Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/2efaa0b7-1377-3a4a-9efb-a93da588d2b0.roa
File:                     2efaa0b7-1377-3a4a-9efb-a93da588d2b0.roa (raw, json)
Hash identifier:          q47S08JYQp5is25y0LaDQ21WpcLsCmfpZyMbQfzoGjk=
Subject key identifier:   29:32:B2:92:07:97:9E:C8:30:EF:9C:AE:AD:8A:CD:D6:96:D7:41:A6
Certificate issuer:       /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
Certificate serial:       010D0C9F4328584E09CB43B4C0FB486E90636D00
Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/2efaa0b7-1377-3a4a-9efb-a93da588d2b0.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     26077
IP address blocks:        132.147.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:43:b4:c0:fb:48:6e:90:63:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=c228be43-f464-400c-b10e-28a7cf539682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:96:59:7f:63:58:5d:b9:dc:79:b3:5c:e9:
                    76:51:e9:cc:ae:2a:99:0e:13:a5:86:63:48:ea:dd:
                    22:f4:37:b8:63:d5:ef:1f:22:63:41:83:87:fb:ec:
                    25:0b:1a:9a:ab:2f:3e:d8:b8:41:6e:c6:15:d4:12:
                    b9:1b:78:2a:20:84:d5:d5:38:54:74:15:1f:57:df:
                    d6:f1:80:5e:ff:95:a7:4a:c0:75:52:f1:8b:f2:ae:
                    fb:ae:1b:72:a8:a9:aa:97:67:0b:f4:d7:d9:78:69:
                    2b:e7:1d:54:d8:7c:96:87:16:6d:88:1a:84:7e:1c:
                    0e:db:dc:17:90:31:25:d1:6d:27:d0:1d:bf:83:f1:
                    c0:ba:9c:ff:5d:a0:c7:4b:0a:cd:91:f9:da:f9:c6:
                    2f:0b:2f:45:2f:63:79:7b:63:9c:dc:aa:8c:b5:01:
                    ba:c6:68:3d:1a:79:70:4f:72:92:32:3c:ae:5e:89:
                    d7:10:64:74:a2:63:52:35:f0:9b:35:84:c3:89:81:
                    33:93:ec:9f:3f:da:c9:92:ec:27:61:5b:c2:49:3d:
                    84:ba:26:57:ca:4f:49:7f:85:ae:ed:f6:1c:0f:eb:
                    55:c3:de:87:e7:72:73:11:cd:61:07:cd:f1:79:0d:
                    ef:af:79:67:a1:a8:8c:91:19:4d:ee:8f:aa:6b:42:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:B2:92:07:97:9E:C8:30:EF:9C:AE:AD:8A:CD:D6:96:D7:41:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/2efaa0b7-1377-3a4a-9efb-a93da588d2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.147.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:13:d7:5a:97:d1:d7:cb:fa:70:90:44:53:a0:d6:55:40:eb:
         c6:8c:7f:e8:cc:c5:52:30:4e:51:14:aa:09:91:93:c9:72:c2:
         5e:a3:62:9a:32:5b:be:8b:5b:1d:e1:ca:cc:0d:0b:3b:b3:80:
         d7:7d:c3:c8:76:c6:a9:dd:24:59:f0:93:2e:2e:24:aa:4d:78:
         a1:38:d3:fd:75:a3:0f:3b:b2:b8:bb:d1:c5:b7:c2:49:29:3c:
         2c:38:bd:71:b3:a0:b6:9e:61:7c:2b:c3:aa:e8:ba:ce:6b:cd:
         b6:ae:50:48:c6:be:8c:e5:66:fe:33:7a:86:bf:0a:67:0c:1f:
         de:47:13:a1:45:11:3f:9e:3c:cc:d6:02:07:65:81:c6:7a:2d:
         d6:41:df:ae:b8:80:44:7e:20:d7:6f:9b:bb:9a:17:9d:7f:bb:
         f9:e2:7d:fb:1a:d0:28:db:cd:15:de:e1:67:2f:dd:e5:79:85:
         d2:73:e1:0c:26:9c:27:98:d6:0c:52:86:11:96:f8:e8:f1:73:
         1a:37:8e:cb:d5:03:3d:3d:33:76:02:b6:9f:1b:da:f7:37:6b:
         66:18:b9:52:55:91:36:70:e3:eb:c6:74:25:42:6c:35:c8:5e:
         fc:ac:af:33:fc:71:64:2a:eb:1c:e7:c5:ef:de:0e:10:8d:3c:
         3a:43:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:49:33 2026 by rpki-client