Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
File:                     f0853596-0315-33ac-b801-86570db6ad6d.roa (raw, json)
Hash identifier:          ZBo/jTc8jRZRSejWIXKPbwcFT94Tp512FWv27s3b5lA=
Subject key identifier:   40:FA:0E:28:98:D7:5D:2F:D8:A9:5A:A6:F6:0A:BE:64:3F:DD:2B:45
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584F4973E4B52E4EC77753D13C00
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395201
IP address blocks:        134.65.194.0/23 maxlen: 23
                          164.152.162.0/23 maxlen: 23
                          169.155.46.0/23 maxlen: 23
                          169.155.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e4:b5:2e:4e:c7:77:53:d1:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fe201aab-4f19-4321-9714-deca75158319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:3b:7a:80:9b:d6:1c:c5:d0:36:71:fa:22:
                    3a:5f:e3:7e:fd:c4:83:85:9f:3c:13:8e:52:1f:41:
                    82:56:9c:25:14:88:7c:66:03:59:63:4b:4f:6d:1a:
                    37:04:15:be:d0:00:68:cb:dd:f0:9b:2a:4e:7a:16:
                    17:3d:61:6e:81:7c:5c:b1:a8:2c:a0:e4:a0:1d:06:
                    e5:93:41:90:b3:4d:c3:3c:05:50:95:8b:ae:61:ac:
                    1b:3f:75:a8:19:3e:fa:e7:82:80:c5:bb:57:d4:e5:
                    77:93:48:8a:23:59:a2:f7:5f:66:28:73:a7:83:a1:
                    9f:73:c2:b2:d3:d6:95:d1:28:be:6e:8d:cf:91:5c:
                    f7:99:7f:78:e4:1f:03:08:a7:c2:f6:f4:a3:3b:f7:
                    c8:8c:36:8e:eb:8f:ed:5b:3e:b7:ac:87:d9:04:7a:
                    99:b7:9f:76:36:2a:fb:7d:8b:6f:38:3b:a2:c0:84:
                    15:1b:7f:28:1c:6d:cc:37:63:c7:ec:f8:6a:b3:40:
                    54:9c:8c:a5:ad:08:d0:08:f6:d0:76:ee:87:49:31:
                    dc:48:b9:7f:20:0b:82:5b:35:a3:41:aa:b1:dd:6d:
                    eb:a1:4b:13:ee:e6:0d:36:2f:df:a6:19:a2:b6:ed:
                    f5:00:a2:cb:f3:a7:39:f6:58:47:05:b1:9b:0b:7f:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:0E:28:98:D7:5D:2F:D8:A9:5A:A6:F6:0A:BE:64:3F:DD:2B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.194.0/23
                  164.152.162.0/23
                  169.155.46.0/23
                  169.155.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:6b:14:77:17:3a:77:79:78:77:26:9c:bf:87:35:f1:c7:
         61:2f:53:bd:a7:be:86:83:d4:60:a9:bc:a0:9e:85:d2:1d:62:
         28:e2:e8:45:a6:53:b2:f1:82:d3:c3:9f:7a:7d:ab:b6:57:53:
         5f:3a:29:fc:d2:c9:bf:a9:31:19:2b:1c:64:bc:e8:a6:c3:40:
         75:91:53:1d:af:89:96:32:4a:ce:5b:db:c1:ff:51:37:76:31:
         5d:be:b4:d6:f8:76:88:76:69:ef:ed:01:15:2d:30:3f:63:17:
         9b:4c:7e:80:fa:72:e3:45:a1:f1:19:e5:1d:7a:eb:04:57:cc:
         cb:7c:d1:a3:be:b3:42:0f:20:e9:8a:9c:20:8a:2a:10:9d:a2:
         fa:b0:5f:14:16:52:68:ea:f1:5b:8d:5e:ed:c2:60:c4:d5:f8:
         02:9e:33:2f:3e:bc:9b:92:1c:06:c8:26:b3:c2:9d:db:5a:d7:
         61:45:3d:cf:75:b4:a7:a7:4b:38:5c:18:70:9f:da:1c:49:02:
         ad:b7:ff:03:f7:9e:06:20:5f:33:ab:0f:2b:43:34:1d:b1:8b:
         79:82:cd:9f:ba:4d:1b:14:09:56:ce:ec:7f:f9:8d:d3:a6:0e:
         30:c8:0e:9d:36:2d:65:5f:5a:96:d9:b7:4b:a2:f1:53:cd:f8:
         43:2c:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:35:29 2026 by rpki-client