Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa
File:                     3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa (raw, json)
Hash identifier:          UWTnzGRLa5JugDwUEpquz+RhEU2OyXc9UVIhpt0H7ps=
Subject key identifier:   C1:B5:5A:7C:B8:5D:24:66:47:84:D0:18:C6:A5:43:6E:7E:1A:3B:22
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584E6B0A1E70E2F82726C648AE80
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     398343
IP address blocks:        128.254.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1e:70:e2:f8:27:26:c6:48:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=02196376-ca2f-43a9-ae06-dc2c7ad4eb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:1f:98:e8:fd:1d:3f:76:7d:c4:80:3b:e5:
                    b2:4a:b0:0b:a4:f9:b4:f6:a1:dc:7c:05:3f:58:99:
                    57:f4:30:af:96:25:a2:cc:44:bb:e3:63:51:9a:45:
                    95:59:f5:88:14:97:8c:19:18:76:59:a6:77:ed:d5:
                    8a:e4:7e:ca:bb:51:9c:17:e5:7e:71:cd:2a:22:17:
                    f0:5d:51:de:c4:79:4c:84:73:55:d7:53:78:22:d4:
                    b0:c4:da:80:8e:47:01:39:73:e3:64:91:98:0d:0f:
                    9c:40:40:dc:9b:45:92:0b:a8:ee:a6:6a:7d:84:18:
                    65:f7:0f:df:b3:1f:30:33:f7:41:6d:e5:64:1f:f3:
                    df:0b:0e:f8:40:12:a2:a9:f2:f1:62:e7:62:86:bc:
                    b4:4c:04:f8:9e:f6:ad:d0:5e:fd:de:90:b7:a8:57:
                    dd:aa:58:91:3e:57:29:69:3f:82:c6:62:95:32:9b:
                    c0:c4:c8:47:eb:ab:e9:e0:a1:4f:b6:e2:ab:f0:0e:
                    20:52:d1:f1:29:83:7c:fd:ab:ce:33:c5:1a:f7:4a:
                    ca:a7:51:50:0a:ee:ef:cf:86:33:83:0a:54:a2:ce:
                    20:e5:c4:5b:32:c3:d5:90:df:ed:44:c1:1d:79:1b:
                    67:d5:fe:08:33:8a:29:45:3e:48:12:89:15:11:92:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:5A:7C:B8:5D:24:66:47:84:D0:18:C6:A5:43:6E:7E:1A:3B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:b7:b8:e5:12:f1:3d:f0:a6:6d:f8:75:2f:f2:e6:bb:24:
         8c:27:37:7f:0b:49:e5:78:f0:36:51:18:95:79:20:f6:83:d8:
         7e:1c:f6:6e:1a:96:23:e0:ae:b8:75:57:ec:0d:0d:fa:bb:c5:
         d1:df:e7:eb:13:70:78:e1:1a:fb:4c:c4:75:ac:a9:12:65:3e:
         d7:25:cd:c6:0a:8f:09:36:31:3f:1e:73:18:e1:85:6e:50:e0:
         26:c8:51:b1:2b:88:ef:a5:1f:3c:c6:9e:8a:bc:9c:3d:35:db:
         c6:b2:9f:a3:de:9d:ce:4a:b6:4f:5b:46:1b:b8:07:70:bf:39:
         d2:9b:26:2e:87:a1:c9:7e:eb:b7:76:a4:05:94:0c:2d:11:a6:
         cc:f2:36:96:e4:1e:71:e7:39:05:dd:bc:6e:99:05:1f:36:8b:
         9d:e3:cb:37:cd:be:1e:d3:15:5e:08:a1:d0:90:fd:aa:02:0c:
         70:29:fb:d5:53:9c:6d:76:87:11:f9:d7:4c:f0:67:df:88:6a:
         b8:a0:fb:ec:05:f3:e4:02:d9:cb:49:7e:2c:2f:40:4c:62:1b:
         e9:4b:a7:61:b8:7c:92:c7:6b:6e:60:bf:dd:b4:b6:e9:28:5a:
         99:ff:71:5f:2c:63:75:67:2a:b3:49:14:80:55:46:9c:27:4c:
         38:bd:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:37:24 2026 by rpki-client