Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/5094dda3-7050-37af-937b-91abea8c978d.roa
File:                     5094dda3-7050-37af-937b-91abea8c978d.roa (raw, json)
Hash identifier:          qL99ybOW63VTvOVPnYHZZ1iu1T+iRqTGnkb8W68TYfQ=
Subject key identifier:   91:80:2C:E4:48:AB:6F:FD:DF:FD:35:AF:85:0E:80:C6:96:7F:98:74
Certificate issuer:       /CN=65b75871-7632-4a71-a4a9-41f38235fc29
Certificate serial:       010D0C9F4328584EE4F1EA2DE446E664EA9EA4C0
Authority key identifier: C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/5094dda3-7050-37af-937b-91abea8c978d.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     13431
IP address blocks:        174.138.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:ea:2d:e4:46:e6:64:ea:9e:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b75871-7632-4a71-a4a9-41f38235fc29
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=e4524e70-d20d-48cb-95c5-e814ab3d4f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:fd:14:89:95:8d:6b:b5:22:dc:58:85:8b:
                    72:4b:dc:4f:1a:70:9a:b2:26:db:98:19:39:d1:b5:
                    f8:81:fa:58:d2:ce:54:83:e6:ad:d4:6b:ce:a7:ea:
                    b1:f7:84:b4:e6:6a:92:48:02:4a:30:b1:17:d7:bd:
                    1a:d9:64:e7:8c:e5:1b:44:2e:e9:ad:51:5d:e1:33:
                    5f:21:d1:31:70:96:98:26:4e:bf:03:4c:43:2e:ff:
                    93:1a:58:46:02:07:e6:59:db:e3:22:fe:74:fd:19:
                    10:3f:ec:a8:aa:2e:bf:12:6a:95:cf:ac:7b:5e:2a:
                    d2:89:82:2c:ff:99:af:52:8e:a8:8f:b5:9e:17:c2:
                    ee:7b:c3:89:ad:98:ec:49:ea:8e:aa:9d:79:ab:b4:
                    d7:a1:6f:04:d1:b0:c0:76:1c:31:44:73:01:de:80:
                    c4:ce:2d:b5:88:2a:c6:78:6e:27:82:6d:1e:41:e9:
                    08:5d:04:e7:eb:bf:79:69:9f:3b:3f:fa:68:99:79:
                    b6:fa:a2:82:e9:96:d6:0a:e3:d4:55:13:17:1d:86:
                    e6:0a:00:37:9d:32:80:57:17:3a:3d:5f:4b:f7:55:
                    a4:8c:a7:24:de:ca:2a:b7:a0:4f:d0:18:37:56:e1:
                    e8:3b:d7:50:d0:43:4b:f1:af:db:f3:71:b7:4c:58:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:80:2C:E4:48:AB:6F:FD:DF:FD:35:AF:85:0E:80:C6:96:7F:98:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/5094dda3-7050-37af-937b-91abea8c978d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.138.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:ab:54:75:be:41:0f:f8:ba:6d:fa:f2:29:e3:3a:82:1e:
         fd:fd:96:0a:f9:ec:af:1b:41:47:5c:82:76:c8:28:af:ac:6d:
         b2:2f:57:fa:89:81:d8:92:f6:04:7b:42:db:1f:21:89:c2:44:
         12:66:32:ce:5d:23:d1:cc:18:b1:ce:2a:25:63:2a:b0:58:ea:
         63:09:6c:83:3c:fa:da:08:7b:a9:74:3c:61:55:64:25:d5:55:
         f4:cd:42:8a:15:62:1a:16:b7:10:c1:53:cb:8c:a7:64:36:cd:
         a4:40:e6:9d:96:11:30:23:7b:f2:68:45:d7:2d:f2:68:f0:14:
         4e:2e:78:e7:8e:5f:6c:09:f6:6c:6b:f7:6c:03:a2:22:a5:51:
         72:ae:a8:94:52:47:e1:98:bc:fb:be:9e:1c:57:7a:ce:d7:09:
         45:ef:10:0a:b1:ca:f0:ed:77:d2:37:27:7c:c7:1e:e9:8d:6c:
         a5:5d:e1:4d:2a:c5:6d:bf:56:bc:74:3a:ab:27:e0:5d:fd:14:
         8b:46:8e:46:41:fd:03:52:ce:bc:47:3e:4a:1b:c8:fa:7b:5a:
         ca:f9:e2:e0:ad:68:00:b7:a5:7b:fb:02:e1:5e:68:e1:d1:cc:
         66:a7:2c:f9:b4:85:e7:20:fa:51:20:24:7c:44:6d:2d:dc:52:
         f7:77:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:55:12 2026 by rpki-client