Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/5276aa0e-868b-3818-9661-626246ad5487.roa
File:                     5276aa0e-868b-3818-9661-626246ad5487.roa (raw, json)
Hash identifier:          210mYUsvLKdB9bvJIkbMfzyw62JaCeiCNyRn/c1XVgI=
Subject key identifier:   E5:CA:7E:46:64:54:D8:61:36:11:93:58:D2:44:23:B7:73:8A:80:09
Certificate issuer:       /CN=2159f759-d1b9-48f6-8b79-5ce42cb086e0
Certificate serial:       010D0C9F4328584EABC0FAB3A9C1A29ACAE24800
Authority key identifier: BC:F6:CE:97:95:8C:6B:D5:1F:D9:B7:8F:5F:BE:74:03:67:76:15:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/5276aa0e-868b-3818-9661-626246ad5487.roa
Signing time:             Thu 30 Jul 2026 13:20:34 +0000
ROA not before:           Thu 30 Jul 2026 13:20:34 +0000
ROA not after:            Wed 28 Oct 2026 13:20:34 +0000
asID:                     398371
IP address blocks:        134.195.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/2159f759-d1b9-48f6-8b79-5ce42cb086e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/2159f759-d1b9-48f6-8b79-5ce42cb086e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:c0:fa:b3:a9:c1:a2:9a:ca:e2:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2159f759-d1b9-48f6-8b79-5ce42cb086e0
        Validity
            Not Before: Jul 30 13:20:34 2026 GMT
            Not After : Oct 28 13:20:34 2026 GMT
        Subject: CN=84359229-d078-4c1b-a46f-4195b9b0141f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:da:06:63:d7:f1:05:cf:b2:94:4e:c4:89:
                    8b:7b:48:8c:80:ac:85:84:7a:13:8d:4a:a5:bb:f7:
                    13:28:e4:09:e3:87:eb:1c:07:8f:d2:da:9c:d7:c9:
                    3f:af:01:22:0b:8c:28:24:6f:6b:fa:97:e0:56:4d:
                    98:7c:bd:63:c7:5c:0e:62:cd:e7:e4:cc:44:7a:3e:
                    2c:22:10:05:6a:aa:4f:63:89:66:27:8c:b6:fb:88:
                    cc:23:8d:18:d6:6c:08:7e:ae:67:ea:39:1d:07:d5:
                    6c:4f:75:3b:bf:b4:20:cc:6d:b1:60:cb:9b:fc:8f:
                    de:d8:36:24:a6:7b:5e:94:e8:5a:3b:9d:dc:32:09:
                    b3:d1:e5:a7:83:90:74:5e:cc:e1:36:78:cd:df:90:
                    c5:c1:63:04:6d:09:42:c8:4c:93:a4:45:79:1b:ca:
                    d3:63:23:c8:65:f1:88:50:7a:c4:19:20:b5:3e:2f:
                    46:16:95:17:7c:60:d2:68:68:16:29:00:15:62:23:
                    c1:01:53:9d:7f:90:4a:89:eb:68:6b:40:04:3b:fe:
                    d1:74:9c:95:cd:fa:ef:92:df:28:a2:88:02:7b:15:
                    e2:8c:95:27:a9:62:10:82:f1:f7:91:dc:83:a2:20:
                    2a:91:00:71:80:12:88:74:dd:ba:d2:e4:50:0c:6c:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CA:7E:46:64:54:D8:61:36:11:93:58:D2:44:23:B7:73:8A:80:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/5276aa0e-868b-3818-9661-626246ad5487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/2159f759-d1b9-48f6-8b79-5ce42cb086e0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F6:CE:97:95:8C:6B:D5:1F:D9:B7:8F:5F:BE:74:03:67:76:15:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:87:1b:ca:e4:b1:a6:ac:57:ae:97:43:8d:02:26:a9:fc:44:
         ed:dd:2d:9b:29:40:b9:f3:3b:3d:85:1c:84:25:0d:21:05:da:
         f5:56:2f:75:fe:ec:6e:78:ac:c2:b9:f1:ab:a3:90:c0:3b:13:
         db:16:8f:53:66:1b:8d:1e:9e:61:e7:ed:da:ba:07:71:72:85:
         72:51:d5:66:5b:d0:05:6e:a8:8f:9b:d9:ef:cf:00:79:fc:ee:
         d7:6c:1a:8a:9e:da:08:3e:ae:32:bd:dd:03:0c:95:c1:cb:db:
         bf:d3:64:f1:76:b1:58:36:d9:93:5b:12:b7:ca:7a:be:2a:ab:
         1e:f5:f2:e1:a6:07:af:bf:c6:5c:95:a1:3c:15:dc:0b:56:76:
         03:e5:bf:ef:d7:66:df:62:3b:b7:07:65:a3:ab:a7:df:c3:10:
         6e:4b:10:4d:61:0d:85:f2:bf:bb:83:e7:43:f5:e6:17:8e:21:
         56:c0:45:f2:f9:93:e7:d1:3c:d4:6d:1a:ce:df:a9:77:06:8c:
         6d:43:b7:26:9e:16:56:2b:d2:6b:d6:00:47:01:f4:8f:90:74:
         ef:de:2e:e1:c5:89:6f:f0:b8:ab:4e:dc:81:f6:3f:f7:3a:6f:
         df:71:16:6a:ba:20:c1:00:10:9c:cb:15:e0:ca:4e:a9:ff:6c:
         de:c7:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 23:28:27 2026 by rpki-client