Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa
File:                     4494a79c-8607-3624-b716-5c884c4ed442.roa (raw, json)
Hash identifier:          o0aKnGjyDJ00/czwLRe9xXdpvZLA2WMmJgXcPeJScJc=
Subject key identifier:   27:29:4A:50:96:40:9A:59:DA:F2:ED:8C:A1:92:CF:EF:10:29:77:97
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584F497652622A7A105D07FA3680
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11427
IP address blocks:        134.202.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:52:62:2a:7a:10:5d:07:fa:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=150a9644-fbfc-4dfd-ac63-d057d478753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:7b:d5:14:50:1c:29:63:c8:f3:da:31:b4:
                    80:f0:4d:28:bd:a7:d2:a7:a6:41:5a:ec:2f:14:a5:
                    83:32:ad:ac:00:b8:1d:5e:17:d6:1f:d8:7c:82:11:
                    32:0d:71:ac:7b:16:3f:7f:56:0c:d2:95:3d:7c:96:
                    8a:28:46:14:d7:11:73:cd:06:97:5a:b7:67:04:a5:
                    f9:f4:ce:8a:ad:ab:1d:99:9f:47:a7:77:59:bd:fd:
                    59:29:46:17:56:02:91:68:b9:54:24:d7:62:42:42:
                    e8:73:df:86:fc:88:12:fe:42:1f:4e:8c:1b:b7:9a:
                    65:6c:bb:1c:a3:07:1d:e3:75:ec:1c:4f:7d:54:7f:
                    e2:7a:8a:76:3c:ea:c3:20:44:7a:fb:bd:c6:78:a6:
                    3d:fb:7b:07:8b:48:d8:03:f3:53:8b:5f:dd:0a:3c:
                    52:81:82:f4:bf:a5:36:5b:27:24:be:27:a9:5b:fa:
                    8f:c7:8c:b6:0c:e9:83:66:f3:13:96:e8:e6:e3:c1:
                    87:d8:83:f0:fb:2b:65:2b:d1:55:aa:09:06:94:9f:
                    11:ac:4a:9a:92:f5:64:f9:0b:4b:d3:1d:72:0f:3f:
                    b5:24:06:23:e1:7c:ab:f9:3f:68:5f:6c:60:da:8e:
                    6a:5b:4e:bc:fa:b9:9b:28:01:a3:dc:e7:f9:18:c6:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:4A:50:96:40:9A:59:DA:F2:ED:8C:A1:92:CF:EF:10:29:77:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:b6:34:e4:8b:4c:5e:0b:d7:52:b6:3b:2a:d7:4a:e5:2d:
         79:00:95:74:08:40:3d:97:f4:0f:a5:05:8a:67:80:0f:2d:d6:
         18:40:f0:d2:17:42:5e:08:7d:8a:e9:eb:bc:81:1f:01:01:d5:
         af:69:3f:e8:d9:6f:c2:17:cc:f2:9e:90:4b:c0:4e:87:48:96:
         40:84:45:7f:8c:75:59:c0:36:58:75:58:1c:46:2b:c1:61:6f:
         76:0f:33:42:14:fd:d7:9f:4e:d5:e6:f0:c0:c2:80:bc:e3:60:
         27:b7:e3:bc:09:de:aa:d1:e9:f2:39:30:4c:dd:08:81:7e:c7:
         b1:4e:b4:7c:f5:67:f9:58:de:40:96:cc:e4:d5:72:58:30:fa:
         5d:90:46:8d:cf:36:65:54:1a:06:80:d1:64:75:88:fe:06:56:
         72:c1:25:51:1c:ff:2a:a4:81:8a:be:c8:45:1d:b6:11:df:72:
         80:27:f5:9b:b3:b9:d3:98:de:f9:17:e3:eb:4d:1b:1d:92:30:
         d2:21:62:90:ca:51:d1:8d:66:10:f3:b2:9c:e1:61:9d:4d:02:
         05:b6:d8:7a:0c:9e:9b:9a:4a:58:ff:93:0c:1a:48:5a:37:19:
         d9:fe:b7:c9:d7:98:f6:75:ab:9e:0f:08:5a:1f:5c:df:b6:a9:
         7d:26:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:45:10 2026 by rpki-client