Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/777dbb53-31ba-337f-b4cd-fe5d39a3e822.roa
File:                     777dbb53-31ba-337f-b4cd-fe5d39a3e822.roa (raw, json)
Hash identifier:          Txjg+2dXQ4fvWtwkTi5rymn+5bGAAmKOkxzcYKHmMJc=
Subject key identifier:   51:E5:07:C9:F5:53:92:69:0E:22:EB:B4:E6:29:99:A3:C0:3C:4E:4E
Certificate issuer:       /CN=440ded39-398e-4479-b80d-ad4f4c956932
Certificate serial:       010D0C9F4328584F00DCBE9A6CB02EED0E363100
Authority key identifier: 69:E7:72:80:54:F5:45:4E:72:C5:C0:11:E4:F3:EA:39:FA:5E:53:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/777dbb53-31ba-337f-b4cd-fe5d39a3e822.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     16276
IP address blocks:        134.195.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:be:9a:6c:b0:2e:ed:0e:36:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440ded39-398e-4479-b80d-ad4f4c956932
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=cb062e9f-9b10-442f-b045-0c395f9ce82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:4a:e6:79:c2:e5:ca:1c:76:3d:8b:50:77:
                    98:16:c4:ee:76:b4:85:a8:f2:a7:dc:f0:3a:34:38:
                    fe:5e:f4:12:15:f6:25:61:9a:bd:00:5e:d4:80:9a:
                    b9:f4:ca:86:b5:38:49:2b:20:b0:5f:0c:fe:eb:8e:
                    95:84:fd:8a:6e:e5:82:97:4f:9d:83:d4:f2:ce:ff:
                    77:73:52:28:a7:59:68:ee:75:c0:2c:ab:50:71:11:
                    8e:ce:3e:83:58:91:5e:1b:a1:07:1a:38:3d:21:10:
                    8c:75:a7:91:68:8c:f5:9d:82:31:e7:33:99:66:f9:
                    10:2b:a2:24:38:05:5a:f8:54:13:63:a5:2c:62:01:
                    37:a2:b5:64:24:02:8a:4a:c8:95:fc:ef:24:34:c0:
                    b5:ff:22:70:13:92:d6:b4:eb:2d:be:ef:72:2f:8f:
                    4d:35:31:29:05:52:6e:f1:1e:95:5e:42:59:4d:7e:
                    7b:0f:0e:6d:6a:0f:24:2b:2a:49:84:ef:03:79:81:
                    22:f6:6e:ca:04:9e:9a:4d:72:ac:d4:90:0b:f5:e6:
                    c8:ac:7a:24:42:a2:86:b1:f8:8c:88:49:0d:1c:18:
                    78:a1:1e:7d:71:75:d3:a2:9c:6d:13:ae:1a:45:84:
                    d8:11:1c:d5:63:a8:7b:ac:ca:e2:81:c6:90:b0:32:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E5:07:C9:F5:53:92:69:0E:22:EB:B4:E6:29:99:A3:C0:3C:4E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/777dbb53-31ba-337f-b4cd-fe5d39a3e822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.crl

            X509v3 Authority Key Identifier:
                keyid:69:E7:72:80:54:F5:45:4E:72:C5:C0:11:E4:F3:EA:39:FA:5E:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:06:4a:28:9f:20:74:a1:63:47:cf:f4:a8:e8:b5:85:91:01:
         0a:db:69:e3:cc:b6:a2:cc:3b:dd:ec:11:34:0c:48:16:6e:c1:
         c8:6c:87:06:af:7d:8a:0e:b7:69:a1:f3:81:cd:a3:84:9e:3c:
         f9:a8:1a:bc:47:12:03:c2:9f:f1:cf:7b:82:c7:89:a4:01:34:
         2d:da:17:12:be:9e:28:0e:53:41:77:b8:e1:8d:7b:8f:aa:7f:
         19:99:0f:62:01:a2:58:14:97:8c:72:fd:a6:02:f4:cb:12:be:
         e9:02:da:e9:03:bf:4b:e0:9a:09:5d:c1:a2:db:f7:ab:54:0c:
         c1:cf:d6:2d:1e:57:91:61:23:4b:ad:28:35:b4:50:5d:0c:08:
         72:0b:20:95:c8:d5:0f:07:51:37:13:61:ca:a3:35:98:5f:45:
         a9:a5:36:0e:0b:69:6d:08:88:32:95:b1:50:25:ee:99:c0:28:
         95:39:4c:94:f6:03:93:99:da:71:fd:7b:5d:da:e3:2a:f2:7b:
         76:4d:31:ee:cf:d7:ce:a4:a3:78:e3:7b:ef:7e:72:a8:de:89:
         ca:81:a1:01:c4:0a:ab:ef:0d:ac:e5:57:58:4c:ed:f0:10:7e:
         10:5d:88:ef:fc:fc:05:5a:69:ed:d7:13:b1:92:37:f8:6d:0b:
         a4:21:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:37:02 2026 by rpki-client