Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa
File:                     ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa (raw, json)
Hash identifier:          Cef3/YkXJWKnm+c3BNEq30++rnCyAZkt9XeG1P6Vn7Q=
Subject key identifier:   9E:BB:FC:33:E5:FC:3F:8B:30:8C:FA:5B:FF:AF:20:50:8C:37:A8:13
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E4F1F34529648EFBEE32E7B80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     19181
IP address blocks:        131.153.57.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:34:52:96:48:ef:be:e3:2e:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=8d84797d-9ce0-4fe9-a321-78298d3c3b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:fb:76:0a:93:3e:44:09:8d:5b:ad:9c:ee:
                    bb:da:0a:0c:d5:11:3e:3e:24:0a:dc:0f:fd:c8:94:
                    64:df:6d:41:aa:3f:f6:c4:c8:6c:4f:f8:b1:60:88:
                    56:c7:a8:e5:4b:91:c3:19:1b:fb:ab:35:6e:d1:54:
                    e8:2f:00:b9:ce:8c:16:2d:27:ca:ef:f9:1e:ff:35:
                    32:cb:74:3c:7a:92:08:df:37:67:f7:ca:28:53:8d:
                    cf:00:02:7e:6b:a4:ec:75:ba:9c:d3:52:60:d3:ba:
                    1f:d3:4b:fc:55:0b:4b:72:b0:b7:c3:62:5f:d7:cc:
                    de:ec:da:f8:22:f2:60:27:b2:a6:42:46:a5:f1:d9:
                    4d:49:50:f7:a6:b1:c9:18:a3:db:f3:a6:8f:73:c0:
                    92:01:c2:b2:dc:35:55:ce:24:45:cf:5a:57:fd:ed:
                    83:8c:4d:18:74:c2:6f:73:0b:2e:d9:46:e5:be:66:
                    b9:bc:42:5e:86:e2:78:a6:1d:41:87:b3:f6:d8:fc:
                    ad:ea:e5:61:ba:23:c4:c5:6e:76:73:9d:e0:d5:74:
                    b9:98:86:1a:52:5c:2d:94:91:c6:61:7c:83:b3:90:
                    e9:06:34:55:8a:cf:93:61:c2:1e:34:2d:41:b7:68:
                    ec:b0:79:d5:6e:d9:8c:99:e5:44:7f:6b:76:25:2d:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:FC:33:E5:FC:3F:8B:30:8C:FA:5B:FF:AF:20:50:8C:37:A8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:53:8b:ca:e2:fd:ae:1b:90:fb:29:db:3b:c0:0c:47:47:
         cf:db:97:45:96:f8:6d:24:d1:5b:0f:fb:40:d0:85:28:c7:e2:
         81:22:05:25:f0:c7:6f:3d:54:1c:54:25:c8:ef:d3:9a:48:fd:
         d5:91:bb:4d:89:e9:a9:e1:3e:49:14:17:8f:58:c8:a3:61:2d:
         45:ee:83:fc:c9:fc:25:2d:b1:46:1d:f3:e1:99:81:63:14:a4:
         11:ff:f1:ab:12:65:f3:c8:01:1d:58:00:ae:1a:8b:be:0b:32:
         07:43:44:d4:30:dc:12:80:3b:cc:55:6d:97:77:17:24:94:4c:
         de:6c:1a:1b:71:bd:42:e8:df:49:c1:b9:1d:81:ad:32:bb:ae:
         1a:fb:7a:a8:30:59:4b:f0:c4:28:ec:25:97:ab:1d:69:f7:9d:
         e3:a2:8c:83:0b:8c:0f:cb:5c:1e:91:a2:a8:3f:57:8b:1b:5d:
         da:c6:24:bf:4d:ef:b7:cb:d3:f3:0a:0b:34:1d:42:01:d2:b8:
         11:b7:67:cc:1f:cc:a3:e7:6a:e6:bc:1d:40:3a:91:e0:08:dd:
         b7:49:3f:48:cb:46:e1:d2:58:18:2b:33:1f:b9:22:6b:96:a2:
         3e:7c:39:54:20:4a:20:37:25:11:63:65:be:03:78:59:de:63:
         09:ac:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:57 2026 by rpki-client