Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa
File:                     b31675c0-2c36-3160-853a-bfd750bd4d40.roa (raw, json)
Hash identifier:          cHxUkhJFf2mIrFUGYTKiQk3OJmvjEOVBUX7NeVmtSWA=
Subject key identifier:   61:55:41:4D:F1:ED:10:DA:62:E1:FB:DA:B5:72:C3:7E:1C:38:BF:06
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584F94D34032B32287C4D87E7F80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     20454
IP address blocks:        131.153.38.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:40:32:b3:22:87:c4:d8:7e:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=afafc7f1-fe71-4602-85c0-13b53117fe3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:ee:26:8c:93:21:dd:7c:0d:eb:b7:92:f2:
                    0b:4c:92:4c:30:a4:eb:ca:b3:ab:5e:01:b6:20:90:
                    49:16:c9:c2:6e:ce:e7:01:eb:71:ff:32:4b:68:07:
                    69:8a:17:2d:7e:cd:0c:c1:51:14:5d:74:64:25:ac:
                    3e:bb:97:c7:19:6b:3e:70:01:83:9c:ed:45:69:9b:
                    ca:e3:0a:af:94:9f:e5:f0:ff:11:a6:ca:cb:d4:69:
                    36:99:dd:6a:74:81:2a:fe:dd:4a:c2:6f:03:12:6f:
                    e6:1e:0c:91:e8:57:af:d3:56:6f:31:9a:f9:38:05:
                    b7:5d:27:15:3d:47:2b:ca:d2:f7:45:05:3a:a9:73:
                    75:70:e0:11:f7:8a:7b:25:78:a4:9b:49:13:56:b7:
                    1f:b0:35:29:ec:dd:83:af:69:91:20:aa:7f:18:ff:
                    59:09:fa:d2:09:df:29:fe:c5:f6:e7:1c:c2:c7:65:
                    43:6e:e0:84:d6:65:2c:3d:35:23:36:6b:0f:0a:7f:
                    31:a3:b1:b7:dd:65:bc:72:e4:33:30:a4:48:64:05:
                    78:de:72:30:88:44:6c:62:1c:c3:52:84:b8:a7:ec:
                    bd:12:d4:cf:13:a9:45:b7:81:56:fe:0f:52:f1:cb:
                    fe:49:34:db:eb:49:56:cd:bd:1e:69:0a:79:3f:7f:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:55:41:4D:F1:ED:10:DA:62:E1:FB:DA:B5:72:C3:7E:1C:38:BF:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:94:8e:35:a9:e6:de:03:08:5d:7a:09:16:0e:d2:3b:b5:ba:
         50:83:b5:91:4a:a5:dd:1e:e2:f7:7b:04:0a:7f:01:70:82:ee:
         99:5f:3e:76:bb:76:de:fc:9a:fb:2b:f9:32:7a:ae:68:30:28:
         43:f4:24:01:f1:52:1c:f0:39:f8:46:60:ba:f3:c6:87:dc:cb:
         3e:74:60:c1:da:c6:58:12:fb:7d:c9:d2:fd:7d:2b:8a:37:11:
         51:d9:62:5d:fb:23:43:3d:8e:83:9a:68:85:e2:26:cb:e9:e6:
         fa:0d:63:2a:5f:14:57:4b:13:9d:45:71:cd:2f:1f:87:00:1a:
         44:08:55:2c:be:92:e4:a0:63:f8:7a:ab:79:1b:78:7e:79:5b:
         a7:4e:7b:8d:df:b4:06:cd:db:2d:63:61:32:b9:23:3a:06:65:
         a7:c6:f8:a9:42:36:b7:e6:88:b3:d8:b8:a8:2d:ad:d8:20:ce:
         83:e0:fe:64:f1:06:b6:ef:4f:d7:fe:bf:23:cd:5f:59:a7:3b:
         aa:20:22:59:a2:98:ac:d1:fd:2b:94:46:56:f4:ee:56:0a:00:
         5c:4d:63:d0:71:b1:cc:eb:38:73:60:75:9a:9c:eb:d9:be:94:
         ec:ca:04:23:37:25:10:7f:89:a3:07:99:22:78:b2:b6:e6:65:
         3d:3b:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:20:46 2026 by rpki-client