Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa
File:                     0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa (raw, json)
Hash identifier:          UdY2yNIRzcq4nKRaqTw45M/qHJqBcpj2MsD+nHpyXz0=
Subject key identifier:   20:50:D2:64:83:E0:89:C8:8C:48:F5:A1:E8:C9:63:9E:24:8D:46:E4
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584F94D33FA6D7999E686F7BAB40
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     20454
IP address blocks:        131.153.142.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:3f:a6:d7:99:9e:68:6f:7b:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=78667407-30f9-4dc8-92a6-1b9b09217341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:b9:8f:ca:fb:42:86:e4:2d:c2:2b:9b:a0:
                    2b:73:c1:26:40:a3:b5:4e:89:68:cd:04:9b:89:57:
                    6e:aa:92:a7:40:cf:01:7b:fa:40:cf:44:2b:5e:7e:
                    f4:2f:85:55:a1:49:fe:21:e9:0d:0b:3f:76:16:f9:
                    61:fe:14:de:8a:11:6a:ff:a2:be:ec:2f:a7:87:94:
                    48:ac:17:fb:08:c5:3c:28:ff:1d:fa:dd:ee:1a:cb:
                    ea:35:5b:03:a0:a4:61:de:ad:10:db:f0:dd:fe:3b:
                    97:4d:68:77:42:dc:8d:d0:6d:78:3e:58:29:de:7d:
                    d2:6c:f2:e4:59:b3:ea:34:8f:b0:84:18:02:06:b3:
                    b8:49:a6:c1:cc:b4:b7:7d:28:8f:27:d0:88:04:8d:
                    61:7b:f5:d6:47:33:63:f9:2e:89:eb:d7:c1:21:54:
                    c6:3f:25:bd:ac:71:e4:3e:ca:b7:cf:a7:0c:51:8a:
                    5c:34:e6:a1:f3:25:1a:76:d0:3b:b2:05:5c:1e:8a:
                    bb:f0:9f:52:88:18:52:c6:e5:04:55:07:91:56:0f:
                    4c:af:40:a6:b2:53:40:78:c0:ab:29:67:84:fc:ec:
                    8d:a8:f3:78:4a:0d:6e:63:7e:39:e4:ef:4c:91:44:
                    c1:d0:d7:70:b5:81:70:04:5c:d8:f1:9a:1a:7a:aa:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:50:D2:64:83:E0:89:C8:8C:48:F5:A1:E8:C9:63:9E:24:8D:46:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:05:0f:e8:fb:28:ce:af:c0:32:f2:65:50:1f:b6:1c:ea:
         fb:65:14:26:0a:d6:97:36:2f:a0:42:ad:ad:36:19:ac:22:af:
         d0:ac:9b:84:b0:fa:09:51:a3:37:11:d9:c9:0e:62:4d:29:f5:
         02:47:be:34:eb:4a:b5:e4:21:a2:8e:01:0c:e9:7f:2b:eb:50:
         b8:05:1f:d7:53:c9:29:3f:90:ca:55:26:9e:49:58:e3:2e:09:
         3c:aa:cd:d9:f9:1e:94:9b:e2:81:fb:00:c9:38:d1:32:30:29:
         14:96:50:0e:4b:5c:19:6f:00:ea:07:68:ec:2a:10:7f:cf:e1:
         9e:d0:36:08:0d:cc:1b:7d:f9:5e:2f:75:cf:17:2f:38:3d:18:
         e6:a5:3a:8b:eb:8a:f3:7d:71:bb:97:17:00:ac:0b:01:68:ca:
         1e:4c:8c:cb:29:07:af:ed:07:60:36:e0:6f:36:93:24:32:df:
         b0:21:83:40:f3:b3:ca:e2:c1:80:5c:0e:23:e6:9d:a0:69:d9:
         f7:17:f7:ae:6b:2e:54:9a:30:d5:eb:12:6e:73:7e:5d:a8:ea:
         5c:a1:94:7b:e1:d2:10:89:c7:d2:2e:66:de:1f:c9:0c:2c:d9:
         cf:21:f8:77:e8:60:9b:54:d6:5c:8d:9b:eb:fb:ff:17:c6:d9:
         ee:43:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:16:16 2026 by rpki-client