Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ae5d7173-b54e-3549-9900-614998da1cf0.roa
File:                     ae5d7173-b54e-3549-9900-614998da1cf0.roa (raw, json)
Hash identifier:          dkd1fBl78bKzBxoKAFkOvO00DlO+1KA0lVmumDGl/Hg=
Subject key identifier:   B9:F1:C2:66:23:52:43:89:EB:2A:39:BB:FB:9C:93:26:25:3D:13:01
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584FA1632C61F633E34BB8206600
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ae5d7173-b54e-3549-9900-614998da1cf0.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     40317
IP address blocks:        137.119.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:2c:61:f6:33:e3:4b:b8:20:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=f23e000b-8161-44a3-8bce-dca86ca6019f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:3b:b9:d9:41:02:da:b5:7f:b6:8a:46:47:
                    00:2a:2b:dc:f5:6f:a9:68:2c:36:52:68:7f:c5:83:
                    54:12:ae:64:d6:02:4d:6a:12:a8:db:f5:8a:5d:b9:
                    a2:53:23:fe:a8:f3:e6:eb:cd:11:bb:b4:ea:5b:54:
                    31:cb:ef:f2:b1:66:40:f4:52:25:27:c6:f2:ae:ce:
                    ea:38:47:c2:05:69:5f:ce:47:2f:9b:8c:f5:2f:ce:
                    c4:a3:43:77:ce:0b:6c:d8:30:1c:c9:aa:1b:5b:a8:
                    b2:b6:e4:7a:c3:d8:85:c1:45:da:de:2f:26:25:13:
                    4b:2e:a7:07:2d:c7:2c:1b:6b:f8:b2:87:b4:09:6f:
                    2c:c1:91:e7:ce:d5:a1:05:17:59:f6:22:d2:1f:3e:
                    d7:9d:7e:0a:17:7c:75:d8:e1:17:7f:31:fd:79:0f:
                    e0:96:8e:cb:e3:24:d5:53:36:f0:ad:48:15:84:d8:
                    b8:20:4f:48:99:98:d4:29:b5:16:91:f3:4c:9d:04:
                    71:a7:ab:23:ed:82:6f:ed:9c:24:7f:55:a5:cb:cf:
                    dd:8b:5d:de:00:54:d7:97:a3:f6:75:fd:26:21:34:
                    3d:92:55:e4:17:03:7a:ae:e2:f3:71:a6:57:9c:bc:
                    9b:e7:80:17:4e:76:23:1d:08:9d:60:e4:eb:71:e2:
                    be:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F1:C2:66:23:52:43:89:EB:2A:39:BB:FB:9C:93:26:25:3D:13:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/ae5d7173-b54e-3549-9900-614998da1cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:30:aa:76:fc:64:d3:92:3f:d5:d0:f2:52:5a:3a:fb:8b:
         d3:10:d4:ad:89:24:88:ed:37:21:85:2b:2d:99:ae:a4:1b:75:
         7f:8f:18:57:0d:7a:17:48:61:b0:c9:57:d9:cd:09:0b:08:5e:
         9c:10:76:aa:be:ac:74:76:65:34:bb:08:5a:e8:f6:18:57:46:
         14:61:db:1a:85:32:a6:7f:97:71:83:0f:73:83:1f:aa:bc:8d:
         18:0f:79:6c:d0:00:5e:a1:39:33:83:76:d8:f2:9e:08:b0:92:
         56:85:c6:3c:30:9c:3b:0a:c8:34:ea:1e:99:a9:fe:b1:bc:1a:
         38:25:1b:75:44:8f:d5:98:f8:a3:30:96:bf:66:30:3e:bb:f6:
         ec:78:b0:e6:55:6c:c3:fc:7e:f8:43:3b:f6:a0:c1:9b:6d:a2:
         52:a2:41:d0:96:00:2c:70:1a:dc:2c:c3:1a:ba:6f:5d:77:6b:
         7a:7b:5d:1a:70:69:48:8d:dc:4e:21:6d:71:5f:a0:c7:e2:b8:
         ad:38:50:3d:18:f5:99:5e:e5:ee:c1:11:a3:06:9b:0a:e3:6e:
         08:5c:02:1f:32:2e:10:b4:c6:3c:11:27:9e:42:64:94:13:1d:
         cc:ae:f3:8a:c2:bb:dc:4d:a7:b6:dd:87:fa:9b:7d:c4:98:5a:
         09:f3:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:12:48 2026 by rpki-client