Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa
File:                     a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa (raw, json)
Hash identifier:          xsTp0JCaLNwLgSFUmtzqRe6cp8coZXBQh70KHunOA6g=
Subject key identifier:   8A:49:0A:55:3D:F0:EF:B8:16:29:F2:2E:48:41:7C:BB:2C:0C:52:DA
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584F82ADC4ED7F23BB9F5CDB6600
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     54004
IP address blocks:        134.202.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:c4:ed:7f:23:bb:9f:5c:db:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=9ad8da92-3760-4ce0-83ce-4041cbd57788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:d8:8f:ba:81:90:3f:cf:cd:e3:7f:52:85:
                    67:b5:0a:02:d4:05:12:ce:44:b2:d3:ce:1d:98:69:
                    4e:e3:06:db:5b:20:cc:62:3c:f8:dc:99:b0:38:cd:
                    29:0b:95:c4:88:69:6e:f9:96:9a:84:bf:d1:53:6b:
                    10:cc:cc:48:91:a9:ac:d9:3e:26:18:8c:04:ec:b4:
                    58:64:c0:b3:6e:04:b3:70:6a:c3:51:4d:1a:bc:c1:
                    25:df:fe:46:48:92:06:55:39:0f:b7:83:07:69:ef:
                    ba:e7:da:94:83:de:91:9e:c7:c4:ca:2b:9c:65:f7:
                    95:aa:81:38:52:f0:c7:f0:32:d4:60:b1:44:fc:f6:
                    aa:95:b1:79:8b:72:5f:49:9a:09:f3:51:87:8d:cb:
                    f2:3a:ba:a2:81:32:ff:16:d7:ef:71:0e:78:4f:01:
                    61:f6:92:31:1e:8a:ba:03:fc:dc:f1:9d:a6:0f:e6:
                    ef:fa:45:ea:70:b5:aa:4b:8b:fd:3a:0f:d0:31:2f:
                    08:6e:70:8f:49:19:8a:e7:51:13:a2:60:a1:17:5d:
                    dc:07:f6:3f:63:06:fd:55:26:d4:97:dd:0a:0c:5f:
                    8f:14:ae:d1:59:4b:84:37:27:5c:09:22:ce:39:9c:
                    8c:ad:9e:72:e4:a2:cb:83:f9:2a:2e:b1:4c:50:a6:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:49:0A:55:3D:F0:EF:B8:16:29:F2:2E:48:41:7C:BB:2C:0C:52:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:a9:be:92:7f:65:d5:b5:95:77:1f:b8:72:35:a4:75:a3:
         af:d2:a5:85:24:1f:8b:7b:c9:c1:84:b9:cc:c7:21:49:c9:2d:
         a4:df:64:28:b5:e8:13:26:d2:75:0f:ae:0e:86:66:94:54:2a:
         6c:3c:39:b2:3b:c9:8b:38:32:8d:32:1f:54:64:11:36:7d:33:
         b5:af:0d:d7:0c:3d:57:99:ba:14:60:fd:45:33:d9:06:67:77:
         41:d7:60:d6:fb:1e:28:cf:97:5d:a7:36:51:82:d6:df:9a:cd:
         b0:30:8b:5f:c5:aa:08:c6:04:15:ba:1e:92:e2:2d:01:23:6a:
         2f:fc:11:c8:4e:e9:cf:6a:e4:17:72:61:d3:d5:62:f9:c4:21:
         59:84:79:81:05:d3:5e:3e:70:9d:f0:59:13:d2:93:1f:97:6c:
         3e:c4:e6:90:c2:8c:42:2d:c8:65:31:ac:51:c2:d0:01:93:98:
         de:67:d9:73:72:8d:43:21:d4:98:d1:b2:47:56:d8:ad:e5:10:
         9b:17:16:e1:bf:63:dc:1f:1a:c2:c3:c8:c9:cb:65:59:37:87:
         5f:56:72:f7:b4:23:e8:3d:14:bb:8f:a5:e5:d4:a0:f6:7d:f8:
         27:2e:1f:70:be:bb:ae:88:d7:cc:34:1f:54:2a:37:c6:78:56:
         1d:48:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:22:30 2026 by rpki-client