Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
File:                     b8d91776-1543-38be-9850-76776625fbbd.roa (raw, json)
Hash identifier:          fPu8AzG8wWofsX8bgmsgnh7H8XQdXYNCQiSejA4dWlI=
Subject key identifier:   1C:84:68:3D:23:AF:D4:52:CD:97:09:27:B5:01:6E:5D:19:CC:64:2C
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584DE6AFBEAE86033ED4F72F6D50
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
Signing time:             Wed 20 May 2026 23:11:36 +0000
ROA not before:           Wed 20 May 2026 23:11:36 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     6079
IP address blocks:        134.202.32.0/21 maxlen: 24
                          134.202.40.0/21 maxlen: 24
                          134.202.112.0/21 maxlen: 24
                          134.202.144.0/20 maxlen: 24
                          134.202.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:af:be:ae:86:03:3e:d4:f7:2f:6d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: May 20 23:11:36 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=54f5bf34-d8b2-431e-b77b-62ac79e1857c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:f0:74:15:b5:ce:fc:6d:a9:0a:2b:b0:1b:
                    0c:fb:5b:cb:f7:22:96:0b:cc:db:17:af:c3:d8:75:
                    c2:ff:f3:f5:74:b2:35:19:fb:52:bf:72:c3:6b:24:
                    43:20:02:1f:e2:8c:57:55:e5:f4:f9:c3:97:03:ba:
                    2e:99:e2:38:38:8f:47:2f:cc:1b:2f:06:6c:b1:e8:
                    3b:c5:8d:51:ad:4f:a6:b6:e6:d2:e2:6e:ee:cd:8e:
                    86:e7:a5:76:d2:1b:68:69:9b:58:2e:45:ab:d8:63:
                    e0:d6:95:5b:64:b2:27:bf:0c:46:01:bd:3d:71:75:
                    35:58:9a:a8:8b:a2:1a:0a:6e:df:9f:96:41:2d:0e:
                    42:f0:d4:7a:ce:f8:80:88:c0:32:88:5e:a9:31:1e:
                    f7:1f:3d:df:ba:54:de:45:e8:0d:e1:8e:6c:50:07:
                    cf:d5:de:3e:78:72:21:46:37:b8:fd:3f:60:4a:84:
                    db:0d:b3:36:3c:6a:49:c2:f4:71:a3:c5:4b:58:b8:
                    5d:aa:91:8a:2c:b2:37:13:0f:57:ea:f6:26:79:0c:
                    16:dd:10:6d:88:22:cb:a1:d4:b4:48:c8:fb:47:5f:
                    dc:ca:ea:93:2e:12:53:51:75:35:a6:05:1c:5e:78:
                    21:57:5e:8a:aa:18:f8:f2:cf:b5:db:4c:39:c6:b2:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:68:3D:23:AF:D4:52:CD:97:09:27:B5:01:6E:5D:19:CC:64:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.32.0/20
                  134.202.112.0/21
                  134.202.144.0-134.202.175.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:78:e6:ac:ec:77:d2:f4:91:89:c3:1a:96:09:9c:f9:1b:55:
         b8:94:35:65:44:1a:8e:a3:23:1c:f0:c9:8c:b1:bb:3b:e4:5d:
         5c:1c:2a:5e:64:58:09:c1:bb:68:ab:4f:4e:61:9f:c7:1e:d7:
         04:07:72:eb:ce:1c:ec:ac:5f:7d:0c:15:d0:41:df:2b:4a:0b:
         78:2f:82:f0:91:14:3f:88:e8:a8:11:0b:ed:10:82:27:5e:a1:
         97:fb:92:7d:21:34:36:12:bf:db:1e:61:7f:87:97:89:19:f8:
         6b:f8:f9:f6:67:4d:d7:bf:2e:b2:22:fa:2b:a9:15:d6:45:8b:
         57:e2:0d:f2:d0:f3:2a:8d:c7:ce:89:13:ee:c9:c1:38:3b:5b:
         5f:d1:be:72:d4:ec:eb:7a:f4:98:bf:fa:fe:e3:c9:01:20:a2:
         21:54:31:d3:5d:60:18:ed:05:d5:e9:dc:62:1e:78:63:04:68:
         ed:49:8d:2e:10:81:98:00:96:b1:94:08:08:fb:c5:4e:7d:0d:
         8c:23:5c:cf:1b:2d:aa:34:1d:5d:31:60:8b:b6:11:aa:fc:b7:
         98:49:94:1d:be:4f:0a:e2:3f:52:d2:23:03:85:44:62:9e:99:
         e8:f9:93:da:33:02:80:c3:df:f9:d5:26:f4:82:2f:47:9b:a8:
         0a:14:85:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:21 2026 by rpki-client