Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
File:                     15d723b0-2ac4-355b-9b80-4009a2416282.roa (raw, json)
Hash identifier:          qDFYxrkzP8LrJc7zGqhDGxrVle0T1IHav3FdMIYu4b0=
Subject key identifier:   83:BD:F4:44:97:F9:28:D6:45:53:56:D1:1A:C2:17:17:9F:A1:22:B9
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E50849227BF6B3015CA9A6180
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     19437
IP address blocks:        131.153.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:92:27:bf:6b:30:15:ca:9a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=3f250805-fc40-4e0b-b9aa-9598e73ec2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:c5:12:83:c9:37:d2:66:fa:1a:4c:95:aa:
                    ff:4e:fe:da:69:bb:fa:64:ba:85:08:e3:d3:ac:50:
                    2d:bd:2b:7f:46:7c:2b:37:7f:dd:0b:2b:f9:f0:5d:
                    7d:40:a6:03:c6:de:4b:04:21:35:43:78:37:d9:26:
                    c5:a0:aa:16:fe:39:31:83:c1:af:d1:22:bc:6e:59:
                    a0:a4:60:9d:a6:c0:b5:eb:4c:b1:bd:15:0e:c9:aa:
                    c3:ca:e3:cc:35:87:02:a9:60:82:a7:d5:66:b5:af:
                    6b:6b:4a:8c:7e:b6:25:94:20:f8:7a:28:27:7c:13:
                    97:85:aa:41:ae:04:db:28:23:aa:66:f5:d8:76:7e:
                    b1:18:2a:c9:19:6d:b5:bb:1c:16:3a:95:61:83:c5:
                    a2:a7:cf:76:a6:2a:45:ed:b8:56:e6:8b:a7:68:3b:
                    6a:5b:e1:c3:a9:dc:63:97:e2:c1:40:9d:65:e0:c3:
                    bb:95:a3:e3:c5:3c:9e:8e:c2:b2:63:1a:29:8d:02:
                    8f:64:42:76:49:04:09:dc:b8:f1:87:9a:47:f3:23:
                    64:bf:23:b8:bd:2b:94:38:06:2b:23:af:2b:52:e8:
                    c1:c9:0e:68:a0:c7:5a:5b:a5:52:b4:75:98:43:d1:
                    f1:ba:4e:09:b6:85:bd:8b:eb:57:0e:0d:83:ec:d7:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BD:F4:44:97:F9:28:D6:45:53:56:D1:1A:C2:17:17:9F:A1:22:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:17:79:66:1f:61:02:8c:f4:fc:c5:fb:8e:71:4e:8b:dc:
         ab:fc:81:04:e9:4c:87:c5:92:e5:06:23:26:da:cc:09:bb:1c:
         f9:8d:5d:69:5b:31:45:77:8a:8d:a2:b8:6d:e5:72:d1:f3:9a:
         0e:85:15:18:c6:10:60:04:c8:18:56:81:a5:4d:e5:d1:57:4f:
         a1:97:4d:50:e8:7d:0d:7f:a1:a7:a4:93:f9:43:bd:0f:c0:7b:
         fd:fa:f1:9e:15:32:fe:91:e7:a6:49:7f:82:38:1a:85:0e:99:
         cb:a9:6f:72:b9:cd:32:e0:51:e7:ad:91:b6:c2:fa:55:99:1a:
         cd:c5:31:6a:fe:d4:e3:e7:4e:c0:f3:7b:4a:5a:8c:02:a1:4a:
         13:7b:61:65:81:04:4b:d3:cf:10:70:89:b4:c4:cc:f0:01:f4:
         70:3c:3c:cb:9c:a6:14:e2:8a:fb:49:f8:a1:a3:7e:e7:8a:82:
         77:a9:a4:97:e4:ef:83:fa:59:61:1a:9e:50:02:cd:7f:e7:ab:
         c4:58:46:eb:61:5c:00:4f:15:7c:51:68:9c:a5:08:db:6f:42:
         90:e0:e0:53:c0:27:05:ce:a5:bb:6f:0d:50:00:f2:54:f1:0c:
         b2:e8:dc:3b:24:e1:ee:ea:73:74:99:5e:60:50:a2:d2:01:9b:
         78:87:6d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:43 2026 by rpki-client