Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/3412797e-e8a9-32c5-8f98-60796eac9bfd.roa
File:                     3412797e-e8a9-32c5-8f98-60796eac9bfd.roa (raw, json)
Hash identifier:          Rska6rEjBjtSFhSySnAeJ7qTBXxEQW1lD+TQ+qlaKOk=
Subject key identifier:   34:8A:96:7C:14:C2:47:DD:80:B2:0B:D0:17:5D:CB:B1:18:A5:12:1D
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F4328584EE7BC978D9CB802DDBCE52480
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/3412797e-e8a9-32c5-8f98-60796eac9bfd.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     200658
IP address blocks:        134.195.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:97:8d:9c:b8:02:dd:bc:e5:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=f5d29705-e268-4416-bb81-b889f4f3cfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:4f:16:f0:b2:63:6c:8e:8f:ce:fc:cd:2d:
                    bf:92:66:bb:01:d5:61:42:36:39:02:77:81:28:bc:
                    77:10:9c:80:77:41:e7:9d:9f:47:d3:a5:49:7a:36:
                    15:cd:bb:03:cc:67:3c:61:2e:e7:8e:52:46:96:45:
                    2c:d0:7b:0a:9c:a5:c5:66:b6:bd:c4:89:c0:1d:85:
                    1b:e9:0b:8d:fa:e8:a9:e7:8e:77:16:f4:dc:f0:b4:
                    32:2b:0a:ff:c8:2b:a8:35:52:ae:8d:ce:c6:1c:a8:
                    66:4e:2f:40:41:49:19:d8:33:0f:82:50:7f:44:5c:
                    17:95:9a:3f:55:4b:cd:81:d9:da:83:4b:d2:70:9a:
                    48:54:44:19:22:6b:b7:e4:e3:27:4e:b4:7f:14:b2:
                    85:6a:37:43:45:2a:7e:bd:cc:fa:f8:d5:59:a9:ae:
                    02:f0:3d:76:54:81:07:4f:e0:f4:9c:e1:3c:33:90:
                    1d:f1:c1:1a:b3:de:5a:76:c8:75:d3:6d:6f:32:bc:
                    28:8e:b5:60:86:3a:bc:6b:a3:3c:fe:eb:43:85:85:
                    b1:71:1e:ad:e8:bd:f8:5e:40:86:a4:0d:0a:ac:e4:
                    2f:5a:a3:27:99:e3:0d:8b:3a:ae:f0:9c:e4:8f:56:
                    5b:6d:ad:ca:e5:bf:0d:de:8d:19:77:64:bf:3a:4c:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8A:96:7C:14:C2:47:DD:80:B2:0B:D0:17:5D:CB:B1:18:A5:12:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/3412797e-e8a9-32c5-8f98-60796eac9bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:ea:18:94:55:1b:81:6d:ce:ad:e2:26:77:b9:37:02:a1:
         19:a1:a5:04:2b:46:07:00:9c:29:07:22:ef:c6:ea:39:16:33:
         89:6d:cf:cc:30:fb:5c:84:16:9a:06:25:ca:52:ad:bc:d0:01:
         e2:3a:d9:36:db:e3:4c:b6:fd:e9:99:38:63:51:fb:2b:63:2a:
         a8:40:06:5b:dc:8d:3b:e8:8c:4f:ef:d6:9b:2c:49:57:c6:73:
         39:2d:2b:68:2a:af:82:0c:e3:e8:71:a1:50:df:d1:5f:8e:f8:
         7d:03:4a:0f:ec:33:fd:e0:3b:1f:1d:13:86:f1:39:80:f5:87:
         e5:fc:03:2a:9f:38:c8:9e:28:7c:b0:26:bc:d9:6d:2c:37:b9:
         f9:c6:3d:f0:0a:68:44:d0:d3:50:3f:e6:44:1f:b0:19:9b:c9:
         36:fa:d1:4a:75:76:26:a5:54:30:77:de:51:05:c9:d6:78:9d:
         d6:72:a9:18:dc:59:f3:60:10:9e:a5:d3:24:ba:8b:e9:9c:f4:
         1a:05:d0:f9:d1:03:72:40:03:4f:c5:45:a0:51:54:c4:e7:5d:
         d7:4a:01:50:39:3e:ca:aa:f7:2c:c8:07:65:44:35:97:1e:9d:
         69:52:48:11:02:cc:20:dd:4e:24:5c:68:d5:33:8a:2a:4b:d2:
         19:d8:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:38 2026 by rpki-client