Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
File:                     fd024f7b-7f82-397a-b676-0e4b1349bccf.roa (raw, json)
Hash identifier:          dMVqgaJ2KlEV+XnAl3W/ai+9RXlfZUHRgrtn7LiClRw=
Subject key identifier:   2A:40:B0:68:FA:A5:4E:27:B7:EC:DB:4D:02:87:0E:A8:8E:BB:6A:7E
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EF7175E1DD079AD2BBA7F0DE0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     0
IP address blocks:        131.153.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:5e:1d:d0:79:ad:2b:ba:7f:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=2fa9b6c3-1e9c-42c9-ae15-15a513cfce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:d6:4b:5c:0d:f6:6a:9e:dc:d7:16:e7:c9:
                    41:25:ee:b9:0d:f4:46:eb:38:03:1c:77:f0:41:fb:
                    35:22:7b:b4:99:15:77:6f:92:7d:36:5b:53:60:46:
                    db:76:ef:6b:89:ed:38:a4:9a:eb:44:45:1d:fa:88:
                    d3:d5:b5:54:7d:22:04:3c:bd:ab:79:13:59:ae:88:
                    3e:4d:60:3f:0a:1b:b3:85:0c:4b:8a:51:45:b9:e4:
                    cd:77:e5:78:17:58:19:03:06:eb:26:fd:e3:f1:c5:
                    2b:ba:b2:db:4e:80:af:b1:8d:dd:93:8c:d4:44:6d:
                    af:f8:1c:c5:84:d0:b3:50:40:03:38:d0:82:f8:4f:
                    e0:f9:8f:55:f7:b3:87:ea:97:e8:19:c9:fe:c0:c8:
                    1f:34:48:55:d2:a9:5a:ca:8d:a0:c4:65:82:9a:f8:
                    74:f3:0a:b8:bc:42:65:da:ab:90:a3:de:bc:f7:d4:
                    3e:97:a3:96:04:02:a7:b7:f4:a8:eb:b4:50:49:dd:
                    87:ee:b5:72:07:52:fc:d7:d0:54:19:47:ad:dc:27:
                    68:53:14:1f:58:47:2f:15:53:7b:c2:3a:c0:3a:9b:
                    67:6c:0a:1b:dc:bc:ef:55:35:85:d1:6a:b5:bb:62:
                    8c:41:ce:13:1a:9a:f2:1f:6e:9e:92:a5:47:1a:de:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:B0:68:FA:A5:4E:27:B7:EC:DB:4D:02:87:0E:A8:8E:BB:6A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:15:e9:af:a2:b3:78:01:3a:94:53:a3:02:98:03:8b:8f:ea:
         aa:15:52:0b:1c:54:67:65:30:78:f0:dd:c9:c4:7a:72:ae:e2:
         a6:2d:39:0b:28:ff:39:78:6c:89:6c:6c:e3:93:7a:97:49:db:
         cf:b3:e6:f2:69:1e:3b:10:43:c0:4f:eb:db:57:bf:34:5b:eb:
         76:87:07:b3:cc:a6:47:fd:6e:c0:b0:b1:77:15:3b:ee:0d:72:
         12:00:32:d9:2b:14:10:1a:4d:5e:4e:84:9d:b0:95:39:b4:f6:
         10:f2:7d:06:72:f1:0e:7d:a7:99:58:91:8b:d0:ad:74:5d:90:
         c7:57:fc:35:c5:d8:0d:ca:00:3c:a9:1a:b5:1f:2d:ad:97:4e:
         45:d1:67:33:70:18:8d:b9:f4:d9:c6:5d:70:e5:f5:fa:5c:f2:
         5b:2b:19:2c:cd:11:26:23:98:68:09:a1:1d:f3:91:b8:d7:1d:
         8d:e5:c0:89:07:14:a0:00:6c:6c:01:1a:ed:02:63:8e:88:a5:
         45:70:94:7e:f7:66:67:6d:d7:03:e2:a5:54:a1:46:18:ed:5b:
         10:f1:b4:76:1e:bb:d4:75:97:d7:42:0c:92:e1:be:7d:cc:da:
         9f:f8:04:e1:cc:94:a9:ec:d6:c7:d4:ac:11:d8:4b:33:2a:53:
         85:6f:5c:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F14d0HmtK7p/DeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
MmZhOWI2YzMtMWU5Yy00MmM5LWFlMTUtMTVhNTEzY2ZjZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf7WS1wN9mqe3NcW58lBJe65DfRG6zgDHHfw
Qfs1Inu0mRV3b5J9NltTYEbbdu9rie04pJrrREUd+ojT1bVUfSIEPL2reRNZrog+
TWA/ChuzhQxLilFFueTNd+V4F1gZAwbrJv3j8cUrurLbToCvsY3dk4zURG2v+BzF
hNCzUEADONCC+E/g+Y9V97OH6pfoGcn+wMgfNEhV0qlayo2gxGWCmvh08wq4vEJl
2quQo96899Q+l6OWBAKnt/So67RQSd2H7rVyB1L819BUGUet3CdoUxQfWEcvFVN7
wjrAOptnbAob3LzvVTWF0Wq1u2KMQc4TGpryH26ekqVHGt5XywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpAsGj6pU4nt+zbTQKHDqiOu2p+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZmQwMjRmN2ItN2Y4Mi0z
OTdhLWI2NzYtMGU0YjEzNDliY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMV6a+is3gBOpRTowKYA4uP6qoVUgscVGdlMHjw3cnEenKu4qYtOQso
/zl4bIlsbOOTepdJ28+z5vJpHjsQQ8BP69tXvzRb63aHB7PMpkf9bsCwsXcVO+4N
chIAMtkrFBAaTV5OhJ2wlTm09hDyfQZy8Q59p5lYkYvQrXRdkMdX/DXF2A3KADyp
GrUfLa2XTkXRZzNwGI259NnGXXDl9fpc8lsrGSzNESYjmGgJoR3zkbjXHY3lwIkH
FKAAbGwBGu0CY46IpUVwlH73Zmdt1wPipVShRhjtWxDxtHYeu9R1l9dCDJLhvn3M
2p/4BOHMlKns1sfUrBHYSzMqU4VvXOk=
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:12:17 2026 by rpki-client