Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
File:                     2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa (raw, json)
Hash identifier:          ulB1Gr7I/UFxoFhe2+P3Wc9z2JEx2sTtqRs8bwiSy+I=
Subject key identifier:   2B:6D:8E:13:50:9D:E8:23:3A:2A:F1:96:B5:73:33:AE:49:DD:02:48
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E2AD463846565A0260C01FF00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     20454
IP address blocks:        131.153.231.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:63:84:65:65:a0:26:0c:01:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=a0445720-28d2-4fd0-b417-79f1d38f9cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:9b:97:05:b6:68:71:67:a6:93:13:51:ac:
                    13:bf:f4:d4:ee:a9:38:d6:b3:f2:76:44:82:13:6f:
                    05:f8:e6:38:fe:cf:2b:d1:8d:c6:8d:42:c9:2b:3f:
                    20:96:f4:47:21:c3:a3:0a:5b:07:78:7f:d7:2c:ad:
                    43:6c:9c:42:ed:27:57:aa:77:a8:3b:28:d5:a5:db:
                    ee:11:d6:46:48:7d:b2:bc:b7:0d:ce:12:9a:66:fd:
                    70:56:78:2d:4d:e5:7a:11:de:c1:34:b8:db:f9:cb:
                    0c:1d:ff:38:76:bc:70:26:58:ea:64:1c:58:5e:06:
                    ed:07:96:d4:09:9e:ee:36:93:70:a3:01:42:a7:8c:
                    fe:d9:6c:fb:3d:c0:01:cf:12:df:85:47:7c:82:37:
                    8a:59:08:e5:5c:02:01:ac:5a:21:9e:c0:5e:a3:d8:
                    76:80:ae:d0:41:65:dd:57:c9:d6:71:03:33:44:f7:
                    87:c5:4a:0d:97:05:46:9a:b9:be:32:fe:08:7e:d8:
                    20:49:f4:94:66:7c:1a:a2:3a:eb:9d:da:59:69:73:
                    13:43:9c:e3:1c:b6:14:5c:30:8c:39:45:9a:ce:0f:
                    6d:8d:54:1a:84:51:00:0e:f8:3a:4d:92:f7:4d:4e:
                    c9:bc:a7:44:31:79:51:af:be:8f:b4:01:7b:3f:7e:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6D:8E:13:50:9D:E8:23:3A:2A:F1:96:B5:73:33:AE:49:DD:02:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bc:b7:09:59:0b:ea:52:68:13:5e:e7:f6:26:4b:16:96:8c:
         aa:a6:61:29:ae:2b:b9:19:d8:ef:ec:c4:40:ad:cb:fc:30:89:
         6f:f8:7f:57:d6:bd:d0:18:c5:d0:20:cb:6d:a5:ec:58:e8:38:
         b5:6b:71:f7:68:4c:bd:12:9e:42:90:9e:c4:82:b4:b5:45:de:
         17:83:f2:f7:e5:eb:33:68:30:e6:ef:60:de:27:b9:40:3b:c0:
         4f:0e:b7:5b:f7:25:dc:d9:18:e6:62:22:b2:ea:92:72:31:fd:
         5e:16:c0:ff:95:2e:e9:03:d1:39:10:a0:ba:58:fd:03:af:04:
         38:c3:05:32:3e:ca:71:7a:59:ea:e2:09:c9:6a:ba:95:73:99:
         03:51:76:fa:23:6b:4d:40:65:fd:2e:15:c9:a1:c4:8f:0a:a5:
         d6:f6:79:ed:a7:77:bf:5a:ba:05:61:55:4f:e2:2e:16:f6:88:
         3e:84:f1:cf:ea:e5:f7:f8:4d:57:aa:4c:cd:2a:a7:51:2d:cf:
         24:73:1a:b8:69:3a:de:27:53:d6:fa:09:f0:67:e7:d7:ce:5e:
         2f:57:95:a4:2a:68:2e:e3:0a:b6:0e:ce:b1:4d:0d:06:fd:76:
         01:e3:2d:79:53:3e:0d:5e:c3:4b:b3:9a:c1:45:e6:d6:4d:60:
         a0:c9:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:18:54 2026 by rpki-client