Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec01866d-aed5-3093-a826-1b0cb01b4239.roa
File:                     ec01866d-aed5-3093-a826-1b0cb01b4239.roa (raw, json)
Hash identifier:          LXW1S3lFoo2zmmOrsAHC/tIozmVpE9FPr55+8vTHulw=
Subject key identifier:   57:C1:44:65:3F:EF:60:BE:44:EF:14:9F:06:BC:15:09:E9:69:84:4C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F0ED243CA2E8E9942C7A3F2D0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec01866d-aed5-3093-a826-1b0cb01b4239.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        139.177.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:43:ca:2e:8e:99:42:c7:a3:f2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=2c5ad326-fb2c-4ee0-90ad-ae562c688532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:bf:d0:3d:7d:54:f1:e7:2e:6a:f4:1c:22:
                    48:de:06:42:96:51:a6:a4:cc:28:66:96:5e:dc:61:
                    db:3e:1c:10:6a:72:04:31:d5:0a:0c:54:e8:58:85:
                    a0:dd:90:66:38:b3:41:14:46:77:e9:c3:ee:5d:a8:
                    bd:20:e4:cc:30:55:f9:0c:ba:27:83:5c:b5:48:80:
                    24:27:f6:e9:15:a5:49:85:79:85:58:70:b3:f6:50:
                    6f:64:52:c1:7b:f2:34:1c:41:2b:8a:5b:25:18:da:
                    e5:19:44:ee:41:42:12:43:42:8c:3a:dc:3e:54:a0:
                    27:6e:e9:b0:2b:40:ac:b5:8e:fe:da:30:b5:dc:ba:
                    06:ca:e4:21:2b:e4:dc:8f:f3:49:82:6e:d0:6e:ef:
                    8b:1a:f7:f8:d8:4d:f4:6f:33:e4:6d:33:4f:0e:ff:
                    75:c6:09:7a:52:f2:e1:61:f4:3c:57:9e:c9:7d:16:
                    53:47:4e:d0:75:f5:61:af:21:05:ee:3c:36:f8:63:
                    09:92:30:0c:a0:38:fa:83:2a:22:6c:87:07:e1:35:
                    7a:6c:82:e8:aa:00:60:52:28:43:47:bd:cb:d0:d9:
                    25:1b:74:20:fa:2e:4f:e9:a0:60:17:bc:f6:17:c0:
                    bc:86:c8:b0:4f:0c:67:1a:7c:ae:e2:2d:fe:28:f8:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:44:65:3F:EF:60:BE:44:EF:14:9F:06:BC:15:09:E9:69:84:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec01866d-aed5-3093-a826-1b0cb01b4239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:fa:08:60:32:16:39:fe:a4:12:bc:2a:43:8e:ad:b4:3d:
         75:92:9b:22:df:7d:77:76:cd:0a:9f:bb:6e:4b:78:9c:0c:1a:
         cb:e4:e8:7f:a4:bd:d7:d5:ec:be:89:b7:e1:90:40:05:11:3b:
         ed:b7:67:64:75:db:d6:7c:04:50:1c:91:8d:f5:04:e3:97:1e:
         85:46:61:ed:91:da:09:b9:01:4a:8b:8b:6f:02:b0:6e:92:f9:
         b6:92:dc:cf:c8:be:2d:2a:cd:20:bf:51:e5:ce:d9:a8:79:3e:
         f6:0a:9b:74:50:d7:14:a1:00:fe:8c:a2:69:7a:a9:ea:4a:1f:
         0b:76:1b:b3:6b:fd:09:3e:c7:85:57:75:31:43:63:69:9e:a2:
         a9:a0:32:a6:02:69:98:cf:91:bd:f5:81:3f:a4:94:ea:f6:5d:
         74:fc:43:3d:76:d8:5d:23:75:ed:78:1e:c8:04:4a:58:26:e6:
         58:e1:62:a0:60:c1:51:d9:40:83:7b:76:33:09:25:b8:dc:5d:
         19:a7:e5:c8:77:02:97:29:10:9a:ee:8a:35:f8:2c:d8:9b:85:
         c6:a8:06:e4:14:44:b7:1c:d3:30:33:da:78:7a:57:ba:b5:d9:
         43:6e:90:9e:61:9c:e0:ff:50:ea:8f:97:a7:27:7a:93:29:c9:
         99:23:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:00:33 2026 by rpki-client