Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/277b34de-8665-35b8-8734-393dd0b3fe6c.roa
File:                     277b34de-8665-35b8-8734-393dd0b3fe6c.roa (raw, json)
Hash identifier:          odjOZT+dds6G+LgC9rn3B6ZCq0bDYrV3X5Xugl7SPxM=
Subject key identifier:   9F:00:4F:94:8B:93:D7:93:9B:DE:4B:2F:7B:FD:C3:4B:34:BB:27:6F
Certificate issuer:       /CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
Certificate serial:       010D0C9F4328584FB93BC9F0CB39ADF167C00190
Authority key identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/277b34de-8665-35b8-8734-393dd0b3fe6c.roa
Signing time:             Wed 04 Nov 2026 02:00:13 +0000
ROA not before:           Wed 04 Nov 2026 02:00:13 +0000
ROA not after:            Tue 02 Feb 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        131.162.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b9:3b:c9:f0:cb:39:ad:f1:67:c0:01:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
        Validity
            Not Before: Nov  4 02:00:13 2026 GMT
            Not After : Feb  2 02:00:13 2027 GMT
        Subject: CN=0a6a01bb-c2fb-4de1-82e0-26a6135e718a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:e4:a8:ac:7e:f1:d4:d7:42:8d:e8:93:45:
                    e6:5d:df:3e:a3:8a:99:6a:da:54:91:25:01:c0:34:
                    5c:d0:22:85:7a:90:9e:d1:ef:2d:de:a8:9f:e2:b8:
                    28:0d:07:72:85:c7:ab:ff:58:97:38:82:c1:98:75:
                    4c:00:5e:95:42:0c:39:bd:f1:3a:e5:65:11:cc:f4:
                    01:83:c8:53:e0:5d:3b:2c:d4:8a:4a:a3:0b:88:d6:
                    bf:62:7a:26:d0:6c:82:d3:21:f7:85:75:a4:66:4f:
                    c5:cc:b0:17:d1:d7:11:b4:3d:e0:a3:15:3d:bf:4f:
                    63:4e:55:5d:ae:7c:6f:79:fa:fa:ed:b3:dd:56:9f:
                    1b:c0:ba:b7:66:1f:1f:6c:87:2c:ad:e2:fe:e0:c0:
                    ea:6f:96:f2:fa:bb:bb:37:8d:53:29:43:ee:f4:06:
                    9a:f2:7e:d2:b9:d0:fe:c6:19:41:5c:14:e4:5b:8b:
                    4b:97:9e:ee:72:a1:4f:f0:76:72:ed:60:52:4a:d4:
                    fe:16:8c:27:61:28:a3:e9:97:e3:d8:e9:29:16:a4:
                    ba:43:e4:ee:b5:08:bc:9d:f5:30:1a:de:75:d0:d7:
                    67:29:84:bf:b9:91:1c:d0:74:2c:82:cd:52:ef:43:
                    4b:0f:76:d8:cb:24:a4:fe:2d:7c:69:da:a4:07:f4:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:00:4F:94:8B:93:D7:93:9B:DE:4B:2F:7B:FD:C3:4B:34:BB:27:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/277b34de-8665-35b8-8734-393dd0b3fe6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl

            X509v3 Authority Key Identifier:
                keyid:C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.162.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:5e:bd:9a:92:ed:c6:5a:15:2c:b2:c1:07:a6:63:5f:7d:
         42:f0:da:b4:8f:2f:3f:02:8c:e8:8d:c9:13:a3:b1:ff:80:7b:
         47:f2:ec:81:97:91:35:2c:65:6c:a9:43:47:ee:4e:25:12:dd:
         a3:51:4d:84:d5:26:65:4b:b3:e4:fb:53:12:fd:2d:3b:6a:d3:
         c6:c9:de:30:f2:43:d5:7e:77:90:25:44:5b:e8:a4:4f:da:65:
         d1:2a:34:7e:47:3e:fe:10:b3:98:1f:89:1a:b8:8f:72:b6:4f:
         1a:64:b3:53:71:71:70:8f:6e:6c:5f:49:7a:97:98:a8:64:9b:
         3d:f3:ff:b4:d6:00:1c:ba:45:74:8f:23:75:4c:99:3a:87:3a:
         62:72:6b:2c:51:95:4f:f1:7b:16:e5:d1:66:21:5f:1a:10:98:
         1e:18:01:eb:1c:46:f9:a2:d6:97:08:b1:18:6c:5f:8b:bc:d4:
         8c:4b:cb:64:31:7d:0d:3c:66:dc:16:62:12:e6:a3:1d:f1:e8:
         23:fb:4c:f8:04:cd:2c:e3:78:d2:e4:3a:dd:ca:38:af:52:b8:
         46:59:0c:a6:31:43:84:a2:d5:b3:32:2e:07:b6:b8:7a:51:86:
         3a:61:ac:24:56:09:24:20:01:c7:c6:13:e8:61:19:0d:96:8f:
         67:5b:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:38:03 2026 by rpki-client