Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/e76f8ce0-d779-397b-a1e8-b00badae865f.roa
File:                     e76f8ce0-d779-397b-a1e8-b00badae865f.roa (raw, json)
Hash identifier:          Gk+rROjNmus+Uq5WsoSi0K30Z/nyp4V8ftaQQO6C90o=
Subject key identifier:   D3:70:9B:C3:AE:58:40:9A:B6:E0:53:F5:F5:E6:52:B1:AE:FB:54:9E
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328584EE4235D103A6F40B2C20F37C0
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/e76f8ce0-d779-397b-a1e8-b00badae865f.roa
Signing time:             Wed 19 Aug 2026 18:04:04 +0000
ROA not before:           Wed 19 Aug 2026 18:04:04 +0000
ROA not after:            Mon 13 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        131.253.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5d:10:3a:6f:40:b2:c2:0f:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Aug 19 18:04:04 2026 GMT
            Not After : May 13 04:00:00 2030 GMT
        Subject: CN=cc22d14d-e581-4720-8fb7-4e93a2cab651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f6:c0:19:8f:f4:84:88:54:71:73:12:83:e2:
                    d8:b9:a2:97:e5:13:d8:7a:85:47:8c:8c:9f:e3:79:
                    4b:43:ce:f7:70:78:8b:24:ba:77:35:8f:af:21:89:
                    09:a1:21:83:36:0f:6d:7b:f6:48:84:0a:d9:cd:a2:
                    ec:4a:2e:98:b0:ea:43:18:e1:7b:d2:ac:72:d0:f7:
                    17:27:41:2a:83:30:af:dc:9a:60:88:90:53:3e:50:
                    85:da:06:72:7f:75:2f:25:86:c7:de:5e:2f:34:53:
                    fc:5e:b8:b8:91:06:1a:6d:06:e1:53:f9:dc:50:a0:
                    89:d7:80:04:bb:ce:aa:0d:6b:36:f8:0b:15:1e:5e:
                    f6:9f:03:3e:0c:8f:38:33:6c:5d:e5:23:d9:11:46:
                    db:9f:db:3c:4b:0c:99:43:fb:41:44:41:10:33:99:
                    74:49:5a:2b:87:d0:71:f7:c2:5a:da:c2:49:08:eb:
                    77:8b:eb:7a:ef:62:18:e7:84:60:be:aa:af:1b:41:
                    91:f9:d6:ca:a2:25:da:42:84:27:98:80:98:71:ad:
                    c1:7e:16:22:8e:3c:84:08:66:4d:b5:7e:ba:d2:3b:
                    fa:81:fa:3b:00:0c:3a:12:c2:95:2f:15:27:15:2e:
                    55:2a:7b:d5:89:24:26:9e:90:99:22:60:ea:ef:98:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:70:9B:C3:AE:58:40:9A:B6:E0:53:F5:F5:E6:52:B1:AE:FB:54:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/e76f8ce0-d779-397b-a1e8-b00badae865f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.253.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:6e:dd:c0:0a:87:59:cb:59:39:45:e2:80:93:65:f4:ca:
         b2:20:1c:46:e2:62:d6:f3:2f:12:27:4c:25:4d:19:77:1a:81:
         87:ee:74:bb:b3:7d:ec:a4:1d:31:9f:dd:09:54:63:16:8c:a7:
         46:10:ed:fc:2b:ea:58:1f:7f:9b:38:90:4e:9f:9f:7e:62:60:
         c0:fb:24:3e:cb:27:bb:da:f4:70:57:1e:90:e9:c8:fc:56:f0:
         7c:70:5c:9e:ad:d3:e0:ca:84:65:28:9b:4d:ec:0b:8d:a6:78:
         fa:fb:2f:4f:10:91:2d:cb:68:a6:4c:0b:de:f7:c8:82:f5:d9:
         3f:b1:ce:d2:43:c6:f2:36:4a:b9:02:4f:47:ed:85:cb:1e:52:
         a1:15:bf:7a:f4:9d:a6:8d:2c:43:4f:27:e4:7e:14:3a:99:60:
         dc:d6:d5:20:de:47:a2:7d:3f:17:c2:6b:45:61:2f:e7:8f:aa:
         21:5e:79:2e:6a:a9:87:61:9a:b2:6b:1e:c4:10:a8:ed:34:29:
         59:33:68:7a:01:3d:ae:96:3b:9a:f9:e3:20:4a:89:f2:9a:e6:
         c2:af:f8:75:91:6c:56:d1:fa:f7:7f:d4:12:1a:35:8b:24:e8:
         e8:12:2a:09:1a:81:80:9b:95:b7:c1:fe:da:bc:20:d3:58:0e:
         56:e7:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:20:55 2026 by rpki-client