Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/6a5ae8cc-db1a-3d33-9575-0ae415d219a6.roa
File:                     6a5ae8cc-db1a-3d33-9575-0ae415d219a6.roa (raw, json)
Hash identifier:          gDjHBCRRQTHId0RobzkdTOCyq++/WmZpoC7tYkWxfXY=
Subject key identifier:   AA:E7:AE:4E:EA:A0:A5:B0:37:A7:5D:13:36:8D:BC:A5:45:FE:F0:34
Certificate issuer:       /CN=440ded39-398e-4479-b80d-ad4f4c956932
Certificate serial:       010D0C9F4328584E7A64CCD61D93F244D2715500
Authority key identifier: 69:E7:72:80:54:F5:45:4E:72:C5:C0:11:E4:F3:EA:39:FA:5E:53:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/6a5ae8cc-db1a-3d33-9575-0ae415d219a6.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     16276
IP address blocks:        134.195.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:cc:d6:1d:93:f2:44:d2:71:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440ded39-398e-4479-b80d-ad4f4c956932
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=e7fcd2ed-c072-4200-9fef-58c3cc80c497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:52:0a:3a:7c:bf:38:0d:7a:ac:52:13:3b:
                    97:a5:a0:9c:9a:6b:1f:3b:41:d7:c4:56:05:ad:d6:
                    d3:ae:ef:4e:b7:00:7c:de:9d:18:ba:21:9f:57:a8:
                    79:2f:d8:b0:16:57:ef:73:77:1f:b4:22:cf:d1:4d:
                    aa:dc:1f:a2:6f:2b:c5:3f:70:e1:08:60:9a:df:2d:
                    bb:83:cb:66:a9:4d:12:0a:55:5c:7a:a8:7a:ed:fa:
                    5f:0b:fe:bc:da:5a:f5:a8:88:56:64:5e:13:0f:88:
                    1a:c3:21:ef:dd:b6:48:38:51:22:e5:e6:1d:90:68:
                    f6:2f:f8:2c:a1:e9:2a:98:e2:2c:5a:3f:8a:8e:34:
                    01:46:4a:20:34:72:de:82:ac:b3:18:97:85:11:fa:
                    dc:1c:3d:61:bb:7a:b1:7a:c2:ff:e1:f8:7f:f2:7c:
                    3e:1f:4e:21:e6:62:c3:67:7a:2c:ef:7e:dc:6b:0d:
                    92:d1:3a:e0:8b:b1:9a:e6:f9:59:97:13:04:a4:67:
                    a1:f2:9a:00:e4:d6:fd:af:36:b6:bb:72:86:2a:b5:
                    0e:29:62:7f:86:59:a2:91:25:16:a0:dd:20:80:8b:
                    15:1c:fb:89:4f:26:e2:b3:77:97:12:72:ec:05:fd:
                    9c:55:13:4a:f3:97:1f:27:29:52:27:f6:53:6c:34:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E7:AE:4E:EA:A0:A5:B0:37:A7:5D:13:36:8D:BC:A5:45:FE:F0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/6a5ae8cc-db1a-3d33-9575-0ae415d219a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.crl

            X509v3 Authority Key Identifier:
                keyid:69:E7:72:80:54:F5:45:4E:72:C5:C0:11:E4:F3:EA:39:FA:5E:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:c8:13:44:c1:6e:a8:03:07:1d:eb:25:82:fc:9a:8b:25:
         a0:20:80:50:d3:6c:ae:fe:c9:f4:f0:9d:e6:ba:e5:72:3b:cd:
         2d:a9:54:a3:2a:4b:e3:f5:c0:42:e1:1d:68:2a:77:1e:40:e1:
         d7:9f:15:6a:ad:26:0c:a8:5b:e2:7f:5a:70:ec:16:d5:8e:ad:
         d3:36:be:ef:87:23:12:33:a5:53:06:33:dc:d7:fc:36:61:b1:
         99:cb:83:9d:0a:2f:31:7d:c4:3f:a1:bc:59:a2:47:d0:e7:69:
         02:d0:b8:8f:4c:5a:e0:a0:c9:a9:e8:98:18:6d:fe:99:e5:cc:
         a9:a3:30:54:db:c3:c8:e8:5f:11:ea:98:15:4e:f4:8e:ed:28:
         b3:bf:14:28:df:b8:67:85:08:5d:b3:a0:ae:33:48:cb:18:37:
         14:3e:5c:8e:2a:6b:04:06:7d:53:53:0b:d3:66:26:ea:58:af:
         f4:7e:a7:55:73:c0:39:cc:ce:79:2c:b0:c4:75:b6:f5:45:67:
         42:60:24:fe:d7:5c:bf:67:1d:a0:86:6c:2d:ce:be:7b:83:18:
         eb:a2:6f:f6:f8:cd:51:da:5f:b5:51:83:38:11:5c:cc:03:60:
         1a:e6:02:f1:08:31:35:3b:76:42:d6:3a:6a:fa:fd:f1:da:43:
         05:49:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:47:12 2026 by rpki-client