Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa
File:                     a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa (raw, json)
Hash identifier:          f4iVg+C2sioob4DgLpjRxJouxG+ayxpZt9iA1tunlQA=
Subject key identifier:   B2:5F:FE:60:1D:1A:0F:D8:76:89:F6:44:0A:FF:5C:69:67:F2:8F:98
Certificate issuer:       /CN=ff58fb87-11da-4b05-b322-2070c2639fa7
Certificate serial:       010D0C9F4328584F5E62C4068D65D3D7ABB63400
Authority key identifier: 02:1A:0A:17:9D:49:29:1F:8C:B0:63:92:C3:31:DE:DD:EC:EF:8F:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     40591
IP address blocks:        134.82.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c4:06:8d:65:d3:d7:ab:b6:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff58fb87-11da-4b05-b322-2070c2639fa7
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=6f5f7b83-8f2d-4934-b5f1-af47afc6b00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:06:53:e2:3c:7b:47:6f:2b:67:26:e3:af:
                    5c:db:20:72:a1:35:6f:d9:8a:3c:29:d3:dc:9d:49:
                    ec:59:1d:94:45:92:c3:d5:ca:b7:6f:ef:26:ec:ab:
                    13:bf:a5:e3:d7:d2:e8:4f:85:ce:a9:1f:8e:86:17:
                    64:7c:50:c0:dc:16:06:e1:8e:7e:9e:5a:91:a7:1a:
                    54:38:28:6d:4d:01:f7:54:d3:d6:a2:94:7c:81:b0:
                    8f:4f:18:74:7a:1e:5c:f7:8d:d5:e7:14:6b:e8:49:
                    eb:ff:ea:f5:45:ef:cd:d9:56:13:04:a1:af:6a:cc:
                    12:25:e8:1b:b5:b9:a1:5a:86:ff:b8:4d:fe:8f:e8:
                    77:dc:86:0e:05:f2:b9:14:af:78:80:01:b7:18:b4:
                    1b:ff:92:75:1b:3d:4d:e6:47:df:97:07:62:4c:b3:
                    6d:5e:78:9c:65:42:8f:d7:59:bc:74:50:93:77:a9:
                    f8:2e:c5:7b:e3:78:b1:bd:2e:4c:30:49:3f:70:b6:
                    31:11:46:b1:fd:df:f9:6f:8d:b9:17:6f:91:ab:a6:
                    f6:46:67:b8:45:f0:ac:be:fa:ee:52:ef:7d:bd:25:
                    dc:a9:25:32:5e:e2:4b:48:c2:b4:82:60:42:8b:c6:
                    a3:d0:26:bb:18:29:12:41:ea:ac:1a:aa:d8:4e:a6:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:FE:60:1D:1A:0F:D8:76:89:F6:44:0A:FF:5C:69:67:F2:8F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.crl

            X509v3 Authority Key Identifier:
                keyid:02:1A:0A:17:9D:49:29:1F:8C:B0:63:92:C3:31:DE:DD:EC:EF:8F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.82.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:7f:2d:71:3c:04:04:0f:c2:99:a3:e1:41:eb:30:36:2b:54:
         86:6d:bc:db:6e:4a:30:ae:92:b1:f0:56:f1:96:14:d6:e6:a5:
         27:b9:5c:b6:85:9f:cd:ff:4e:aa:59:19:6a:fb:1d:95:a1:00:
         b7:b0:fa:38:51:cc:f4:f4:eb:9d:62:bb:b8:7a:43:18:c3:61:
         37:03:03:73:f3:01:6f:e4:90:5a:12:1d:56:ae:e0:7e:84:61:
         b8:5a:6a:59:5e:fb:1b:3f:aa:28:f7:f2:a1:49:62:56:ec:8e:
         74:93:68:73:fd:01:69:b9:09:b1:60:05:4b:90:7a:6a:5f:f5:
         ec:17:2b:77:a1:b2:a0:76:c7:64:21:15:44:62:cf:2d:9b:35:
         79:ba:f7:89:d2:b3:b9:b3:78:89:c9:44:d9:ec:eb:49:b0:88:
         24:d3:07:69:b2:16:ad:64:66:5f:4a:f7:e2:9a:c1:ad:eb:3b:
         97:64:46:ff:e8:e7:f0:30:38:25:7f:42:f8:c2:6c:a1:ff:bb:
         43:e2:4f:8d:4f:1b:5e:86:62:e0:7b:c0:b9:e4:40:1e:63:77:
         48:5a:a8:52:16:e5:ec:d3:bb:37:8f:3b:92:cf:36:23:d2:a2:
         32:0f:39:34:46:2a:c7:33:b7:38:0d:c9:ad:26:83:ae:10:b3:
         39:30:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:00 2026 by rpki-client