Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e111717e-344d-3f51-afeb-fb6b7bd363f2.roa
File:                     e111717e-344d-3f51-afeb-fb6b7bd363f2.roa (raw, json)
Hash identifier:          ruaI3ZAQS9qYd7kcj+q+0Tt93jCZXMyA1+6XLG0K0X8=
Subject key identifier:   29:E0:66:2D:16:05:27:E7:E3:71:E0:62:85:0A:50:EA:BD:BD:60:02
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584E7E94F94859AE3B583E121E80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e111717e-344d-3f51-afeb-fb6b7bd363f2.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     63440
IP address blocks:        134.202.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f9:48:59:ae:3b:58:3e:12:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=7d9f1909-2d4c-4ac6-bddc-e14da589a51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:c2:6f:42:35:e1:ce:8b:30:81:bd:cf:1b:
                    43:4c:b6:a9:fa:d5:2a:3d:35:bf:d9:89:ce:da:7e:
                    d3:b5:dc:cb:de:e1:0b:18:58:60:1e:13:ba:99:57:
                    37:ff:a2:6d:5c:c9:3d:7b:4c:f3:3b:c5:53:71:f9:
                    8c:d3:40:60:f1:a2:9d:b7:60:8d:8b:6b:76:33:2b:
                    d0:c5:7a:f4:b0:8a:42:1c:39:11:db:ae:af:55:ad:
                    76:d5:e4:72:e5:bb:18:94:ae:b3:03:39:e2:2d:81:
                    d3:ab:86:b2:e8:f9:cf:30:44:db:e6:5c:27:a2:9f:
                    a5:3f:2e:a6:ff:f6:b3:84:fb:4d:dd:68:60:bc:59:
                    6b:6d:4e:f6:92:e9:37:f3:84:41:19:92:9d:09:cf:
                    cd:97:b9:1f:6e:ec:fe:f7:ff:eb:d7:94:11:15:de:
                    fb:85:6a:d5:0a:1a:a5:0b:95:48:b0:51:29:23:3e:
                    27:5e:4f:6e:89:02:50:0d:5d:94:52:5e:d7:4a:05:
                    32:01:93:87:a0:f2:57:f1:3c:69:9e:3f:71:a7:fd:
                    83:1f:08:28:9d:71:76:2a:6a:4f:05:bd:de:c6:0b:
                    be:f7:1d:a3:2f:18:6c:a4:db:d3:c8:b2:37:16:90:
                    dc:79:e5:ad:30:a6:89:50:47:2d:c8:61:d9:4c:df:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E0:66:2D:16:05:27:E7:E3:71:E0:62:85:0A:50:EA:BD:BD:60:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e111717e-344d-3f51-afeb-fb6b7bd363f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:f2:33:83:ce:bf:ed:e5:9c:80:9c:59:63:00:55:c9:0b:
         56:f7:b6:ae:a7:28:27:ec:78:29:37:c0:df:fe:76:43:ec:95:
         a3:6e:11:9d:5a:b2:15:e1:69:87:fc:c8:92:eb:d7:3e:ae:2a:
         15:56:38:de:7c:9d:a0:8d:20:73:9a:a4:95:e5:a2:46:46:5f:
         c0:79:1a:f3:2e:c1:10:18:fd:c2:ea:ca:72:0e:37:6a:78:ea:
         d5:1d:d8:c3:58:69:0d:2d:b5:94:e7:24:c9:b7:b1:78:12:32:
         83:ac:22:a2:af:4d:f7:48:62:33:08:1d:92:fd:0d:12:a5:61:
         da:eb:62:1c:75:27:55:a1:0a:1e:d5:dd:83:4c:24:b4:8b:4f:
         9a:ca:9d:5a:6b:4d:05:ca:cc:3d:70:5b:ed:5a:49:08:ec:c4:
         ae:14:0e:3b:85:e5:63:81:bf:20:62:c5:8c:3a:86:ef:4b:05:
         87:85:dd:d1:57:a9:35:c5:53:88:e1:f8:d2:67:54:1e:3a:75:
         1e:ea:99:6d:91:4e:df:4f:2b:02:e3:47:7d:83:87:82:25:0f:
         30:88:76:e8:eb:43:3c:15:fb:21:5d:0a:76:cc:f0:46:9b:61:
         b0:32:70:73:61:27:64:70:9d:66:d1:52:a6:ab:44:2c:a9:88:
         4a:ea:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:55:27 2026 by rpki-client