Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/beab931b-c14d-3c7e-a218-0a8ad3ecdc22.roa
File:                     beab931b-c14d-3c7e-a218-0a8ad3ecdc22.roa (raw, json)
Hash identifier:          G+cVquxutRn7B5tYUecDIIdi1uhS4moDvL+M6sp7xOc=
Subject key identifier:   3C:6D:B9:3B:F3:A2:15:12:2C:9E:CC:D1:4C:6E:49:19:75:36:47:39
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584EC26EA9B8B48B9197AB880080
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/beab931b-c14d-3c7e-a218-0a8ad3ecdc22.roa
Signing time:             Fri 07 Aug 2026 16:18:18 +0000
ROA not before:           Fri 07 Aug 2026 16:18:18 +0000
ROA not after:            Mon 02 Nov 2026 14:56:20 +0000
asID:                     402265
IP address blocks:        134.202.192.0/24 maxlen: 24
                          134.202.193.0/24 maxlen: 24
                          134.202.194.0/24 maxlen: 24
                          134.202.195.0/24 maxlen: 24
                          134.202.205.0/24 maxlen: 24
                          134.202.207.0/24 maxlen: 24
                          134.202.209.0/24 maxlen: 24
                          134.202.216.0/24 maxlen: 24
                          134.202.222.0/24 maxlen: 24
                          134.202.223.0/24 maxlen: 24
                          134.202.227.0/24 maxlen: 24
                          134.202.230.0/24 maxlen: 24
                          134.202.235.0/24 maxlen: 24
                          134.202.236.0/24 maxlen: 24
                          134.202.238.0/24 maxlen: 24
                          134.202.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:6e:a9:b8:b4:8b:91:97:ab:88:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Aug  7 16:18:18 2026 GMT
            Not After : Nov  2 14:56:20 2026 GMT
        Subject: CN=a7755d3c-4ff5-44fd-82cd-69eeb5e14611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:9c:96:40:ca:d5:70:a2:f4:b6:ec:33:8a:
                    ff:80:ca:6b:55:a0:af:13:f0:5d:72:55:6f:54:1a:
                    e6:35:e9:04:99:c7:63:65:e2:ac:0b:ce:ba:93:5d:
                    a3:34:67:34:42:5a:ca:4b:0d:c2:03:19:66:59:18:
                    17:2b:3e:b2:68:ed:15:e5:db:3d:49:af:1e:5b:ac:
                    76:a8:ad:d8:8c:4d:89:7d:6f:f1:02:2e:f8:69:8f:
                    ac:c9:74:f3:6c:ac:91:ad:bf:ed:34:54:28:3a:ae:
                    c9:fc:7a:4a:fb:67:2c:83:d5:02:ab:07:d7:e7:bc:
                    e8:43:ae:5d:64:5c:a8:6b:a7:ef:60:63:7c:bf:46:
                    01:44:5d:8f:2d:c8:ca:c1:7f:66:c0:c3:e1:c1:47:
                    47:bc:7e:ad:b4:39:2c:da:9a:c6:bb:82:e4:ba:c9:
                    e5:58:aa:4e:3e:aa:5a:72:b0:11:0b:5b:c5:9c:c4:
                    19:25:b2:59:b1:14:62:dc:70:5b:09:7c:31:9b:f2:
                    2b:e0:25:45:3c:76:47:d9:52:72:29:f7:12:a5:8c:
                    e8:f5:0b:53:e4:6d:c8:c6:ba:ee:37:df:99:ba:79:
                    b5:c7:59:24:0d:b9:72:8d:00:a1:d8:60:8b:17:41:
                    89:ba:5c:fb:87:0b:ea:ab:66:a5:9f:38:05:d3:48:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:B9:3B:F3:A2:15:12:2C:9E:CC:D1:4C:6E:49:19:75:36:47:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/beab931b-c14d-3c7e-a218-0a8ad3ecdc22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.192.0/22
                  134.202.205.0/24
                  134.202.207.0/24
                  134.202.209.0/24
                  134.202.216.0/24
                  134.202.222.0/23
                  134.202.227.0/24
                  134.202.230.0/24
                  134.202.235.0-134.202.236.255
                  134.202.238.0/24
                  134.202.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:3d:64:7c:09:df:19:5b:7c:8a:e5:fe:ea:71:eb:5c:d2:
         de:fa:7e:c3:35:0f:7e:b8:a0:2c:cd:5b:45:a2:f8:bd:97:e1:
         ac:9b:fb:45:9e:7d:3d:29:ce:ba:67:97:fb:c2:a3:6d:41:df:
         44:0a:1f:71:4c:7e:ed:a9:3b:cb:0e:7a:e6:de:99:54:ff:50:
         44:6c:06:ee:86:5e:02:c1:f7:ff:20:c7:64:92:a4:11:ce:3e:
         be:42:77:3f:7d:c2:75:8d:4d:13:2c:e8:02:e1:10:6e:5d:65:
         a1:9e:41:78:2f:b0:0c:1b:1f:11:04:04:b2:96:d4:2e:64:ec:
         42:8d:a2:9a:70:ba:bd:e4:98:12:80:6f:e7:17:01:84:4f:fe:
         83:66:45:5b:2f:d1:56:ad:c4:5f:29:84:83:ee:a4:b1:c6:25:
         e1:cd:b5:18:f0:34:47:42:04:ac:a0:c9:8e:50:c8:75:8e:da:
         7f:3e:22:df:c8:b0:06:29:0b:cf:d7:0c:86:57:58:42:8f:d1:
         66:67:18:4d:9e:88:26:dd:05:3c:0b:59:1d:3f:d0:3f:f1:5d:
         63:b9:f4:0c:80:77:7f:d2:a3:1e:48:b5:9b:b9:2f:d7:8b:76:
         39:6c:d6:6a:75:8b:fd:a3:fa:77:92:fc:89:83:01:ba:58:ac:
         f8:10:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 22:28:43 2026 by rpki-client