Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bebdfef9-41dc-3cf8-ac04-ecede11819fd.roa
File:                     bebdfef9-41dc-3cf8-ac04-ecede11819fd.roa (raw, json)
Hash identifier:          P9+XRi4s5700dxYrhE5IBh6JAnGY9cPjZA2xi2n5RdY=
Subject key identifier:   C0:DC:A9:3C:D4:C8:C1:E3:47:A7:6F:1B:ED:52:E1:5D:9E:2A:D8:FE
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F4112B3A11607343787AEAE40
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bebdfef9-41dc-3cf8-ac04-ecede11819fd.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     399937
IP address blocks:        139.177.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b3:a1:16:07:34:37:87:ae:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=fb2e3fd1-fc4f-4dfe-9a2b-8a174c81bea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:58:34:f2:ab:c7:0a:16:45:ff:63:a8:ce:
                    2d:6e:90:8a:e7:51:ed:13:18:4b:4f:8f:66:fc:46:
                    45:cd:5f:9e:d0:89:86:a7:4b:b9:a2:d7:74:1f:2f:
                    74:2a:30:56:08:52:1a:b5:28:bb:13:32:bb:53:ae:
                    7b:71:4c:f8:74:14:b5:b4:f4:a8:2e:ef:14:b5:bf:
                    9d:a7:0e:ba:2c:df:9e:01:fb:65:6f:39:86:29:1a:
                    39:c0:44:52:af:9d:a8:ef:c7:dc:02:81:4b:e7:7d:
                    7f:4d:b5:a4:93:4d:42:5b:f5:fe:31:ef:08:be:7b:
                    52:f6:fe:8e:dc:5d:e6:f2:78:6f:44:d2:43:b7:9c:
                    03:c8:c6:17:03:d2:70:e6:2c:13:5e:78:a4:5a:7c:
                    36:80:74:1a:07:c8:87:fe:9d:00:9e:63:e6:75:43:
                    c7:cc:54:a6:ba:0c:19:b0:db:fc:44:e8:80:a1:30:
                    a8:e9:dc:6b:66:70:86:65:3d:bd:df:26:51:9a:0f:
                    6d:9a:c2:a1:a7:a4:98:1f:94:f0:47:07:b8:7e:1f:
                    92:ff:e4:c3:f9:c8:6c:82:24:32:18:55:c3:0c:ef:
                    c4:ee:8e:02:c2:2a:98:1f:63:6b:ca:8e:ca:2d:00:
                    d7:b2:93:97:f6:c4:a4:25:33:84:65:5d:f6:d2:46:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DC:A9:3C:D4:C8:C1:E3:47:A7:6F:1B:ED:52:E1:5D:9E:2A:D8:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bebdfef9-41dc-3cf8-ac04-ecede11819fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:21:1e:7b:d2:05:f8:85:39:2b:c8:9d:5e:a4:84:b4:af:de:
         4f:98:80:79:66:ec:34:dd:87:d5:98:99:20:cc:91:01:0d:a4:
         4a:b9:3b:64:63:f3:dc:29:f8:b5:8f:81:b1:3d:ef:84:40:d7:
         ba:5b:d4:53:45:2c:8c:11:f8:c1:de:c8:4c:dc:bd:12:d3:52:
         07:95:7d:d6:8b:20:5f:eb:aa:59:8b:48:8f:4c:6c:be:8b:89:
         e2:46:95:1f:ee:2b:47:3b:8d:a9:37:c7:aa:03:a1:4b:87:ef:
         e2:32:f1:01:c6:8d:6e:6d:bb:bc:3d:42:c8:0c:f7:a3:29:de:
         a4:aa:a2:5f:16:d4:87:43:4a:e6:1a:99:ee:da:d9:99:22:6d:
         42:2d:d1:67:a3:f4:96:36:a4:37:ac:7e:b2:2a:90:2a:7d:5d:
         7d:12:37:ba:70:16:8d:5e:9e:d0:6c:4d:5c:ec:b9:21:9f:04:
         87:30:cd:f0:a4:30:90:0d:63:c2:3f:a1:73:15:00:15:7d:a4:
         1e:03:a2:78:f5:42:2b:6f:23:b0:90:6e:1e:fa:75:ff:85:9d:
         a3:97:6f:ed:76:77:39:0d:48:92:c6:5e:5a:01:ed:1a:7a:e6:
         57:a0:fd:16:10:d3:ca:a4:64:5e:85:11:2d:46:d9:0b:d2:ab:
         26:9f:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:17:29 2026 by rpki-client