Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0c279c66-cce8-33ac-a383-340827204e7d.roa
File:                     0c279c66-cce8-33ac-a383-340827204e7d.roa (raw, json)
Hash identifier:          DMsaZNVSvCadNT3XsI3R6Y3AhRFIex0g6nvOM0jNuBU=
Subject key identifier:   2B:4E:5F:3B:9C:20:2B:18:87:7D:29:09:91:40:EB:90:90:43:BD:55
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584EE0C21222306D211A42B64580
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0c279c66-cce8-33ac-a383-340827204e7d.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     54004
IP address blocks:        134.202.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:12:22:30:6d:21:1a:42:b6:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=2ef28900-2b4b-4a5e-8a9a-cd91b02eb02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:da:68:de:21:65:48:ad:94:3a:1d:60:b1:3b:
                    d2:fa:db:01:dc:45:89:f9:65:16:e2:55:9b:35:1a:
                    38:0a:09:03:93:86:fb:6f:86:db:5c:28:1b:ab:f5:
                    df:6f:40:c1:c2:81:1f:8b:a3:66:8e:a4:7e:62:f1:
                    b5:74:74:a6:b0:38:38:c4:9a:42:b3:50:f0:51:f3:
                    2c:13:39:ea:91:f1:39:a5:a6:ef:8f:0c:8d:49:1e:
                    72:1a:e6:77:74:04:49:a6:6c:04:a3:d9:7a:60:ce:
                    fc:c2:5a:93:4d:2a:ed:ac:bd:56:ba:d1:3c:6d:e4:
                    d2:f7:f2:2d:1a:da:27:78:f3:4f:91:e9:52:10:64:
                    8a:af:81:bc:53:84:03:50:bb:b4:99:5a:97:b0:1c:
                    83:c8:99:dc:86:6d:2c:9c:f8:63:25:c4:ff:f2:bb:
                    c1:8a:3f:64:b6:e9:e8:df:a7:c8:8c:66:95:b3:29:
                    4a:8d:df:ec:72:5d:df:c5:df:64:1d:83:42:e4:ae:
                    4f:f7:fd:68:c4:72:00:69:7a:b7:99:58:2a:f3:a0:
                    78:83:5a:1d:86:24:a1:b8:b1:21:6b:ef:e8:be:b3:
                    37:2b:24:96:ae:52:9d:99:55:a9:6b:47:52:be:04:
                    f2:d7:8f:01:1a:14:62:15:f7:67:22:03:06:dc:72:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:5F:3B:9C:20:2B:18:87:7D:29:09:91:40:EB:90:90:43:BD:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0c279c66-cce8-33ac-a383-340827204e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:62:40:c9:02:0c:1d:55:25:23:5a:f7:84:cd:ea:93:80:f3:
         14:c1:8c:64:5e:49:02:88:08:76:a7:41:0f:53:ae:2d:b2:41:
         82:c2:39:0d:f9:d0:b3:34:83:ad:3d:07:de:39:02:47:a1:06:
         bd:80:9d:8d:33:37:1c:d2:df:96:24:e4:e0:f3:90:d8:37:9a:
         67:10:1b:7a:9f:cf:e8:62:e3:35:76:5a:af:0e:51:ff:31:d2:
         72:05:11:32:17:5a:cb:04:bd:4c:17:44:09:85:36:98:36:38:
         51:c1:2e:7a:01:3a:31:b4:4c:41:e0:5d:f2:11:91:1f:83:a6:
         ed:e8:a1:df:50:90:bc:1c:f3:27:6f:2a:1b:80:83:73:99:4c:
         1f:b3:a4:64:18:e1:df:fd:ff:46:86:b3:1a:fa:05:b4:16:2d:
         d4:65:1e:0c:05:38:59:13:72:eb:19:b0:37:61:33:eb:88:a4:
         90:b0:d3:b9:d0:28:52:07:2b:0c:6c:77:2e:b3:2b:d0:d5:f4:
         f9:3a:53:c9:a9:bc:40:f6:17:7e:48:87:38:6b:8e:5e:f8:8f:
         85:82:00:70:60:17:97:06:73:f1:1a:fc:e4:0b:f0:d3:8f:70:
         30:43:91:92:d9:1c:4b:04:00:85:80:28:7b:a1:9b:d4:fe:5f:
         47:ae:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:22:09 2026 by rpki-client