Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa
File:                     a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa (raw, json)
Hash identifier:          NEt6LBbsieiodEG2oB8zvg1ORX5ehXKzIB7HZ6/ByBU=
Subject key identifier:   77:AA:06:B1:CA:99:F5:46:19:9E:F6:9E:66:63:17:17:EA:DD:35:FC
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E253F097CB97EC1675CBB5C10
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16417
IP address blocks:        139.138.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:09:7c:b9:7e:c1:67:5c:bb:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=d5147bc5-b4cc-47b7-811d-f71bd35d1c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:f8:84:ca:18:b5:16:bf:fc:a9:99:e4:58:
                    42:93:1b:ce:50:62:39:31:9b:16:39:bf:81:5d:b5:
                    6a:af:6f:53:d1:31:60:b2:ab:ec:ac:c3:77:1e:cd:
                    c8:d5:d0:7e:d5:04:69:d2:fb:30:81:d2:38:a2:19:
                    e0:84:ae:f4:8c:2e:47:b9:d7:89:c3:c5:c3:1a:23:
                    55:7e:56:ad:d3:9f:95:da:a3:aa:e7:31:76:2e:f2:
                    b3:7d:8b:a6:b3:3d:63:b6:51:cb:68:e0:26:e2:c2:
                    d2:d3:a9:90:79:7b:98:a8:f5:0c:62:a3:90:05:86:
                    8a:92:06:57:e5:c4:dd:83:71:42:37:e6:eb:f8:88:
                    b8:52:a2:b6:8b:cb:06:7e:77:a9:3b:6a:82:71:a1:
                    06:d0:85:09:27:a2:3c:ec:62:28:c1:2c:61:50:c9:
                    7c:bb:47:82:03:c8:ae:b3:32:ce:08:ac:9f:77:fd:
                    82:09:f0:74:27:39:38:8f:37:ab:10:91:ad:51:5f:
                    9a:6a:c5:2b:da:2d:73:74:d4:78:5a:a0:35:0f:c2:
                    7e:3d:57:35:db:f2:c5:e1:0b:12:fe:f8:1a:24:70:
                    34:31:82:cb:66:56:91:c1:e1:2f:bd:18:7a:b6:ff:
                    81:2f:d0:6b:80:a5:e5:9b:74:8c:ad:36:22:ee:a9:
                    7b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:06:B1:CA:99:F5:46:19:9E:F6:9E:66:63:17:17:EA:DD:35:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6c02046-08e3-3226-9c72-2eeb9846b4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:84:01:ca:51:1a:de:d2:4e:15:c6:27:9f:fb:c4:b4:9e:
         90:72:1c:ae:b9:d8:6a:41:64:41:48:ca:04:83:70:60:85:f1:
         fc:0d:b6:d0:1e:49:c6:9f:29:cc:98:a3:a0:63:92:8f:59:b2:
         3e:89:73:14:7f:45:2d:41:7e:3f:07:ef:f0:45:9b:72:63:4c:
         07:10:a9:09:1a:c7:5a:fd:35:6e:d1:23:ee:98:37:78:13:b0:
         94:92:e0:38:d5:51:7a:fc:d8:0d:6d:b8:b3:75:fb:f9:9f:cf:
         01:fe:60:96:78:7f:50:bb:7f:62:59:b8:0a:21:8a:b5:63:51:
         5c:fa:35:0a:e7:1c:c9:6b:51:f6:d3:37:84:72:89:76:41:c5:
         5f:77:14:db:2e:eb:b8:9a:5f:be:01:14:69:69:20:eb:70:e1:
         c9:bd:6f:1c:32:59:de:e0:f5:54:20:8a:3c:ed:51:5b:0d:8d:
         89:3f:d7:e8:7a:77:a7:8b:c0:8a:78:db:d9:51:a9:23:a3:a5:
         fd:cc:a9:86:be:8e:ab:89:db:0a:9c:38:d2:a3:f5:22:d9:18:
         2f:9e:18:5c:ae:ec:9c:76:3a:8f:bd:cf:62:29:ec:05:e5:73:
         4a:be:38:13:2b:bc:64:f1:28:29:c5:d0:3d:f3:b6:50:3e:dc:
         14:44:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:55 2026 by rpki-client