Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa
File:                     f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa (raw, json)
Hash identifier:          et5cYX41mGiFBit1gaEtHnw4JnbAc4DWhXzGQEHI3eQ=
Subject key identifier:   62:48:C6:51:AC:2F:17:09:12:55:DF:4A:18:50:CF:24:C6:33:FB:21
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584F94D305707CA5836DE507B580
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     397378
IP address blocks:        131.153.121.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:05:70:7c:a5:83:6d:e5:07:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=5cba385f-069d-488b-b5e5-2086da274b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:42:f7:aa:5e:18:64:28:c5:2e:7b:46:e7:c9:
                    91:ae:70:de:0c:fa:9d:f8:77:5a:28:70:1b:1b:5c:
                    6e:f9:80:a2:47:c6:91:62:cd:90:f2:81:39:9f:5a:
                    51:dd:56:4b:53:8c:27:66:7e:f2:a7:7d:33:54:8a:
                    50:b4:d3:12:4c:ef:ff:e1:57:ac:87:5b:f0:0c:13:
                    60:01:d3:bd:ee:4b:d5:08:87:db:7f:9c:56:c0:cd:
                    bf:c4:73:d4:45:3b:29:5b:c5:f5:ce:de:ab:2d:0a:
                    b9:4a:64:71:3d:5a:17:62:ea:38:5a:d0:08:aa:7e:
                    ba:95:06:3c:1d:3f:17:6a:e8:02:09:ae:24:50:48:
                    43:74:c6:12:82:b7:81:23:05:9b:7c:21:6b:6b:de:
                    34:fe:3e:f1:ad:7e:d7:65:af:4d:c3:82:c0:7a:5d:
                    3b:cf:d0:17:f2:56:1b:95:9a:f3:a4:7f:da:2d:71:
                    59:58:f4:19:70:b6:95:7b:ba:f4:0f:79:4a:d6:83:
                    d0:ad:c8:a6:24:ed:61:12:98:18:59:0d:88:df:5d:
                    30:49:63:bc:ce:2d:12:ec:6d:e5:55:a5:30:20:0a:
                    8a:69:49:68:e4:ec:af:ce:0a:83:d6:8b:1c:24:0c:
                    c5:05:c5:5c:40:f6:23:27:c6:48:9b:50:83:3d:2b:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:C6:51:AC:2F:17:09:12:55:DF:4A:18:50:CF:24:C6:33:FB:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1e:b2:46:5d:34:8e:b1:e3:c3:bd:81:5b:54:0d:62:4b:9c:
         84:a0:28:62:f0:9e:68:dd:26:74:f3:78:f8:1d:a5:d6:6a:39:
         25:6a:ef:e0:ae:32:d1:5d:48:e7:40:40:54:f7:5d:77:d2:09:
         1c:03:eb:32:e4:18:92:9c:65:67:3d:1e:db:0d:12:bc:b6:d8:
         fc:78:58:97:3a:74:4f:59:02:52:c6:29:12:6b:7c:d5:bd:24:
         31:60:9f:4b:11:fd:eb:05:2f:19:b2:48:96:64:3d:95:aa:69:
         f9:3a:d0:85:c8:98:c2:ae:f9:62:d7:60:27:8f:00:4a:83:9e:
         8e:dc:97:7c:ba:ff:6f:36:2c:68:57:36:0d:cd:ae:0b:d4:ed:
         97:10:02:18:67:ac:99:6b:bd:0c:77:df:f0:4f:aa:d6:e4:5b:
         5f:41:b2:96:d3:12:fc:bc:b5:0d:9d:3c:5c:da:86:5a:c8:3f:
         c5:ba:75:13:5b:07:4d:20:25:91:82:e8:fd:14:6c:75:ad:1f:
         90:44:25:69:50:05:21:3a:3d:6c:46:29:e0:9f:a2:ae:6c:d9:
         72:b4:8d:e4:77:15:96:e8:5b:21:e1:6f:43:2c:e5:33:c7:2c:
         c2:a6:7d:8d:8d:87:e4:7d:d4:03:bb:1a:98:83:6f:3b:4c:20:
         0a:23:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:28:41 2026 by rpki-client