Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa
File:                     2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa (raw, json)
Hash identifier:          5U1toaldudG1eW3yCtDWOxVnbjjsoQTweg4YnoFGdH4=
Subject key identifier:   11:99:09:9C:5E:7F:A4:BB:F3:57:48:81:DA:C3:03:F8:CC:01:E6:A4
Certificate issuer:       /CN=a31515c0-c04f-41e6-958d-172bcd0e21de
Certificate serial:       010D0C9F4328584F15CCF0253A0F058E21F00140
Authority key identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     31886
IP address blocks:        131.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f0:25:3a:0f:05:8e:21:f0:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a31515c0-c04f-41e6-958d-172bcd0e21de
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=47eb77bd-c7fa-4c89-977b-0207bff838cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:4d:42:3f:17:29:5b:9f:c3:45:7e:c3:fc:
                    a4:be:b9:fc:88:55:e7:3e:14:24:c6:23:fb:1c:03:
                    5b:b6:fb:1c:ab:70:08:30:0f:ff:08:f3:94:1a:bf:
                    44:9b:fb:04:e2:85:b1:af:01:6c:da:bf:8e:17:26:
                    a8:7e:51:76:69:7e:5b:71:3c:35:e2:53:4f:98:07:
                    ef:40:b8:86:75:ce:3b:21:98:37:27:27:b5:63:f3:
                    04:07:8b:34:52:cc:5c:88:bb:96:55:a6:a4:84:57:
                    99:88:a3:26:b9:70:94:85:f2:e2:53:fe:54:3a:4f:
                    7a:e5:85:27:5f:eb:ef:70:54:7e:9c:07:c5:84:44:
                    b2:40:e6:92:a4:29:c3:6a:33:87:25:72:4f:72:a1:
                    9a:82:27:01:04:70:a3:d4:6f:f6:29:c1:78:fe:d9:
                    b7:9c:10:9c:52:31:91:95:0c:81:24:1b:ed:a3:cb:
                    03:28:f7:32:cb:62:65:51:8e:e8:45:55:f4:57:35:
                    0a:de:59:a2:db:8a:65:b4:b6:43:91:09:a1:ed:d5:
                    a9:9b:95:2e:17:81:93:bd:05:76:2b:aa:92:2a:9d:
                    e8:80:23:e7:a6:91:0a:32:1f:20:d9:2e:1b:5f:8b:
                    a8:0d:a0:c5:43:c3:3c:58:a5:00:5e:35:bf:be:1f:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:09:9C:5E:7F:A4:BB:F3:57:48:81:DA:C3:03:F8:CC:01:E6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.crl

            X509v3 Authority Key Identifier:
                keyid:34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:74:8d:36:f5:0a:75:5b:7e:fc:27:da:ad:87:30:b0:31:
         5e:7c:41:3e:a6:03:17:3f:2f:24:1f:a8:21:8d:03:06:a8:93:
         7b:8a:49:07:b0:c6:a8:2f:ce:16:96:69:89:b9:4c:e5:29:c9:
         40:9b:28:8d:45:b0:36:83:3b:d9:b9:06:3e:5b:6e:70:ce:b3:
         bf:ca:e2:5f:4c:f0:41:eb:c0:91:c4:0e:9b:53:f8:e1:b0:c8:
         3e:04:ee:27:fc:2c:6b:87:e5:44:13:0a:17:bc:e8:c5:91:95:
         68:f8:e6:16:d8:7e:1b:a5:80:d8:33:1c:e6:78:c6:c3:74:d9:
         86:38:cd:50:27:ce:03:73:ac:91:48:f9:df:93:b8:cf:ed:4a:
         10:0f:4c:0c:01:e4:d9:86:cd:b1:ad:78:95:32:ac:1a:8d:ec:
         5b:29:6f:53:55:30:05:ed:f4:d9:9d:5a:61:0a:80:57:02:19:
         36:b1:02:f4:84:7f:f0:9e:0d:53:94:1a:58:a1:aa:82:db:c2:
         f9:8e:d5:f8:7f:97:fe:a3:f5:7d:65:71:1e:5d:c1:29:de:1b:
         ea:fc:c1:c5:f2:0e:59:66:06:a5:55:22:9f:ae:ee:fc:7a:c2:
         b1:ec:95:c9:03:32:1a:eb:74:71:c9:8e:a7:5d:01:58:fb:d9:
         3d:36:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:21:53 2026 by rpki-client