Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bde0e617-277b-3b8a-b4f5-be754c033e41.roa
File:                     bde0e617-277b-3b8a-b4f5-be754c033e41.roa (raw, json)
Hash identifier:          Qfn8zErY9sBTz280b8006voWRr+cmV5jncWLDesFbT0=
Subject key identifier:   2D:6F:9D:06:09:0A:D3:1C:08:50:F6:FE:82:1C:30:F7:50:8F:4C:22
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E4F1F33C856E91392098A8480
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bde0e617-277b-3b8a-b4f5-be754c033e41.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     19437
IP address blocks:        131.153.10.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:33:c8:56:e9:13:92:09:8a:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=afc551ae-a8ec-48f5-a789-8a0e1a6a50d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:db:a4:9e:6d:2d:b0:84:1b:44:00:ce:53:
                    f7:0e:53:4b:dc:87:df:63:cc:21:46:85:03:bc:6a:
                    44:be:76:b3:97:72:96:cd:41:7d:87:cc:f1:6e:d8:
                    34:54:f4:ff:3c:9e:c8:47:93:18:05:e5:51:fe:cc:
                    01:8a:b0:dc:13:f6:b5:c1:0a:18:6d:3b:6c:57:ca:
                    e1:c1:c8:33:b5:e8:aa:7f:79:b5:ee:96:c8:f5:20:
                    dc:b7:96:12:33:2d:d8:fe:28:7a:8b:32:e8:e1:75:
                    fe:25:88:68:ba:c9:30:dd:9b:ee:ff:11:f9:2c:1f:
                    b3:b9:fb:94:29:09:0d:d3:a0:b9:e2:57:5c:3c:06:
                    73:0d:a5:8d:9d:03:36:5f:37:93:67:e3:10:c9:33:
                    3f:07:eb:f4:22:b0:9a:16:5c:87:02:b7:70:b7:eb:
                    0a:11:18:b5:57:30:34:3d:e0:4b:9c:dd:60:ce:59:
                    70:14:90:e7:6c:44:8d:b3:43:fa:61:a0:06:85:a9:
                    98:ee:af:8a:d1:cc:a1:0c:4c:85:f2:8a:62:8a:65:
                    51:4d:89:4c:98:08:27:2a:64:ac:72:a8:90:11:4e:
                    e1:01:95:00:0f:a4:29:86:43:fe:0b:5f:8c:d5:f5:
                    16:22:54:a1:1c:68:09:09:04:c4:1e:4c:cd:e8:3f:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6F:9D:06:09:0A:D3:1C:08:50:F6:FE:82:1C:30:F7:50:8F:4C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bde0e617-277b-3b8a-b4f5-be754c033e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:ba:c7:6d:3c:37:db:e7:bf:0b:ae:cd:b2:65:fc:6b:00:
         fd:95:94:50:a7:4a:05:27:ca:92:3c:5b:56:81:75:70:67:26:
         98:da:d7:8c:95:27:4f:f5:28:fd:59:f2:a6:05:f4:b1:d3:1b:
         23:2f:d6:a8:2e:d6:3a:4a:28:76:80:cc:e7:99:8c:15:5e:b1:
         91:88:5b:c5:f0:c4:61:dc:73:9f:e6:af:c4:e4:28:55:27:9e:
         c9:72:4d:70:ff:ac:85:f8:6f:33:b1:2c:49:e1:af:00:09:aa:
         81:8d:8f:b2:3d:24:b4:fb:cc:db:95:7a:c6:14:9d:d0:05:13:
         f7:35:36:10:84:e9:be:c8:cf:3f:13:b5:21:c6:53:48:97:45:
         5f:6c:6f:c5:ea:74:69:dd:e1:e7:64:e3:81:ee:4e:7b:4b:eb:
         6e:c9:f8:78:aa:29:ea:2a:a1:4e:be:e4:dd:c0:eb:37:dc:d8:
         26:73:d8:3e:19:0c:7d:fa:c0:1d:a8:76:c0:7d:94:fa:dd:72:
         f2:12:28:5d:ad:c1:12:97:bd:b8:ed:0c:6d:47:fe:93:f1:01:
         e9:15:c4:35:9f:63:c8:2b:21:75:cd:a8:5f:3a:af:40:32:e3:
         7d:89:11:07:e6:db:c2:09:bd:9b:9e:72:ae:fd:24:ec:45:d8:
         0b:8e:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:51 2026 by rpki-client