Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76df39de-86c4-3842-91a8-7593187d06bb.roa
File:                     76df39de-86c4-3842-91a8-7593187d06bb.roa (raw, json)
Hash identifier:          YEkHjYqIk7lnNPuKRk9+O7mwaAs+x8wT+7wLo0LcdWc=
Subject key identifier:   B6:6C:8E:48:AD:87:8E:EA:60:C8:83:C8:C9:D3:EC:4D:F1:99:90:47
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7085EC405F968183FE18DE00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76df39de-86c4-3842-91a8-7593187d06bb.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7861
IP address blocks:        154.11.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:ec:40:5f:96:81:83:fe:18:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=327a1d77-a0ed-43d4-8d14-1be0cd4b5628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:e7:34:06:5c:8b:e1:69:28:01:45:52:ac:
                    62:86:e2:c2:81:83:9b:eb:75:98:ae:74:c6:24:b6:
                    0c:eb:b9:b3:dc:72:c5:4b:df:f0:51:44:5e:e8:a3:
                    73:90:c7:16:3e:4e:e2:1b:81:76:bb:5c:c2:85:6e:
                    21:73:ad:ed:e0:47:69:2d:55:74:19:29:d9:44:30:
                    8a:c8:2e:33:23:b9:4e:00:aa:7d:62:7e:81:cf:c1:
                    20:79:28:94:df:b6:7a:55:61:37:7b:82:0b:56:8c:
                    a9:c7:7a:3f:8c:94:24:84:13:28:37:93:d2:50:4e:
                    56:76:e8:03:34:51:ac:9c:4a:b9:36:bd:7b:8d:aa:
                    45:5a:f3:80:ec:b9:0a:6f:1c:f0:bd:eb:a9:87:ff:
                    7c:2e:f3:3f:31:34:e9:8e:f5:84:ad:b7:a0:12:0a:
                    b0:85:a3:99:4e:dd:9c:b3:8c:a4:de:fc:9d:a5:59:
                    00:c9:bf:e7:9a:30:f2:ea:b5:90:36:23:94:92:f2:
                    87:f4:fd:5d:84:6c:d0:79:8a:74:62:be:d3:b0:7d:
                    df:c5:36:c1:2b:79:b3:ed:7b:e6:df:eb:80:8c:c5:
                    a3:29:f5:d6:44:e0:22:09:cb:81:51:1b:9b:ac:43:
                    b1:26:10:67:6e:2f:2d:0e:23:24:5b:69:33:6b:e3:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6C:8E:48:AD:87:8E:EA:60:C8:83:C8:C9:D3:EC:4D:F1:99:90:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76df39de-86c4-3842-91a8-7593187d06bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.11.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:7a:97:53:a5:39:3e:0b:62:1e:6b:0b:f9:b8:ac:8f:ce:
         9e:8c:e8:dc:dc:a2:8d:88:1f:4a:e6:a7:dc:09:f9:75:42:2d:
         63:1c:5d:d5:44:85:37:b0:37:c0:3a:cc:14:f5:1f:8a:2a:29:
         4b:93:aa:c0:21:4e:c3:90:44:f1:86:9f:4e:1c:59:6d:c5:b5:
         c5:e6:c9:28:63:64:30:76:fc:ee:28:db:48:a2:44:c9:05:7f:
         f8:e4:62:4c:dc:77:a4:05:05:c2:4d:6c:c9:5d:19:3a:05:2a:
         41:d0:84:aa:35:ba:73:b7:11:e3:ac:0b:6d:01:39:0b:7f:ca:
         d1:a1:7d:bb:4e:b5:ad:c3:76:27:48:e4:34:e1:97:b9:88:5f:
         2d:25:a6:6a:f7:65:10:1f:4e:34:c6:f5:ea:a4:fa:7f:7b:78:
         a0:76:37:42:db:29:29:73:16:40:68:17:17:c1:b9:73:6c:fb:
         85:4e:91:35:c5:c3:21:aa:b0:7c:1e:30:18:51:82:1b:69:d4:
         43:7a:61:98:72:3f:5d:2c:52:73:d9:c0:a7:88:d6:2c:2c:55:
         89:96:4f:17:e2:c1:83:90:7b:c3:88:54:85:c2:0f:3a:89:fa:
         44:54:91:e7:d6:df:bf:aa:0c:d2:8d:83:86:1f:0b:7f:9b:e4:
         68:3c:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:56 2025 by rpki-client