Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3dd74584-8716-39bf-843a-8c8e1719efbf.roa
File:                     3dd74584-8716-39bf-843a-8c8e1719efbf.roa (raw, json)
Hash identifier:          k4qInK7Xof/LgFBAW0JAZY52Tpspekz6EDGS7eP0zhc=
Subject key identifier:   13:65:2C:2A:4F:A2:12:FE:1E:85:40:EA:AF:4D:93:02:BA:B9:73:C6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EA78FCEE11C2BB841EAC3BBC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3dd74584-8716-39bf-843a-8c8e1719efbf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        134.13.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:ce:e1:1c:2b:b8:41:ea:c3:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=02968851-7500-41de-9cc2-f7c765516f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:a2:ee:3f:9e:53:19:3a:14:2f:88:af:22:
                    ac:dd:d8:38:13:bf:fb:9f:22:60:59:21:fe:fb:c5:
                    0d:c3:2a:0a:a6:81:5b:53:df:74:0e:1f:67:38:84:
                    c7:a6:41:24:41:48:b9:5e:ce:d2:c2:56:16:e5:73:
                    25:69:e6:49:10:b5:e0:55:ff:39:6d:60:1d:98:60:
                    b3:a9:7a:aa:59:20:88:4b:e6:98:bb:f3:c1:0e:1b:
                    e3:63:df:7f:11:d5:2a:6d:d4:3c:5a:c0:05:d0:00:
                    87:2d:f8:ae:ad:78:5f:a0:01:74:a2:58:f5:da:d6:
                    49:34:2a:79:65:b7:c5:72:55:e3:03:f0:b9:90:51:
                    b1:c4:66:e7:04:e0:0b:1f:8f:e7:2e:3d:cb:65:90:
                    4b:d6:47:01:e8:66:e3:99:7f:31:e2:c5:7b:27:81:
                    ce:5f:a8:61:e8:ba:34:36:9b:13:d1:29:dc:a0:aa:
                    bd:cc:93:d9:12:b6:59:5e:ae:45:64:d9:61:9e:c0:
                    43:9f:c6:34:5c:2d:70:c7:00:c1:2e:9e:f9:1a:88:
                    99:6c:9c:6c:94:ec:6f:0a:b8:bc:41:ec:7f:69:1f:
                    81:8a:cf:ff:0d:f2:2c:0e:44:f1:a7:6f:fb:45:2d:
                    39:49:51:61:aa:24:4e:23:e6:bc:d0:1a:59:72:de:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:2C:2A:4F:A2:12:FE:1E:85:40:EA:AF:4D:93:02:BA:B9:73:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3dd74584-8716-39bf-843a-8c8e1719efbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:8c:ab:d9:5a:28:d5:58:64:37:b8:12:fd:11:fa:ec:37:
         fa:a2:2c:d1:bd:30:bc:5c:3f:a9:27:d2:79:e9:6f:ea:98:48:
         56:0f:54:71:3b:52:e8:5d:41:64:d4:69:60:03:13:21:48:81:
         33:0e:5f:a7:23:ec:02:13:82:f6:8a:23:d6:b2:64:3c:6d:60:
         cf:52:69:d9:14:2f:25:84:2c:3a:ad:88:1c:5a:ee:29:d3:d9:
         f1:e7:11:86:1e:31:b9:71:6f:ba:44:b2:52:0b:a3:db:01:ce:
         a8:c3:3a:6b:f2:3e:5f:f0:5b:1f:03:3f:2e:f7:00:49:fd:27:
         20:c0:e8:57:af:77:09:60:3f:7d:41:b5:91:2d:3f:79:05:73:
         74:c5:ab:bb:b6:34:27:98:f9:03:c9:c7:f6:6c:a9:ab:67:f1:
         2a:2f:d6:a1:ad:0a:97:a5:67:e6:65:90:7c:2c:00:02:f9:5b:
         bd:f9:43:aa:4a:5c:6b:34:c9:52:78:80:63:5c:18:33:25:4e:
         de:de:ac:3e:34:e6:1e:d2:66:a6:14:83:1d:02:6d:b7:3e:77:
         ba:3c:9c:77:f4:21:cd:c8:1f:90:b1:ea:ff:69:80:b1:fb:4d:
         72:34:9f:4d:05:65:e1:88:54:a7:6e:aa:5b:b5:0d:be:af:54:
         1d:52:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:16:43 2026 by rpki-client