Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/7be41551-c932-3165-91d8-4049d952a37d.roa
File:                     7be41551-c932-3165-91d8-4049d952a37d.roa (raw, json)
Hash identifier:          4D8FsKiRrY8DCMvSXeSSvDGLfYEuly7A0Rwrz+JRqxM=
Subject key identifier:   C4:1B:BB:4A:40:CF:23:E0:33:A6:B2:AB:D3:81:31:A1:05:1C:10:2F
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584F497356A6573783DAB47E3080
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/7be41551-c932-3165-91d8-4049d952a37d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20477
IP address blocks:        137.118.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:56:a6:57:37:83:da:b4:7e:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5336cee7-7939-4971-a4ae-12266fecd3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:55:19:36:db:84:2b:cf:37:bc:2a:69:d4:
                    e9:20:2b:49:6f:cc:73:41:69:e2:a7:b5:42:4a:75:
                    5d:bc:6e:17:e9:29:8a:32:cc:0a:79:e4:01:16:f1:
                    0b:2f:9b:16:94:5f:49:fc:df:3a:a0:ab:ab:5f:18:
                    ae:84:35:33:7c:c9:3c:1f:be:af:33:30:d1:91:a8:
                    56:26:cc:79:3d:f4:15:ad:3a:d9:66:a3:95:62:1d:
                    95:1f:a0:73:d3:24:b1:8f:b6:6c:67:3d:b4:4c:7f:
                    7e:73:82:84:12:5d:fd:27:13:4b:0d:2b:37:d0:3d:
                    5c:84:22:34:64:f3:a5:14:5d:3e:fe:28:35:67:a6:
                    21:d1:1a:46:a9:75:74:b8:6c:46:ae:93:f6:c4:97:
                    89:6e:8e:f3:4b:10:b2:dc:27:a6:ad:64:59:df:60:
                    05:d3:86:e1:c6:77:b0:91:72:0d:b1:9a:53:8a:82:
                    b6:1b:c4:8d:51:0e:55:60:72:b0:9c:76:e1:3e:7d:
                    64:54:fa:9e:73:c5:bc:57:35:13:64:ae:7e:48:fb:
                    af:99:d9:92:ae:6d:70:36:5f:11:a2:95:0f:bd:3a:
                    c0:a4:85:f9:d2:3b:c6:7a:92:5a:bb:94:cc:73:d6:
                    80:83:36:4a:81:99:b6:5a:46:36:54:f6:91:af:2d:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1B:BB:4A:40:CF:23:E0:33:A6:B2:AB:D3:81:31:A1:05:1C:10:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/7be41551-c932-3165-91d8-4049d952a37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:20:91:46:23:59:ff:84:ca:75:81:98:4b:dc:74:05:54:
         a2:5b:68:ad:86:e8:9d:f8:48:b3:c0:de:e5:33:07:ed:3d:2f:
         23:da:a6:d0:85:02:2c:11:9d:15:54:e3:53:68:24:c2:cb:cc:
         90:38:4b:7d:30:f6:bd:3e:80:b5:59:f2:d2:c2:51:dc:0d:2e:
         b5:0d:65:15:c3:a1:15:03:8c:23:9a:3d:14:a7:5f:f1:a7:52:
         33:ac:9f:7c:f3:47:09:08:0d:33:91:2e:1a:95:ed:c0:5a:9c:
         1c:90:db:bd:6c:0c:4d:49:83:65:c4:b1:69:aa:61:ef:ff:7a:
         17:fe:3e:e8:a8:71:7a:c8:1a:55:9d:fe:2c:aa:5e:34:01:5e:
         de:9e:a1:44:46:8f:57:fc:52:f8:f3:1e:fb:0e:ce:d9:67:15:
         9a:03:25:d8:9b:99:f6:fd:9c:07:11:5c:d6:65:4e:28:d7:0b:
         64:1f:d1:3c:90:bf:bf:4d:46:07:44:a5:19:0c:a6:3a:65:70:
         eb:1d:f0:83:51:88:d8:ff:fe:f2:a4:8e:03:49:7a:16:a6:b6:
         9e:ad:f5:12:38:48:be:6a:e6:0a:ee:ac:38:10:21:dc:98:92:
         a4:7d:a7:74:6b:6b:22:ba:3a:cd:67:6c:ca:61:f6:db:33:47:
         1e:3f:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:03:11 2026 by rpki-client