Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/96ca9d18-2c83-33c9-9b41-f895b1903751.roa
File:                     96ca9d18-2c83-33c9-9b41-f895b1903751.roa (raw, json)
Hash identifier:          WATmW23K5vJmyLOFYmE94Ci7Oywx5suARF+H+j6wnWk=
Subject key identifier:   88:9A:22:1F:AD:69:4D:77:D1:30:75:41:43:2D:3C:7F:6D:AC:3F:75
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328584EE4235D9370A16D261D365500
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/96ca9d18-2c83-33c9-9b41-f895b1903751.roa
Signing time:             Wed 19 Aug 2026 18:04:04 +0000
ROA not before:           Wed 19 Aug 2026 18:04:04 +0000
ROA not after:            Wed 22 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        131.253.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5d:93:70:a1:6d:26:1d:36:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Aug 19 18:04:04 2026 GMT
            Not After : May 22 04:00:00 2030 GMT
        Subject: CN=48743598-d914-4bd4-bce0-8d71774fe29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:f8:fd:e4:45:50:9e:0e:53:49:57:98:8f:
                    0c:77:41:4e:81:c7:7b:47:b7:5b:35:cc:33:e5:30:
                    d1:ab:08:63:9f:0b:87:ef:a4:00:00:b1:d2:93:9c:
                    d2:7a:66:95:78:9c:76:df:38:9f:de:7d:e5:f5:0c:
                    2b:34:c5:51:a0:af:20:13:d2:ad:ed:9f:b6:fc:d3:
                    fd:0f:40:e7:16:2a:c4:e4:d5:7c:76:65:09:0f:2d:
                    c6:87:8c:25:94:42:72:99:d1:57:5c:a7:fa:4c:04:
                    1b:dc:d3:23:18:b4:94:63:d2:cd:41:40:e2:13:b3:
                    36:8a:d4:04:31:e0:59:3b:22:78:6c:48:5f:d8:50:
                    9b:f9:5a:11:24:bb:a3:d5:9f:c3:5c:60:f6:ce:95:
                    ca:64:bf:4e:35:2f:ed:12:e3:7b:14:70:59:bc:a4:
                    8b:08:f8:f1:45:90:4a:9c:d3:a9:87:e6:85:40:54:
                    65:2b:b6:3d:ef:1a:e7:e8:22:61:ea:eb:1b:2d:ca:
                    24:23:64:d9:04:d4:b4:6b:75:37:0d:d6:70:b1:ea:
                    b5:9a:20:80:6c:60:88:4b:1d:67:6a:58:90:2e:f1:
                    db:f2:1f:b1:48:f6:32:1d:0b:2f:30:83:f3:be:55:
                    58:01:ba:b0:c3:61:31:8b:e7:68:fd:ff:7d:1c:6d:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:22:1F:AD:69:4D:77:D1:30:75:41:43:2D:3C:7F:6D:AC:3F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/96ca9d18-2c83-33c9-9b41-f895b1903751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:84:f8:9d:c3:74:3a:dd:ce:ce:92:18:b4:84:a3:f6:4c:e8:
         53:8a:27:92:7e:aa:f0:35:e9:81:43:03:ed:0b:9b:98:a3:b7:
         90:08:a5:94:5a:83:0e:d5:5a:f4:4a:e1:0d:90:61:d7:0d:44:
         ba:2a:56:9f:3b:cc:44:1a:63:11:ec:f4:35:1d:5f:26:af:88:
         77:2b:bd:aa:37:c2:71:a0:cf:cf:43:d2:9a:04:d1:a7:f4:13:
         3f:11:6b:c3:f0:83:51:3b:da:f9:63:8c:56:e3:55:26:46:4b:
         43:a4:f2:09:41:63:39:b5:bc:b6:a3:fd:36:08:25:e5:18:16:
         5d:7c:de:2f:8a:c7:ff:e2:23:cb:4b:69:62:45:2b:21:94:55:
         30:54:c9:50:53:b8:2f:87:95:a9:45:77:7c:e6:82:2f:69:e2:
         f2:ec:d6:4c:ce:48:01:64:af:a9:7a:42:11:4b:ce:9c:da:73:
         ed:d0:0a:16:a7:57:11:2d:24:5b:e0:39:ce:7c:fa:24:cf:b5:
         ee:7b:e3:f7:44:4a:0f:d5:58:db:3a:60:0b:d0:67:36:36:ed:
         7a:3d:77:8d:98:7b:08:28:ac:3f:7c:b7:75:44:b6:d1:ec:c9:
         29:75:b3:cc:7a:4e:e0:32:df:ef:f0:a2:ae:70:29:05:4d:fc:
         ee:8c:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:14:08 2026 by rpki-client