Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa
File:                     a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa (raw, json)
Hash identifier:          oBzMzoQJBcsa1xN/PVEHBEf8l0blZhPsGdH/gYkEyU4=
Subject key identifier:   E1:F5:15:FC:DF:EC:AE:43:3C:A4:53:AE:7B:D5:E5:62:00:F5:E7:DC
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584E3E5F46918AF6A1DFCC3250E0
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     54004
IP address blocks:        134.202.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:46:91:8a:f6:a1:df:cc:32:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=5d358c32-8815-484b-abc4-24c12e285804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:86:89:93:25:c8:f5:ec:17:39:da:42:78:
                    69:c9:ab:e2:56:89:36:4d:56:59:b5:e0:11:b2:84:
                    e4:68:80:2b:56:71:3e:a0:77:b6:5d:79:38:03:11:
                    d1:3c:dc:c1:21:c1:27:46:46:38:8e:12:5a:b7:79:
                    65:5b:7a:75:d3:5a:e5:e2:3f:d5:3c:bd:60:59:c5:
                    b0:b7:38:c2:a8:36:18:9a:62:c0:cf:ee:af:e0:a0:
                    fc:75:b1:fa:38:e5:10:23:c8:a5:41:67:9a:8a:5c:
                    a4:c9:c0:55:b9:91:9a:ba:69:3f:0f:8c:d0:d8:32:
                    b3:3a:01:07:58:88:64:f9:56:62:dc:75:e9:13:26:
                    d8:a4:35:ae:9d:a8:e0:ed:20:80:f7:e6:37:9e:ef:
                    e8:97:3e:4c:66:3d:de:1b:ba:d7:f8:61:93:5c:44:
                    f1:47:9f:cd:31:f5:5d:5c:06:80:c7:d8:aa:c3:ae:
                    49:dc:c0:cb:07:0f:6e:12:c4:3a:68:cc:ab:c4:35:
                    ad:4c:90:19:dc:66:c6:20:33:f5:3a:69:7f:cb:d8:
                    c0:35:69:ce:83:90:0f:0e:e5:27:ca:62:1f:11:53:
                    27:8c:b7:fd:1c:4f:53:68:6c:37:c5:a6:b6:ca:c4:
                    ef:e2:b2:83:05:cc:a0:2c:eb:bf:9d:85:2b:ae:4a:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F5:15:FC:DF:EC:AE:43:3C:A4:53:AE:7B:D5:E5:62:00:F5:E7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:42:1c:8a:4f:6e:ef:10:b5:6e:1b:e9:48:09:0b:a2:cd:
         94:28:96:fe:f1:0e:fe:3f:ac:50:a6:ed:17:fb:65:26:f0:8e:
         99:16:6c:f1:a4:ad:e3:5b:9d:11:ba:62:f6:44:f2:4e:49:74:
         32:a5:84:e3:5c:e8:0c:55:b7:cb:5c:6f:78:af:7a:97:62:a9:
         a8:9a:a9:f2:1f:36:8d:a1:1b:38:6a:1d:fd:85:1e:e8:7a:db:
         ef:d5:19:44:74:ac:eb:0c:0a:a5:5e:1b:b8:b5:d9:c8:b3:78:
         d5:76:37:b5:b5:6c:5a:af:79:15:62:ff:7f:57:68:27:c5:a2:
         3c:bd:b0:ff:dc:b3:ec:2a:96:2a:f9:91:9d:37:ed:dd:bc:84:
         8a:c9:2d:cf:51:6a:dd:be:e0:b1:17:35:90:ae:00:7b:57:01:
         8f:66:df:58:ef:37:19:a0:5a:44:0f:b0:87:0d:7c:94:5a:1c:
         9f:4a:1c:ab:4c:b4:97:1a:63:2a:c6:49:a2:93:1a:96:8a:b2:
         51:97:65:4e:5e:97:eb:bf:89:0b:22:7f:ae:d3:8f:96:69:db:
         a1:9f:df:f8:57:de:0d:55:96:26:b2:ad:8c:a6:37:74:3e:dc:
         dc:8c:4e:a6:c3:4c:41:cf:86:82:01:78:01:18:5f:1c:0f:8b:
         2c:d7:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:05 2026 by rpki-client