Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/9b2da1b8-9620-3b5a-bd17-f5a6e0c214da.roa
File:                     9b2da1b8-9620-3b5a-bd17-f5a6e0c214da.roa (raw, json)
Hash identifier:          hRc8tIvx3D6b9X95oA91mSpXbk9XrT1IriPHMvkMAu0=
Subject key identifier:   8E:95:59:3D:CC:4B:E9:61:AF:66:DD:E5:28:56:DB:3F:C4:F7:A8:B4
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584F6DBD6BAC9F1478F2EFE4C6C0
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/9b2da1b8-9620-3b5a-bd17-f5a6e0c214da.roa
Signing time:             Thu 08 Oct 2026 01:00:11 +0000
ROA not before:           Thu 08 Oct 2026 01:00:11 +0000
ROA not after:            Wed 06 Jan 2027 02:00:11 +0000
asID:                     402315
IP address blocks:        134.202.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:bd:6b:ac:9f:14:78:f2:ef:e4:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Oct  8 01:00:11 2026 GMT
            Not After : Jan  6 02:00:11 2027 GMT
        Subject: CN=9efeaefd-d05f-422f-aeb0-049815885859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:3b:ee:9a:8c:bf:e7:ee:ad:14:1a:1c:50:
                    23:d6:c1:d4:16:7a:fd:72:67:e7:d6:71:d3:a1:9e:
                    bd:87:b0:f4:6f:aa:d6:0d:95:ce:94:ec:7f:81:af:
                    bc:e6:f2:fc:a6:b1:78:11:e5:d8:4c:30:83:ff:5c:
                    04:db:f0:cd:5f:d6:48:1a:d9:c3:22:07:af:dc:40:
                    de:73:9c:c1:26:9d:3b:1b:a9:78:41:ed:f8:8a:0f:
                    5b:9a:17:d0:08:36:41:a1:ba:67:45:97:3d:a4:d4:
                    c3:28:1f:28:f8:5d:cc:9c:d8:b8:80:a8:de:95:6d:
                    b4:91:6d:db:72:1b:3d:d2:8f:64:e9:e2:0b:ad:43:
                    a2:b0:57:cb:32:a1:e4:aa:f8:e6:e2:d0:37:3d:e5:
                    77:28:43:7e:18:cc:55:16:c5:3c:06:2e:32:1e:b0:
                    9b:cf:45:e6:1b:6f:51:18:01:1f:22:10:0d:73:0c:
                    b0:94:e3:2f:6d:eb:8d:9d:63:5e:fb:47:76:20:8e:
                    aa:f7:1f:5e:a3:17:eb:6b:f6:70:2c:aa:d1:9c:08:
                    7b:df:a5:4f:14:21:c0:b8:ff:9f:11:a6:90:56:9d:
                    c7:86:73:01:5f:54:6d:d3:8b:87:51:a5:8f:12:b9:
                    46:2e:7b:c3:80:f9:35:7d:a4:a0:3c:80:4d:11:27:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:95:59:3D:CC:4B:E9:61:AF:66:DD:E5:28:56:DB:3F:C4:F7:A8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/9b2da1b8-9620-3b5a-bd17-f5a6e0c214da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:8c:70:fb:1d:ee:73:a1:ef:84:80:2c:b7:d8:bf:33:ae:
         f5:3d:17:a1:2b:b9:19:b7:93:e3:5d:27:b4:8d:cb:dc:37:1d:
         6f:aa:a2:7f:57:a5:aa:b3:f0:60:49:37:9d:3f:8f:aa:bd:4d:
         49:bb:bd:d5:87:88:4b:d0:3e:13:db:8e:92:f6:fd:f8:dc:17:
         c4:42:a9:c0:b3:b4:36:10:d2:50:b7:95:25:d8:fd:e5:ac:3b:
         1b:1b:b3:28:f5:a1:66:af:19:1f:3c:91:07:53:b7:41:34:fd:
         d1:3b:78:d3:26:91:1d:3d:a8:0e:a7:58:53:9b:96:d0:45:5b:
         da:d1:7e:36:ab:50:27:e7:c5:77:a6:ef:cf:ab:4f:c7:0d:b2:
         d0:b8:03:4c:6d:a4:c2:d6:e6:35:f0:cb:b4:ce:96:e9:8c:16:
         50:f6:9c:28:8c:47:d7:c9:60:6c:ec:5f:28:22:c4:30:5f:ea:
         3f:84:14:97:f8:96:2d:f6:67:3a:de:0e:b7:b8:ab:72:a5:42:
         84:d7:0e:46:9b:0a:93:f1:2c:87:ff:b8:e6:7f:40:70:4d:7b:
         78:91:f6:e4:08:8a:9a:28:41:7f:62:3e:9d:dc:85:25:c2:00:
         19:74:37:95:62:6c:8f:7c:a5:d7:d0:7b:0c:1a:cb:b2:61:e1:
         a5:15:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:13:52 2026 by rpki-client