Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/310c6e34-0ffb-3536-a733-32b3b82a4f64.roa
File:                     310c6e34-0ffb-3536-a733-32b3b82a4f64.roa (raw, json)
Hash identifier:          zeqWj3zlX08vft0SEW+evmJlY3sjjsPTSRThTsQtnsA=
Subject key identifier:   24:C8:C5:D2:EE:D9:03:47:01:EE:25:6D:DC:CF:F9:6E:A7:86:D8:DD
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584E5A4A06F16B41824E83A9AF40
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/310c6e34-0ffb-3536-a733-32b3b82a4f64.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     376
IP address blocks:        132.219.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:06:f1:6b:41:82:4e:83:a9:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=cb5b71f1-6966-4408-b15a-d8c92350874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:fc:22:be:31:44:f6:6b:93:fe:f2:c9:ed:
                    a9:f9:46:7f:0b:ef:37:19:66:73:90:9b:c3:c1:2d:
                    02:ce:e0:39:46:64:d1:27:ef:e7:ce:b4:a8:e5:1d:
                    bf:a3:6e:75:7b:66:74:1a:88:ee:bb:67:c7:1c:10:
                    dc:68:bf:a3:84:59:a2:36:67:8c:79:26:00:18:b4:
                    f0:46:f1:48:9d:f1:40:2c:83:cd:46:a1:3a:47:71:
                    67:15:cd:dd:2f:32:5b:8f:d2:e6:67:e9:51:0b:b1:
                    17:3d:88:c9:03:ba:55:3c:83:49:f1:2d:a3:b9:f1:
                    10:ae:32:55:55:25:e5:c5:9d:d2:27:5c:16:fe:7d:
                    ed:16:3d:6b:df:13:a6:3e:16:d4:35:93:30:23:b0:
                    73:e2:bf:02:29:71:a4:7c:da:e1:1c:c6:80:74:cf:
                    33:a8:b1:08:9d:3a:a0:87:22:83:47:67:1b:e8:1a:
                    bf:b0:ff:a1:f1:5e:0f:7c:08:38:1e:7b:75:2d:79:
                    0f:f4:f5:98:3f:c5:9d:1c:30:61:a4:34:c3:00:11:
                    f1:8d:c5:75:94:1c:eb:64:ee:cf:aa:28:b6:98:64:
                    70:c2:0c:cf:ef:8f:75:7f:49:7e:bb:73:27:d2:54:
                    99:5e:04:11:2c:80:79:91:69:fc:2f:21:d6:73:de:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:C5:D2:EE:D9:03:47:01:EE:25:6D:DC:CF:F9:6E:A7:86:D8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/310c6e34-0ffb-3536-a733-32b3b82a4f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:23:b3:b6:98:c5:a5:3b:66:7b:a4:d2:b1:f1:e7:17:74:83:
         e2:e3:19:a0:ec:4b:da:2a:3c:10:cd:bd:35:ee:ba:06:4e:5d:
         ad:9c:6e:32:73:47:22:05:11:a1:15:c2:eb:c4:7f:95:45:45:
         07:0f:c6:cf:aa:8f:3e:17:31:82:6b:67:a8:26:87:dd:61:93:
         45:7a:57:3e:09:3a:f4:5e:5c:57:4b:cf:4a:42:ba:ab:72:36:
         38:cc:09:e7:2b:48:64:1d:97:0c:5c:93:aa:a3:d5:fe:02:83:
         58:0d:02:ef:c4:2b:f4:90:38:a3:d4:d3:90:8e:30:89:82:1b:
         62:49:84:dc:c3:4f:7e:de:3c:53:9d:32:69:25:9a:28:34:47:
         87:4b:ac:b9:ff:c2:24:16:18:18:3d:68:f4:63:cd:f5:0d:01:
         6a:a5:01:8a:bb:9f:fd:24:2f:ff:cb:1d:51:78:03:ce:81:77:
         41:a7:77:bd:c7:b3:bd:98:90:f0:55:c5:d1:68:92:a5:1f:b3:
         40:e4:50:34:67:04:d9:d0:84:85:6e:67:2e:7e:11:4d:3d:7c:
         58:f1:ab:ec:7a:45:22:9d:5c:40:95:4c:10:3d:e5:12:ea:a9:
         dd:d3:27:7a:0a:66:1e:af:27:c9:6e:4d:f5:e2:36:5d:34:73:
         fd:62:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:47 2026 by rpki-client