Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa
File:                     b31675c0-2c36-3160-853a-bfd750bd4d40.roa (raw, json)
Hash identifier:          Q61soC8lVcLnZpXEWdlMYfEvIDqe7sDmKRgGFCwogyo=
Subject key identifier:   A3:44:F5:8E:AD:24:19:85:90:FA:2F:CC:3A:12:A3:74:E5:31:E3:2A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E50849273A8344ED3E34C3400
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     20454
IP address blocks:        131.153.38.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:92:73:a8:34:4e:d3:e3:4c:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=ba3c938e-4def-40a4-96f4-d2cdfc846b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:fc:e8:94:b7:5a:de:28:6a:63:d0:f7:ae:
                    1c:11:4e:a2:46:59:31:86:87:c4:83:d7:af:59:d8:
                    48:99:90:3d:e7:9e:7c:b6:ec:6f:17:88:e8:8e:79:
                    eb:cb:92:64:17:0c:fe:2b:67:fe:1b:9e:a6:3c:d8:
                    06:72:60:6a:b2:87:66:56:cf:5d:09:a5:5b:a6:18:
                    37:75:55:e2:71:6b:07:75:6d:c4:87:7b:09:a7:09:
                    39:af:c9:35:97:dd:cb:9e:64:38:fe:d8:b9:c1:98:
                    3f:86:70:6e:e4:b6:e5:ba:10:4a:d9:f2:03:1b:d8:
                    9b:5e:f0:d0:59:91:31:d4:55:e8:1e:44:13:c3:19:
                    ad:6e:69:50:68:10:3a:c4:27:c5:b2:54:1b:d8:35:
                    2e:ad:b0:9f:93:5d:ed:14:d1:f5:96:10:1d:bf:84:
                    7a:fa:06:2f:12:9f:0a:ba:dc:40:81:00:33:e1:7c:
                    3b:c8:6a:2d:d3:cb:77:c0:c6:f6:d6:96:a1:a7:2e:
                    ec:4a:f2:10:da:fb:71:3b:35:53:ba:a6:59:38:4e:
                    9f:ee:31:fb:f3:7c:e6:9f:7e:0f:cc:bf:73:a6:77:
                    07:37:95:15:46:22:81:75:13:a6:e2:9d:4d:d3:26:
                    a9:ce:e3:3a:68:21:0c:13:f0:54:7c:b5:2c:62:b3:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:44:F5:8E:AD:24:19:85:90:FA:2F:CC:3A:12:A3:74:E5:31:E3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:24:5f:36:ff:78:50:3c:1c:21:9f:bf:48:36:f0:63:ff:78:
         09:08:ce:f3:41:f4:a8:74:31:61:39:0a:e7:8c:25:09:e7:9e:
         66:07:c8:8b:c0:2d:bb:4f:73:f3:24:6a:73:a3:e7:38:19:d1:
         8c:5c:fb:48:c0:04:18:56:ca:69:86:85:51:17:d6:43:f7:8e:
         e8:63:7f:c0:41:0c:19:f4:6b:3f:cc:f9:46:d5:5b:09:8b:fd:
         79:6c:6c:56:e6:ad:6f:d9:d6:52:1e:12:b7:bb:21:b7:1c:34:
         e5:80:95:8c:ed:08:22:45:ae:c4:e7:15:f3:f4:f2:e3:a4:5a:
         f3:c7:3c:1d:a6:ca:f4:22:1d:96:a7:28:d1:7b:90:9d:7c:83:
         9f:f7:f3:43:74:c6:70:30:da:d5:1e:50:b1:95:dc:21:eb:0d:
         ed:26:4e:b8:92:08:63:85:99:65:3b:be:a8:f8:8e:2e:bd:13:
         b1:48:51:4c:94:b0:c9:4e:98:f7:63:4d:48:98:6e:98:df:d6:
         55:78:1a:01:7b:0d:7d:55:bd:1f:53:1f:ff:fe:e3:ad:ad:b2:
         87:ee:66:6c:0a:12:59:e5:63:4e:4c:2b:db:c7:7f:5f:62:46:
         8c:2b:93:aa:60:fa:50:d6:2f:ba:54:05:75:e3:64:ce:72:06:
         e8:23:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:21:35 2026 by rpki-client