534
IP address blocks:        139.177.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:93:75:74:d9:79:58:d0:35:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=cb166071-db47-41ed-b66b-11d081962dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:0c:d7:f1:ed:2e:8f:25:fa:95:d4:da:f6:
                    0b:59:fd:2c:f5:a1:a0:32:9e:46:52:71:7e:70:89:
                    75:ea:15:c7:e3:2f:f6:8d:71:fb:85:b5:b6:ea:a6:
                    df:59:47:cc:29:a9:fb:33:94:fc:8d:2f:5d:b4:47:
                    f0:46:59:a1:f7:2b:88:25:f5:37:a4:ad:48:0d:56:
                    6b:59:6f:78:de:77:d6:77:7d:8f:a1:81:3e:df:a3:
                    c6:85:99:99:b2:b6:6d:f5:3d:49:a2:4f:cc:b7:a6:
                    02:a2:f6:83:ea:8f:33:b5:fc:c5:2b:bc:0a:12:57:
                    c8:d5:41:bd:88:f6:c7:59:51:3b:80:81:3a:8f:4a:
                    1a:45:c0:68:98:3c:10:cb:1d:ca:19:0b:2b:5e:8b:
                    94:f4:8f:6f:05:fb:48:bc:ad:9e:99:eb:05:da:ee:
                    7e:94:00:11:0b:8a:ad:66:63:98:20:43:6f:0b:a8:
                    ed:4f:5b:27:f5:16:71:ca:ac:9a:8e:15:b5:8c:3d:
                    04:28:22:d8:87:6a:d1:53:ac:18:90:fe:e4:56:b9:
                    f8:47:90:3b:8d:e7:e5:61:52:34:9a:c2:32:84:80:
                    09:42:a1:c4:de:c9:e2:cd:0c:fd:51:2e:bd:cf:7d:
                    13:1b:0b:fc:88:e7:24:79:59:36:1b:1c:6e:27:e8:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8A:E5:BD:8B:34:D0:07:EB:95:54:E8:13:15:83:6C:1D:3F:83:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/4ac12027-491f-3aff-8379-47ac6a88e681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:b7:c1:fa:05:f3:14:22:73:4b:6a:fe:9e:a5:60:4f:2f:
         4a:ad:cf:3e:00:34:e3:11:2c:10:d6:58:b1:58:60:17:ce:8e:
         ab:8e:09:7a:04:da:76:f0:d4:3c:08:44:42:6e:a9:88:12:c7:
         cc:28:34:3f:03:bc:d3:a4:d5:eb:4d:82:2d:79:71:6d:47:a2:
         ee:27:cf:07:b4:3e:40:54:09:de:6b:f9:bb:fa:03:90:81:5c:
         e2:e9:ee:5f:0e:83:ff:32:3d:50:ac:21:2a:23:34:13:e3:ba:
         82:11:63:34:cb:fb:2a:e7:0f:62:ac:c0:76:06:9f:6a:5b:e1:
         06:08:9e:f2:84:6d:81:59:41:a4:ce:21:a3:8b:2f:0e:f0:e1:
         f2:90:eb:99:f7:46:a2:59:be:cc:05:46:d5:e6:d6:92:4a:6b:
         c5:b8:13:49:50:db:26:93:3e:64:6e:a8:cf:bd:5b:2b:00:1a:
         2a:7d:aa:73:f5:68:67:75:a6:56:b0:ec:26:b2:fd:a0:38:36:
         58:11:47:69:0e:74:88:83:39:de:f2:9e:fe:80:59:cf:07:12:
         26:82:86:6d:96:2a:41:c7:93:68:52:9d:b7:74:73:f6:6d:ec:
         6e:74:d4:13:ce:9d:c9:29:37:c7:4a:7c:e0:73:2f:3b:74:03:
         d0:e4:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:03:30 2026 by rpki-client