Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa
File:                     31b1026a-02f7-3fb9-adc3-017f9c13f783.roa (raw, json)
Hash identifier:          Sjo7cjSc4f/QOgV6z1KTaKgMsUlCF90EAkvoHkj17jU=
Subject key identifier:   4B:0A:A9:10:F2:79:35:2B:63:8A:F5:0B:AD:CD:87:E7:5F:7F:29:A8
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F4328584F612D65DAB60052F7FE938200
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     397913
IP address blocks:        192.153.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:65:da:b6:00:52:f7:fe:93:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=7b177018-06f7-46cc-bcd3-cbe5fcd6eac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:61:24:3a:cf:1d:d8:20:c2:af:53:32:fe:
                    25:c5:1f:de:e6:19:32:b5:e8:e5:3f:4f:6e:73:90:
                    0f:cc:1c:91:4d:10:f9:22:29:50:3a:67:83:5e:38:
                    32:3e:45:5c:45:25:c3:d6:30:93:b7:42:49:c7:cd:
                    37:bb:6f:a9:ed:d2:c3:f6:4c:4a:a0:c3:68:00:25:
                    ca:10:6a:1b:7d:b9:60:fe:8f:fe:9e:10:71:bd:4d:
                    67:a1:ed:47:ff:4d:7b:ac:ec:8e:4a:77:62:34:e5:
                    71:a2:97:35:d6:b8:f6:a7:8e:2b:08:fd:7a:1f:22:
                    90:8b:2d:b4:3b:18:a7:fd:25:de:a9:a5:f8:4e:52:
                    55:f2:1c:23:34:21:51:6e:8b:7a:2a:dd:55:3d:c5:
                    65:b0:6a:ad:f2:c3:57:4a:11:37:a1:a0:a3:a2:43:
                    2e:a2:6d:e9:53:74:bf:ff:0c:12:a0:79:f4:63:f5:
                    44:36:b7:8e:7f:5b:e8:1b:3f:43:1c:f4:67:03:7e:
                    85:09:a7:dd:b5:ed:5b:14:a5:de:41:ae:05:62:1a:
                    ad:74:67:45:50:42:2e:3d:09:87:32:3f:e0:15:df:
                    2c:b7:f0:78:b0:10:ec:e8:14:d4:98:ac:7f:df:e1:
                    8b:45:1f:62:29:0f:62:fd:21:9b:46:d3:be:04:0c:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0A:A9:10:F2:79:35:2B:63:8A:F5:0B:AD:CD:87:E7:5F:7F:29:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/31b1026a-02f7-3fb9-adc3-017f9c13f783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:2e:0f:85:6c:25:1a:5f:4e:a6:d6:b9:58:7e:4b:3c:ef:
         1c:10:81:ae:99:a4:99:51:44:64:bc:36:d2:24:01:a4:96:53:
         00:d0:72:5f:db:07:a9:64:b2:d0:3a:86:a2:61:da:1d:7e:9c:
         26:e0:b6:d7:cf:bd:6c:e9:bf:ef:40:ae:de:6f:ce:75:e0:d9:
         6d:91:ef:b3:cf:72:54:49:46:09:0f:40:fc:8b:8c:5a:dd:b6:
         47:2d:b5:5d:f2:e6:21:ca:8c:d3:3d:9e:b3:e7:b7:3a:af:a1:
         9f:b2:e1:49:21:2b:59:d8:cd:4d:54:4b:98:4f:1c:1b:a9:5f:
         5e:3b:db:0a:4e:cc:4d:8b:54:d5:08:4f:6a:d4:c5:ed:00:56:
         79:ff:5d:d4:b6:ec:98:1a:39:fe:4d:b2:35:2a:73:3c:77:21:
         98:5a:9f:98:1c:44:d0:9f:fd:d5:b8:d6:72:77:b5:e6:df:1e:
         5c:cf:54:e1:03:09:26:13:e5:57:24:c3:d1:ee:21:6d:57:dc:
         f9:70:14:9f:58:4c:9b:bd:b2:e9:90:e5:2e:ed:70:fa:bc:bc:
         12:94:59:84:6b:d6:ef:f2:47:46:53:fb:c1:32:40:8f:be:78:
         50:cb:6e:31:69:a3:99:1a:b4:07:d4:49:c4:f8:8f:bf:4f:fa:
         82:e5:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:39:51 2026 by rpki-client