Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa
File:                     f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa (raw, json)
Hash identifier:          IEY6WJnstq/36h6XjcDb04rmVCrNVb7eGfw7KnAIRns=
Subject key identifier:   6C:DD:05:4E:CF:24:F4:40:AD:3B:CB:9B:47:B9:6A:0F:B6:D2:2E:4D
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EF1820210844F16DF7FCC4200
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     207134
IP address blocks:        131.153.98.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:02:10:84:4f:16:df:7f:cc:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=7135847c-df33-4946-be2a-356ee144f5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:3a:98:b6:60:58:6f:9e:0e:55:b3:41:31:
                    35:7c:d1:9c:7d:6c:94:0d:b9:64:66:cf:9c:f3:67:
                    ce:9d:97:a3:78:c1:b8:b1:9c:68:f5:b4:70:61:a8:
                    b0:35:cc:2c:25:05:3c:fa:c9:57:21:06:3c:4f:d3:
                    b8:62:0d:a4:d0:55:f7:e1:28:84:78:88:3f:14:5c:
                    30:18:bc:5c:8b:2d:5e:fa:7a:6e:bc:63:88:ad:88:
                    e5:e6:59:b3:d7:44:fe:52:67:7e:87:7f:94:56:b4:
                    dd:43:2d:df:5c:dc:07:7a:d2:44:50:d0:96:2b:19:
                    d3:4d:69:dd:66:d7:77:d9:91:cc:0a:bd:cd:a3:d3:
                    6e:c4:00:44:60:ff:5a:9c:bd:85:39:3f:27:0a:b0:
                    11:c9:f2:31:bc:96:1c:9a:38:d1:d7:24:29:29:c9:
                    aa:ca:5f:cb:11:59:3c:15:b7:26:4c:ae:56:ba:49:
                    31:47:1e:3d:8e:61:ae:cf:fe:9e:9e:38:74:d8:be:
                    2b:59:e4:58:f3:53:ab:3a:80:29:bc:0e:41:d2:a7:
                    48:6f:89:54:7a:2c:97:fb:8e:74:ff:ce:7f:5c:5e:
                    4f:97:c6:13:4e:3a:c7:e5:b9:fa:47:6f:5d:c4:59:
                    30:7d:f3:28:ce:41:0b:19:5f:39:08:27:3f:1b:5e:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:05:4E:CF:24:F4:40:AD:3B:CB:9B:47:B9:6A:0F:B6:D2:2E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:24:fe:42:4c:8b:a6:e6:21:1a:f7:03:24:c6:1f:b8:28:b4:
         8b:4b:78:57:f0:cc:75:95:d5:7a:25:93:a0:f6:96:96:f6:b6:
         ad:e2:20:e9:7d:6f:d6:93:ef:4d:b9:a1:12:a2:a3:62:8c:7c:
         ea:d9:3e:3d:77:77:8b:b8:25:c4:51:f2:c8:28:8f:87:a0:80:
         29:56:37:61:b7:41:b6:22:a4:6a:7f:ad:5f:c4:2a:b5:21:aa:
         18:ec:61:6b:d1:ec:a2:dd:f2:67:56:00:ad:16:ce:74:28:8d:
         65:ec:83:7d:c1:52:89:71:67:65:8d:c6:27:72:2d:f8:bc:ed:
         3e:22:61:57:3b:45:40:2e:cb:98:63:c2:95:ee:de:3d:e2:57:
         69:88:0b:da:e8:dd:9f:28:bc:37:e8:3f:c1:32:74:b6:9c:2e:
         7b:6d:67:e8:2f:d5:3f:58:b8:6b:30:d7:d0:78:9f:01:1a:9c:
         10:d8:06:62:4f:0c:be:69:02:3e:96:b7:53:1c:7a:95:ee:58:
         50:9f:41:f2:06:1f:be:df:31:4e:c2:1b:e9:eb:dc:61:86:3d:
         d7:55:78:f7:38:28:d1:d4:86:26:f8:d1:2a:d9:66:db:a6:9b:
         40:ef:a5:6d:84:24:3e:77:1e:eb:78:20:67:a7:93:01:29:4d:
         d8:14:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:52 2026 by rpki-client