Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa
File:                     6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa (raw, json)
Hash identifier:          HTCVT00vwFURN1GSuRWxQN1eZxQ+3dAsfo9aQ/z/p8E=
Subject key identifier:   70:31:EF:FF:6C:05:F9:52:CF:32:07:DB:B8:7D:28:71:44:1C:A6:6C
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EF1820073686EE3300FBB5440
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     208136
IP address blocks:        131.153.137.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:00:73:68:6e:e3:30:0f:bb:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=4f8e417b-3af1-4e54-b682-e57ecf6f34f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:4c:96:f3:17:d6:7b:0c:ef:9b:cb:00:ae:
                    d1:52:7e:ec:a8:e8:9d:77:37:f9:bd:9b:38:84:ee:
                    be:cc:70:77:ae:91:b3:f3:1a:05:6c:37:79:74:d0:
                    90:54:01:45:a7:7c:a0:45:d0:fa:04:ba:a2:26:3e:
                    d9:07:0f:65:f1:6f:a1:63:b8:b4:78:7e:e8:7c:61:
                    0f:97:e7:0c:55:b4:d8:03:7c:78:74:fc:b5:e9:20:
                    cd:8e:62:ac:99:49:95:fd:60:33:41:6b:c4:7d:34:
                    36:01:28:47:71:ee:78:38:ff:cc:b2:aa:60:b2:4e:
                    15:b5:d1:6c:6f:fb:2e:41:98:b5:71:f5:68:9f:f6:
                    82:32:0f:26:b6:6c:a7:35:3a:36:e5:2b:30:c0:79:
                    88:44:42:bf:95:72:8f:ac:cf:4f:28:4b:73:a3:3b:
                    21:bb:ee:b6:89:77:b9:9b:10:75:fc:a2:60:d5:a6:
                    3a:0f:aa:56:84:73:9c:89:74:bc:35:3c:b6:7e:95:
                    52:64:fe:c2:75:ad:53:6c:c0:9f:81:ac:48:03:9b:
                    fd:7a:33:8a:ae:2f:2f:33:c2:b7:2d:69:05:44:6f:
                    5b:26:49:3a:13:df:f5:20:9e:a2:76:5e:ce:25:50:
                    8b:35:fc:25:a0:a4:2b:2f:2e:27:50:02:2a:4b:a7:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:EF:FF:6C:05:F9:52:CF:32:07:DB:B8:7D:28:71:44:1C:A6:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ac:b0:4e:6f:f8:d7:07:72:70:90:a8:a2:7b:a4:75:a8:fb:
         02:3f:19:50:98:b6:7f:15:5a:e0:33:c0:02:6c:f0:ed:2a:40:
         bf:a1:d1:38:0a:67:8b:a5:0c:25:f5:b4:f5:1b:f9:2c:12:78:
         a4:94:41:c7:ff:34:56:68:cf:69:35:39:11:6d:0d:df:2e:c9:
         bc:fd:24:14:a8:21:65:86:ac:b8:f9:6f:02:2f:99:83:e0:29:
         9f:ce:58:a0:f9:0e:b9:8c:01:77:b7:5d:6d:84:05:e6:2c:89:
         fd:da:be:1c:bc:c3:47:82:ab:92:91:0d:e6:e8:26:09:68:0b:
         04:24:1a:d9:e3:d1:61:0f:ce:03:ea:12:c4:a9:84:03:5d:6f:
         fd:4e:f3:df:2e:2c:f9:c2:96:4c:c5:bf:09:ac:29:53:f1:e3:
         68:8b:ca:3e:64:45:fa:8c:1e:30:34:d7:6b:ee:7e:0e:0a:1b:
         21:8a:6a:0e:20:da:72:1d:2d:2a:20:af:b0:30:b3:cc:bd:bc:
         13:b6:f8:98:2f:94:11:5a:f2:7d:bb:3a:5d:26:ac:ef:38:ad:
         53:cd:c4:bd:f7:bf:8c:26:53:e4:d0:0c:03:bf:89:fb:8d:c9:
         b8:38:88:16:df:24:3a:db:8b:78:55:68:7f:c1:be:0b:c1:13:
         6b:6b:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:15:28 2026 by rpki-client