Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/d7f17f35-27c9-346b-948d-3d96a52ceb77.roa
File:                     d7f17f35-27c9-346b-948d-3d96a52ceb77.roa (raw, json)
Hash identifier:          ffTULSq+qUvQbGjf0u9Dnk1GOKEpfd+gl4i0lt6KS3w=
Subject key identifier:   35:CF:45:C7:72:D0:C1:47:9B:9E:DE:B4:41:29:0C:E5:09:E0:2D:00
Certificate issuer:       /CN=3e48233d-2f75-4e7f-b6b9-87e412dfbd8b
Certificate serial:       010D0C9F4328584D27AA06D50F8073914DF55D00
Authority key identifier: 86:7F:E5:14:63:46:76:DB:97:80:69:B2:6E:7B:87:1B:BE:51:86:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/d7f17f35-27c9-346b-948d-3d96a52ceb77.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        134.195.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:06:d5:0f:80:73:91:4d:f5:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e48233d-2f75-4e7f-b6b9-87e412dfbd8b
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=8257ca66-e597-4fef-9299-a139bb113ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:9e:63:eb:ab:d8:82:9c:00:4c:86:ca:89:
                    67:83:a9:2e:7f:5d:0b:1b:13:53:ab:45:56:07:ee:
                    f4:e6:d1:53:2c:0c:26:4e:c7:c9:24:6c:05:78:af:
                    03:6c:1a:87:40:2e:f1:6c:6a:c8:2c:fc:b3:67:3f:
                    ce:cb:80:b4:3a:79:9a:af:8d:46:ee:32:78:75:d3:
                    88:49:c7:34:c2:56:d3:ea:a0:29:a4:9f:f0:37:c9:
                    91:b3:1e:1e:c2:df:ba:46:a8:e8:20:7a:2b:b6:c0:
                    1b:1d:bb:d1:93:ff:3e:1d:23:c8:62:b1:13:a1:64:
                    8d:13:98:80:9a:1d:ae:b6:c4:1f:fb:bf:3c:45:5f:
                    c0:43:a8:63:02:51:66:6f:9f:5b:d8:45:47:23:58:
                    41:0e:ba:56:50:2c:87:53:3f:37:a7:cf:1e:fc:32:
                    1e:74:e2:47:6b:7f:a3:88:5b:a9:df:05:fd:93:89:
                    95:2c:6d:9a:02:c8:4d:b8:4c:bf:a7:41:1f:d5:a7:
                    bf:da:e6:a8:87:eb:42:9f:be:d3:9d:5a:f6:9b:5d:
                    12:f1:bd:1b:87:a5:df:a5:df:3d:76:63:5c:95:00:
                    58:87:79:b2:56:a1:5d:c6:25:b8:52:43:b4:04:71:
                    73:57:0a:ea:0c:6d:6d:8e:48:8d:49:d9:ca:29:a2:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CF:45:C7:72:D0:C1:47:9B:9E:DE:B4:41:29:0C:E5:09:E0:2D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/d7f17f35-27c9-346b-948d-3d96a52ceb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.crl

            X509v3 Authority Key Identifier:
                keyid:86:7F:E5:14:63:46:76:DB:97:80:69:B2:6E:7B:87:1B:BE:51:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:31:72:9c:2b:06:fe:aa:52:d1:25:30:f1:c2:18:28:16:57:
         ef:61:d7:ea:29:77:d1:bc:50:dd:b2:e6:68:76:9b:f0:03:e1:
         e2:dc:c1:1e:b1:c4:0f:b5:aa:d1:aa:76:b9:82:58:d1:3e:c9:
         06:98:dd:33:60:2e:78:fc:01:60:13:12:d3:b7:e2:6e:be:e4:
         b3:ee:44:6b:6b:04:09:4d:47:18:7f:e3:26:a5:57:d7:be:04:
         ad:2b:97:4f:1c:26:f5:ac:bd:fb:f4:18:e1:89:4f:25:74:c5:
         5b:9c:c1:5c:fc:8b:21:d4:e6:98:da:25:06:7f:4b:68:9c:f9:
         c0:0e:b6:fe:8a:f0:9d:54:e0:a8:7b:dc:9c:1a:73:fe:0f:09:
         69:e2:6a:66:df:3e:fb:1b:f2:50:02:f7:2c:83:dd:b4:10:af:
         36:95:0e:62:3e:15:48:86:83:e6:28:3d:96:86:79:5b:61:4c:
         53:98:a3:8c:4c:0d:32:69:6c:c7:2f:65:f6:b1:0e:9d:60:99:
         ad:ae:ed:bf:be:f2:e8:15:79:91:5c:79:76:4b:af:44:7c:4c:
         a1:ba:a3:e6:97:5d:43:7e:00:80:11:4a:8c:28:c0:90:d3:77:
         ef:32:a2:0d:62:58:98:b7:4e:3e:d6:56:d4:58:48:27:96:2d:
         c2:b4:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:24 2026 by rpki-client