Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/ac807b78-6460-32a1-b2ee-826ec8f8d55d.roa
File:                     ac807b78-6460-32a1-b2ee-826ec8f8d55d.roa (raw, json)
Hash identifier:          WDkOYREMHwsnPeDQxIlt9xhpvYiUifStB5by8B2db/8=
Subject key identifier:   62:A4:71:1B:89:70:BF:44:D6:C7:27:E2:39:69:B8:C8:15:32:19:75
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584F3A17DDFE5B71F36D247D9880
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/ac807b78-6460-32a1-b2ee-826ec8f8d55d.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     11404
IP address blocks:        134.202.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:dd:fe:5b:71:f3:6d:24:7d:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=48a6eb49-fc6a-44c4-8486-e34b4953a4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:50:2d:5d:df:7d:00:3a:6d:7d:84:73:99:
                    01:56:25:8d:6d:01:a1:c6:b3:c7:8b:58:e4:b3:9a:
                    cc:f2:59:0d:c0:2e:70:e5:a4:95:a9:ef:27:09:8d:
                    e5:a0:ea:8b:fb:e1:bd:ac:d8:0c:2f:22:c8:d7:e1:
                    8d:aa:cf:f5:e0:41:10:08:10:b2:44:18:0e:6b:b1:
                    0f:8f:f8:c8:8c:80:fa:6f:87:17:01:a3:d8:c4:33:
                    88:74:8c:97:2e:84:1a:bd:69:60:2a:fc:ad:72:4f:
                    40:6c:12:61:95:6e:f1:f7:57:ed:e2:d7:93:da:da:
                    23:bd:9d:e0:15:34:70:62:d2:29:29:c6:81:c9:21:
                    55:54:51:4e:df:e1:36:bf:83:af:d6:3b:e4:4c:59:
                    97:1c:3b:26:91:b8:11:6f:63:ce:47:b6:94:31:57:
                    30:c7:b7:02:fc:25:66:72:b7:13:73:a0:e8:57:e1:
                    30:0d:a7:df:8f:ac:d6:03:bb:6d:01:cd:9b:4f:52:
                    d8:12:e5:78:c9:33:80:13:af:e4:96:1c:7e:ce:f8:
                    c9:18:f3:50:47:d2:fe:3c:57:c8:f7:30:d0:7e:1f:
                    b5:9a:1f:aa:d0:3b:e9:15:2e:b0:31:f9:7a:db:62:
                    cd:48:fb:68:c9:1a:e7:ce:0d:ec:59:dc:69:ab:11:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A4:71:1B:89:70:BF:44:D6:C7:27:E2:39:69:B8:C8:15:32:19:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/ac807b78-6460-32a1-b2ee-826ec8f8d55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b6:6c:97:16:2d:5d:e4:65:c1:6d:32:e2:52:9e:a8:8f:a3:
         9f:6d:5f:07:79:a2:ce:90:0a:91:17:f4:61:3f:04:cc:80:d7:
         86:14:b7:ac:67:a3:94:49:0c:c9:51:65:62:1c:e8:dc:d0:18:
         6b:24:4c:40:b6:a7:6a:94:7c:c4:23:0c:8c:a6:73:29:15:1e:
         c1:4c:bc:0b:f2:93:49:59:7a:b2:f7:a0:9e:56:68:25:ae:14:
         4c:85:52:5c:99:0b:66:d9:e3:f7:d8:81:0b:1a:fd:ff:8e:d1:
         4c:4f:8b:60:6d:09:6b:71:28:dd:26:ce:42:b7:1c:23:18:d1:
         73:6b:25:00:a2:8a:d7:20:f9:4a:5c:98:50:fd:2e:7b:7d:59:
         d7:e5:40:36:a6:93:24:06:80:45:7d:d3:41:3d:3a:a2:16:e5:
         73:fb:75:29:90:89:97:ad:68:d9:cd:13:cd:29:98:2e:2c:af:
         82:d1:46:e7:9c:47:2c:0e:78:c2:60:d1:02:4e:f9:b7:60:96:
         23:03:20:a0:72:84:b7:0e:0f:b4:3a:56:a2:58:62:27:57:a1:
         ef:86:37:cc:6b:d8:b5:51:bf:7e:27:74:66:06:d1:f5:82:c2:
         82:d9:53:c4:46:94:e8:ec:09:73:b4:dc:62:96:dd:cc:5c:3d:
         ee:00:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:54:35 2026 by rpki-client