Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a118f40e-2525-35b8-a5aa-59eb1a170e35.roa
File:                     a118f40e-2525-35b8-a5aa-59eb1a170e35.roa (raw, json)
Hash identifier:          S50lS5fp0xBCoaVaI7ceooHJn/G8zHE7EChBSFF81nI=
Subject key identifier:   5A:44:49:F7:1E:A6:5F:F8:61:96:40:11:22:FB:C6:76:BE:64:75:61
Certificate issuer:       /CN=40b08720-f667-4e69-b15d-2bd25101fae8
Certificate serial:       010D0C9F4328584EE36FFCD2E4DF20D53BA2D8E0
Authority key identifier: A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a118f40e-2525-35b8-a5aa-59eb1a170e35.roa
Signing time:             Wed 19 Aug 2026 12:02:39 +0000
ROA not before:           Wed 19 Aug 2026 12:02:39 +0000
ROA not after:            Tue 17 Nov 2026 13:02:39 +0000
asID:                     400337
IP address blocks:        134.49.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:6f:fc:d2:e4:df:20:d5:3b:a2:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b08720-f667-4e69-b15d-2bd25101fae8
        Validity
            Not Before: Aug 19 12:02:39 2026 GMT
            Not After : Nov 17 13:02:39 2026 GMT
        Subject: CN=13fec61d-6ebe-49bc-87aa-342815f34d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:95:4c:27:74:eb:88:87:ab:81:35:5c:c1:bf:
                    b2:1e:aa:6f:bb:35:1e:48:2d:2d:1f:b1:eb:c5:13:
                    84:74:b7:80:8c:8d:52:dd:f8:6c:18:b9:c2:23:9a:
                    96:89:ac:c7:7c:b1:0c:29:65:c1:00:d4:d6:e3:55:
                    97:b0:b1:97:67:36:17:3b:80:41:38:58:3c:37:2a:
                    ac:b2:ed:5b:b9:fe:00:d9:f0:17:cc:1a:f1:c2:28:
                    70:ea:9c:6a:c3:81:69:27:41:2a:93:20:14:53:f7:
                    12:cf:c2:22:7a:12:d1:19:5c:f8:77:74:05:31:92:
                    27:0c:e1:97:7a:8d:31:e6:cf:16:fb:fc:c1:75:4e:
                    43:60:e4:41:f1:b0:01:5a:99:2e:b4:c6:42:a2:95:
                    8d:09:e2:bc:d4:ab:83:1a:77:84:02:7f:66:24:ee:
                    04:e8:c8:17:93:8f:8c:a7:6d:5f:6b:1c:3a:51:7a:
                    b9:ec:5d:1e:a1:fc:13:9a:7d:7d:5f:a7:10:9e:f2:
                    89:f4:ec:e0:47:7f:19:9f:5f:76:d5:e3:2b:ce:22:
                    dd:b4:68:8d:1c:5b:8a:71:44:e7:17:51:80:fe:1c:
                    14:81:e9:0c:f1:f4:3b:3a:56:2c:3d:df:6b:0a:ba:
                    60:65:3b:bd:19:3b:f7:fa:04:8d:bc:b5:62:70:0a:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:49:F7:1E:A6:5F:F8:61:96:40:11:22:FB:C6:76:BE:64:75:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a118f40e-2525-35b8-a5aa-59eb1a170e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl

            X509v3 Authority Key Identifier:
                keyid:A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9e:17:dc:15:53:89:25:cc:63:76:49:81:79:6e:21:f3:0e:
         de:c9:d9:c2:1a:99:90:75:22:b2:e8:70:fc:e2:cb:b2:d3:ea:
         9c:59:9b:70:38:9c:68:1e:75:1a:1c:f8:af:8f:97:6b:8e:20:
         a6:26:2b:cd:17:cd:df:05:0f:de:3c:ea:c0:dd:f0:1f:55:4e:
         09:4c:76:01:82:88:eb:b2:2f:fa:43:5f:49:2a:e1:f4:4f:9f:
         96:0c:05:79:86:e1:a4:81:a2:96:4b:95:d6:17:d8:4c:66:97:
         c4:c2:70:93:97:f6:f7:34:80:ab:e9:fc:dd:98:f6:ee:3a:31:
         04:87:38:17:fd:b6:bb:bc:cb:21:f0:3e:39:02:ce:31:74:be:
         ee:9f:a9:29:25:01:88:cf:c9:a9:ae:76:c2:19:a1:71:8f:9f:
         d0:69:d1:6b:84:b5:3a:11:5b:dc:b2:f2:1a:25:c5:99:b1:47:
         ee:e6:2f:30:ed:da:da:e8:85:7b:8b:68:66:d1:2c:68:89:5d:
         5e:ab:be:40:51:63:4c:bd:e0:ae:6e:0d:df:05:2a:ef:08:33:
         83:53:5b:37:5e:05:b6:65:e0:36:63:45:95:f7:7a:7d:43:2d:
         96:fb:4b:12:fe:f9:e4:fc:f5:9f:eb:9f:c4:0c:cc:88:fb:4d:
         0c:ff:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:12:09 2026 by rpki-client