Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa
File:                     1823aeee-620e-331b-bd1e-36eec1af6cfa.roa (raw, json)
Hash identifier:          s0Lm/S7PDgJh1cqpscGraOirZWUmHVJ3j7lvtooMXCY=
Subject key identifier:   76:1E:45:C8:87:56:0C:17:57:72:E7:8D:AB:27:D7:DD:73:27:40:B0
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EF1820166D51EED430F25D780
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     20454
IP address blocks:        131.153.42.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:01:66:d5:1e:ed:43:0f:25:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=edd80da5-5319-4f82-ae1f-f4a5d6c9def0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:62:9e:0d:50:f1:2d:2e:72:14:44:ff:ad:
                    6b:ee:38:d8:72:7b:af:a4:64:92:ac:55:c6:96:f2:
                    90:68:20:f3:de:d8:5d:16:8f:c4:8a:eb:42:19:b9:
                    91:91:4a:b9:d5:ca:80:da:77:72:41:9d:b0:af:0f:
                    69:68:8d:7a:82:b6:2c:4f:5e:c3:cd:c1:b2:ac:7a:
                    9d:40:8e:c3:ba:d1:e4:e3:35:8d:18:07:eb:72:db:
                    4a:81:ce:31:0d:ef:e9:f9:15:d7:95:42:86:56:e4:
                    ec:dd:74:71:05:a2:c3:07:9e:70:69:d3:ed:16:ce:
                    6b:27:e1:c0:c1:75:39:01:98:c6:fa:6d:bc:40:26:
                    e1:c9:cc:30:66:83:e5:11:bb:74:a0:9d:5d:bc:f5:
                    cd:6a:88:6a:d7:3b:40:c6:db:18:b4:ae:69:4e:a7:
                    bb:db:cc:ec:ec:3d:7a:00:17:79:fa:ab:4f:a0:f2:
                    e7:44:19:f8:9d:ef:65:c3:ff:b2:6e:19:df:ac:06:
                    7f:ad:d4:97:e2:48:a7:66:aa:81:4c:10:35:bd:ca:
                    b0:ba:8b:c0:60:4d:9e:0a:11:b0:91:7f:0f:92:67:
                    6e:a3:93:2e:9d:94:cb:9d:73:cc:b5:aa:eb:e5:7c:
                    d5:69:03:ef:a6:8e:e7:16:8b:38:a7:15:85:1b:b5:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:45:C8:87:56:0C:17:57:72:E7:8D:AB:27:D7:DD:73:27:40:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:eb:9d:0b:7f:bd:1a:9f:b3:59:17:34:b3:c9:6b:01:49:3f:
         09:f9:e8:1d:66:5e:98:cb:06:04:a8:cb:96:fe:65:7f:50:72:
         e5:1d:93:93:a9:9e:d1:64:55:f5:50:7b:e4:cd:93:2b:2f:35:
         bd:0a:1b:da:95:bc:c4:60:ba:3a:84:91:a2:0c:3c:e2:26:2b:
         07:71:73:89:a1:ca:9b:4a:97:1d:4d:12:b8:5a:7b:d5:72:28:
         65:0a:9a:26:d2:07:b3:15:23:6c:90:33:bc:79:fa:90:b9:d1:
         ca:ca:ff:68:82:1b:91:65:6b:99:68:7e:9a:b7:5e:e4:6d:04:
         c3:5b:64:54:c9:7c:08:49:f3:b3:00:e8:8b:eb:3c:e5:ec:fc:
         c6:8c:74:ba:c4:41:fc:5d:56:83:a8:71:d3:7e:9a:73:15:a5:
         32:1d:bc:17:0d:67:3f:c7:35:0a:72:97:e9:62:95:6f:20:7e:
         78:ea:79:67:6a:62:80:90:0e:c7:dd:37:69:81:21:2a:b2:fb:
         04:e7:65:89:12:b5:19:79:c0:9c:51:b9:87:20:db:99:c4:dc:
         3f:20:d7:d0:bd:be:e3:4a:22:3a:02:b9:e6:a2:96:a9:97:1e:
         62:99:34:98:91:41:b9:2a:db:b8:2f:c2:d8:73:17:25:25:5a:
         a2:7c:2c:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggFm1R7tQw8l14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
ZWRkODBkYTUtNTMxOS00ZjgyLWFlMWYtZjRhNWQ2YzlkZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTZing1Q8S0uchRE/61r7jjYcnuvpGSSrFXG
lvKQaCDz3thdFo/EiutCGbmRkUq51cqA2ndyQZ2wrw9paI16grYsT17DzcGyrHqd
QI7DutHk4zWNGAfrcttKgc4xDe/p+RXXlUKGVuTs3XRxBaLDB55wadPtFs5rJ+HA
wXU5AZjG+m28QCbhycwwZoPlEbt0oJ1dvPXNaohq1ztAxtsYtK5pTqe728zs7D16
ABd5+qtPoPLnRBn4ne9lw/+ybhnfrAZ/rdSX4kinZqqBTBA1vcqwuovAYE2eChGw
kX8Pkmduo5MunZTLnXPMtarr5XzVaQPvpo7nFos4pxWFG7XMyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYeRciHVgwXV3Lnjasn191zJ0CwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTgyM2FlZWUtNjIwZS0z
MzFiLWJkMWUtMzZlZWMxYWY2Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5kqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfrnQt/vRqfs1kXNLPJawFJPwn56B1mXpjLBgSoy5b+ZX9QcuUdk5Op
ntFkVfVQe+TNkysvNb0KG9qVvMRgujqEkaIMPOImKwdxc4mhyptKlx1NErhae9Vy
KGUKmibSB7MVI2yQM7x5+pC50crK/2iCG5Fla5lofpq3XuRtBMNbZFTJfAhJ87MA
6IvrPOXs/MaMdLrEQfxdVoOocdN+mnMVpTIdvBcNZz/HNQpyl+lilW8gfnjqeWdq
YoCQDsfdN2mBISqy+wTnZYkStRl5wJxRuYcg25nE3D8g19C9vuNKIjoCueailqmX
HmKZNJiRQbkq27gvwthzFyUlWqJ8LBg=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:54 2026 by rpki-client