Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/01fcde38-7bee-3e19-9f58-fcf7f7971734.roa
File:                     01fcde38-7bee-3e19-9f58-fcf7f7971734.roa (raw, json)
Hash identifier:          1s7iboKSw8JZIQffdOMATIjoCkTSYAImGMMLXNtmuh4=
Subject key identifier:   10:2B:1D:B4:F6:3F:AE:7A:E5:10:DF:01:49:0F:07:D3:E9:60:DF:12
Certificate issuer:       /CN=7b3f3998-8e70-47c2-94e8-307a39db87d5
Certificate serial:       010D0C9F4328584EABB6E10699E89F249C64B180
Authority key identifier: 10:AF:4A:6F:F0:86:60:37:47:CA:9A:A5:06:6F:4F:42:78:36:F5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/01fcde38-7bee-3e19-9f58-fcf7f7971734.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     402123
IP address blocks:        131.143.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:e1:06:99:e8:9f:24:9c:64:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3f3998-8e70-47c2-94e8-307a39db87d5
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=ec6e1634-1297-48e5-952e-a1ad583c0550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5a:c4:e1:a3:4f:ee:43:33:d7:1f:d9:2a:c6:
                    83:33:85:af:87:fc:eb:fd:67:67:8d:4a:5c:8b:4f:
                    24:cc:5d:2e:50:ce:7a:3a:2c:cf:50:b7:38:d6:98:
                    3f:a3:c7:30:ea:3b:3c:5c:08:83:62:78:3c:5f:a2:
                    15:ea:c0:9e:bb:74:0b:4d:dd:59:e0:c2:a2:25:a2:
                    cb:75:28:78:29:1b:fd:3b:43:9e:e7:30:51:ec:70:
                    34:8d:1a:87:fd:8d:95:28:94:0d:57:fb:a1:73:8c:
                    bf:84:55:8d:1b:2f:85:5b:24:d4:89:04:06:57:aa:
                    17:0a:a9:30:d3:6c:97:42:f7:c9:d1:94:fe:27:e3:
                    98:83:e4:67:b1:ae:74:76:cc:62:a1:fb:36:3a:80:
                    dd:a6:94:c4:d7:89:0c:ff:b6:e8:57:24:98:0d:46:
                    4e:33:b4:92:86:3f:ec:92:a7:d4:d4:d0:f7:fc:58:
                    9f:50:7c:89:21:6c:c0:38:ee:85:4c:6f:a3:4b:4b:
                    bc:7b:99:3e:f6:21:c4:10:73:a1:ca:91:71:e3:2f:
                    43:1e:d1:35:79:a1:64:52:91:9c:88:a1:d6:da:7d:
                    4b:64:0c:01:69:79:60:02:d9:0d:ff:44:a6:13:f5:
                    83:81:6d:db:02:a9:f2:56:77:44:89:dd:f2:c3:27:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2B:1D:B4:F6:3F:AE:7A:E5:10:DF:01:49:0F:07:D3:E9:60:DF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/01fcde38-7bee-3e19-9f58-fcf7f7971734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5/7b3f3998-8e70-47c2-94e8-307a39db87d5.crl

            X509v3 Authority Key Identifier:
                keyid:10:AF:4A:6F:F0:86:60:37:47:CA:9A:A5:06:6F:4F:42:78:36:F5:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7b3f3998-8e70-47c2-94e8-307a39db87d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:45:11:03:66:e5:2c:c1:d4:e4:80:95:bc:38:50:28:e1:03:
         7f:a8:73:e7:d6:ae:dc:6b:07:62:c8:2c:77:3e:37:88:81:30:
         de:dc:92:2b:c6:82:8f:5c:68:9a:6b:1e:12:56:1d:fc:c4:8f:
         d2:88:a1:90:de:b5:ab:07:f2:5d:b6:04:a7:50:0e:b8:32:bd:
         7c:b4:2d:47:f8:3d:dd:12:86:47:50:20:7e:a2:c3:ae:2d:c1:
         58:12:6d:0c:89:13:13:85:85:65:c6:db:99:9e:b4:eb:a1:08:
         70:f3:9b:a9:e4:7c:de:f3:e5:85:32:bd:b7:ee:78:72:5f:94:
         a8:54:38:d6:a0:ec:0d:81:94:6f:fb:e4:b5:52:7b:5c:d0:46:
         03:e4:0a:3b:92:9a:ad:1b:fa:36:65:c0:7e:9a:04:15:70:64:
         8d:61:74:2e:5c:b2:a3:b6:b1:7c:f9:d4:2c:55:fd:b7:8f:15:
         c7:a5:76:4a:58:3f:10:e5:29:3b:40:3c:ce:18:39:c2:f2:bb:
         8b:53:79:5d:41:61:30:8b:97:a0:07:6a:77:f4:14:66:fc:ec:
         cc:6f:f5:e8:f1:d5:97:3c:0a:fe:bb:e0:6d:4f:eb:59:2a:e4:
         e2:b7:2e:1d:6d:36:2a:0c:a3:12:3e:89:43:f1:60:04:17:30:
         a8:88:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:14:26 2026 by rpki-client