Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
File:                     15d723b0-2ac4-355b-9b80-4009a2416282.roa (raw, json)
Hash identifier:          cYf3/M1Oj/uPDuY6bl3phJ/O4O+hg9EH7sSBRJRoATc=
Subject key identifier:   D7:05:31:B7:2D:EA:7C:60:D5:57:27:24:A2:FE:C4:5F:66:E4:EE:17
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584C8FA17C2DDE9B2D29B8EE75C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
Signing time:             Sun 18 Jan 2026 02:00:31 +0000
ROA not before:           Sun 18 Jan 2026 02:00:31 +0000
ROA not after:            Sat 18 Apr 2026 01:00:31 +0000
asID:                     19437
IP address blocks:        131.153.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8f:a1:7c:2d:de:9b:2d:29:b8:ee:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jan 18 02:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=fc507223-eabd-4f4c-a30c-7f57a7b44dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:33:65:b1:1a:d8:b2:f0:c7:b7:57:cb:f9:
                    88:9a:17:ce:54:7a:6e:c9:8a:1a:81:23:f9:c2:79:
                    07:bb:f8:f5:32:7a:cf:d2:2b:20:e1:74:47:bb:80:
                    cf:84:ff:4d:b1:25:68:9a:a2:29:90:de:26:34:e8:
                    bf:d4:36:04:b5:53:2b:c6:38:4b:d7:c1:6a:a3:2c:
                    61:dd:ed:05:0b:f1:a0:5a:1b:5a:21:c7:5d:26:6a:
                    b7:cf:10:3f:2f:64:c3:12:5a:f7:c6:5c:56:58:96:
                    ad:71:13:6a:5d:20:0c:14:da:74:a6:02:88:9e:5f:
                    b4:22:da:ee:fc:19:b7:d1:ef:61:25:8e:e8:2b:12:
                    f7:0f:71:8b:ca:3f:a7:78:00:c7:f8:7c:7c:da:0a:
                    2b:1f:ab:5a:51:b0:16:13:c9:7d:94:dc:13:79:dc:
                    ff:b3:e3:49:c7:f4:ec:e2:c8:17:5f:9c:cf:77:9d:
                    c9:62:e8:ca:15:bd:4c:ad:f5:38:67:bf:c0:31:bd:
                    e0:25:85:77:b9:60:94:97:44:e0:60:0c:45:34:d5:
                    43:9f:53:6d:b6:9f:fc:48:71:30:79:3f:43:e2:10:
                    cd:82:21:7d:db:05:b2:12:c0:80:2e:79:06:a5:1c:
                    28:f8:8a:e1:a2:33:c5:ff:24:0c:d1:13:ab:96:a6:
                    a4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:05:31:B7:2D:EA:7C:60:D5:57:27:24:A2:FE:C4:5F:66:E4:EE:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:49:ed:71:bd:6d:68:69:07:ed:db:32:5f:e5:a5:99:24:84:
         bd:c0:d8:e0:57:82:42:f8:c3:49:b8:b9:28:2b:87:1d:b5:0c:
         4a:4d:b5:26:65:a9:e8:2a:a7:e2:5a:48:93:ff:e6:66:28:bc:
         75:53:89:1f:43:8c:e0:3e:01:4d:12:55:60:51:b2:90:db:16:
         0b:89:bc:8f:45:c9:4f:5b:4b:d7:d2:e2:c1:74:fd:5b:a2:b3:
         f6:1f:17:f2:5f:9f:63:75:a4:11:80:23:d9:a7:c9:6a:80:83:
         ba:39:a6:bd:ec:3a:bd:bf:44:44:36:aa:2f:c5:4f:b3:7d:fc:
         82:03:be:f0:78:ab:94:66:4b:4d:c7:a0:03:e2:75:8f:89:ae:
         66:80:33:3d:9b:de:b0:d3:61:56:89:94:5f:a1:e5:00:6e:e3:
         ba:9e:85:08:88:7a:f1:3e:a0:68:ee:b6:6c:02:0c:32:8f:a5:
         49:8b:8c:f0:0f:5b:7a:ab:bf:a3:30:6e:36:e7:c8:72:e1:e5:
         22:3b:58:30:8b:62:0d:47:6a:f3:e4:96:0b:9a:f8:d2:ed:a6:
         ae:67:3a:f1:b9:ae:d2:3a:2c:3d:7e:b3:3c:b4:30:55:0f:02:
         2a:a2:7f:5b:ed:2e:4e:45:15:23:12:cd:e3:6f:7d:81:a8:7c:
         20:e8:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:03:51 2026 by rpki-client