Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa
File:                     db061df5-cce6-33ed-9e57-80dd3d303f28.roa (raw, json)
Hash identifier:          Nn2AEIzGcG9TYEpxon83nfapVggaJgJhivN2JnT9tVY=
Subject key identifier:   B8:D3:82:24:34:D2:D6:A9:5E:24:26:9A:07:25:69:6B:6B:9C:43:61
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E7E94E6A067440616BA8FC97A
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     400672
IP address blocks:        131.153.87.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e6:a0:67:44:06:16:ba:8f:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=ed457768-e96f-4976-bfbd-4f0f5bb94eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:03:49:59:20:27:f7:76:19:f4:f0:df:d3:28:
                    06:e2:b2:7c:41:dd:43:6b:d7:6a:a1:f8:3a:72:5b:
                    99:b5:e4:af:db:f2:bb:a0:a4:1c:c0:7e:98:e9:73:
                    7c:ff:62:66:56:7a:19:20:34:f8:a3:cb:99:1c:28:
                    69:00:3a:65:27:32:1b:4f:cd:4f:a7:2c:46:44:58:
                    b6:50:80:29:46:5e:7b:c8:26:5d:3f:de:0e:8f:85:
                    44:a7:6f:57:15:98:70:ba:2f:79:14:b2:15:a8:28:
                    7d:d6:10:de:f9:fc:b9:c9:1c:93:42:bf:b7:30:1b:
                    01:d1:f9:ae:5a:63:8a:15:b9:88:70:a4:82:ab:3a:
                    b0:f2:bd:ef:03:ce:80:d5:7b:c9:1a:1c:fc:74:d1:
                    79:d1:d9:e6:92:e1:91:f6:d3:3e:eb:4a:bc:11:ff:
                    2e:a2:8e:d7:f6:dd:7e:bf:74:b9:a7:c2:23:12:ff:
                    ba:01:33:a1:25:a3:a1:97:83:a1:b0:e6:8c:f2:28:
                    8c:fa:12:19:5a:41:36:fc:79:3a:3e:19:96:53:84:
                    69:ca:f7:da:69:98:07:07:01:e5:3f:db:1d:52:8a:
                    27:c1:8c:39:08:55:16:ef:be:81:db:67:34:1c:b5:
                    3c:ea:f0:b4:23:0f:ea:a1:7a:f6:13:04:65:48:b9:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:82:24:34:D2:D6:A9:5E:24:26:9A:07:25:69:6B:6B:9C:43:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:49:3e:ee:b3:c6:28:a8:de:41:d7:af:29:7a:38:65:b7:50:
         78:51:88:d8:7d:3e:ef:a7:4d:39:42:ca:25:4a:26:15:43:71:
         b0:66:f3:c0:f9:1a:0d:df:11:9a:5e:f6:f4:ed:83:4e:bd:12:
         42:f1:97:e9:42:6b:39:a1:34:42:89:2c:0e:9c:0a:31:d4:f0:
         52:e9:99:78:e1:74:51:b9:5f:15:31:ad:d5:4b:8e:ab:6e:cf:
         46:94:47:19:f5:63:ae:cb:6b:9c:cf:e7:47:2b:0c:28:02:dd:
         49:6b:2f:ab:56:3b:a1:64:fb:1b:0c:7a:42:1f:40:4f:ca:b6:
         43:f9:a8:ed:69:8f:2b:64:c9:37:d3:27:80:8c:aa:f2:77:2d:
         f2:25:70:a4:72:2c:4e:6a:b1:3e:99:2c:91:13:00:8f:bb:01:
         d1:da:0a:d9:87:38:c3:08:0e:61:8d:c1:df:64:fa:0f:3c:1a:
         95:87:cf:f9:d5:1d:62:74:9d:d7:3c:18:92:77:d4:d8:40:2b:
         37:40:ce:69:77:14:a4:42:56:bf:0e:f5:a4:07:64:f1:0e:75:
         34:4c:d3:05:39:bb:f2:2d:70:6b:8b:c9:95:9f:60:ad:25:f2:
         87:50:42:3f:97:ae:b0:5f:f0:dd:35:f7:f3:31:40:bf:8b:8d:
         35:46:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:01 2026 by rpki-client