Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa
File:                     c49b3b11-b5be-3457-9944-344841e05c2c.roa (raw, json)
Hash identifier:          rzJ5WUQVKI1iB2w8ZSNiSPi4PryJvGyDEgINidTzk/s=
Subject key identifier:   A0:32:66:24:F6:09:EF:5A:E0:2F:8F:F6:FF:0D:C8:D1:1F:89:FB:2C
Certificate issuer:       /CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d
Certificate serial:       010D0C9F4328584EAFE6F6788092FCC9055455A0
Authority key identifier: A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     396465
IP address blocks:        134.71.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f6:78:80:92:fc:c9:05:54:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=4b687646-296e-4d95-836f-918da1993c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:9c:64:37:17:cd:f6:4e:cc:cc:2f:e0:48:
                    97:95:66:2f:34:a7:2f:10:72:d6:a1:dc:48:2b:66:
                    fa:8c:6a:72:78:66:05:60:b2:8d:87:07:ae:2f:63:
                    0b:a3:91:4d:72:aa:71:51:42:3a:9a:30:a4:ff:58:
                    7b:d4:47:cb:ec:86:b7:9c:8f:d1:c4:3a:b5:2b:0f:
                    cb:71:5f:17:0e:e2:de:c7:80:cb:ea:a0:59:37:9f:
                    92:92:86:51:1a:8e:e8:dd:36:2e:68:45:c6:30:07:
                    22:17:c9:1a:a3:03:fc:7e:64:1d:73:43:04:9f:a9:
                    5c:bb:03:bf:fe:6c:43:5f:ed:05:1c:ba:1a:42:df:
                    15:ba:88:9d:ea:00:17:f5:50:d3:08:e2:5a:07:2c:
                    3e:2a:32:79:15:c1:ca:0e:62:0a:28:17:27:f7:b8:
                    53:cb:88:d4:2c:30:d5:6a:73:8a:4d:27:c6:a5:30:
                    22:3e:a5:be:ed:da:f5:8d:a2:5d:0c:15:af:8b:18:
                    d5:9c:5f:4c:ef:c3:c8:df:25:39:92:48:61:07:2f:
                    3c:8c:9f:b7:43:95:4d:fb:3e:48:fd:cf:b3:6e:76:
                    c6:80:43:b6:4a:16:e1:df:33:ec:c7:3f:a6:33:e5:
                    52:23:f0:45:e8:01:0e:d5:a7:76:5a:88:8e:0f:52:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:32:66:24:F6:09:EF:5A:E0:2F:8F:F6:FF:0D:C8:D1:1F:89:FB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl

            X509v3 Authority Key Identifier:
                keyid:A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.71.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4e:0a:8d:a0:21:4c:90:c6:b4:d9:93:7f:a2:54:d0:48:0e:
         94:9e:63:03:ab:8c:ff:d9:9e:0f:03:db:63:a3:cd:1f:1e:03:
         85:b2:15:e9:53:18:c9:de:86:d3:0b:6d:9c:92:3e:55:88:1c:
         32:43:76:a9:1f:5e:98:9a:7b:d8:98:fe:95:09:55:47:bc:77:
         6e:f9:2b:78:14:f9:40:a6:d7:a5:71:b4:56:ab:60:af:1f:fa:
         88:ce:6b:61:35:19:5c:a6:1d:36:81:d2:29:4b:14:15:19:de:
         a2:51:64:c6:91:3a:10:96:1a:02:bf:72:2a:3b:56:60:30:a5:
         00:e8:31:e2:63:5f:2a:62:02:7c:02:04:9f:77:82:1a:ea:70:
         3e:82:4a:d2:2a:35:4b:22:cd:e3:26:ec:8d:14:a5:1b:67:41:
         cc:41:82:18:27:ba:10:be:d9:c3:9d:bd:57:3f:f3:85:6f:d1:
         29:65:f2:12:a9:fc:df:f5:2d:49:f7:5a:11:70:cd:10:64:92:
         24:62:bd:07:81:e9:34:c4:81:09:0d:23:6d:d4:e5:6b:99:b4:
         8c:18:02:b9:2c:af:03:ac:03:ec:23:bd:31:31:bd:c9:2e:52:
         5d:55:02:5d:49:d0:7d:44:d5:aa:5c:9c:fe:b7:ce:ff:55:41:
         fb:eb:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:22:26 2026 by rpki-client