Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa
File:                     31a42a29-1dfe-34a8-ae78-fb73af442044.roa (raw, json)
Hash identifier:          5YL2oiQs18Nl+UN3GEtNoCb6kZtegcDGglOaTXrQHp8=
Subject key identifier:   FF:50:28:DD:15:19:32:A9:72:62:02:60:07:BF:A3:5F:0F:A1:97:86
Certificate issuer:       /CN=4b439f01-1270-40c3-9c4f-92fda6473e3d
Certificate serial:       010D0C9F4328584E736A245E6684DEBA239C8000
Authority key identifier: AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     399347
IP address blocks:        130.250.226.0/24 maxlen: 24
                          167.150.0.0/24 maxlen: 24
                          167.150.177.0/24 maxlen: 24
                          209.135.154.0/23 maxlen: 23
                          209.135.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:24:5e:66:84:de:ba:23:9c:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b439f01-1270-40c3-9c4f-92fda6473e3d
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=9a1bf0eb-eb26-43e1-90e0-2c3780a80a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:dd:36:ea:b5:b7:b7:f8:99:e2:a8:4d:93:
                    f6:a6:9c:d3:48:c2:1f:b2:0c:9a:a2:45:a3:2a:cd:
                    a7:fb:e8:ce:b0:a1:db:b3:16:ce:a9:5c:c3:51:28:
                    64:93:53:84:34:f3:77:93:42:e9:89:ff:79:cc:af:
                    81:e7:df:25:fa:30:64:d8:fe:87:f2:25:27:68:f4:
                    13:32:20:98:af:46:ed:4c:6c:76:eb:14:e0:8a:7c:
                    2a:48:90:a6:3f:04:07:a8:08:04:37:6e:58:cb:bd:
                    cd:9b:8c:07:5b:bf:26:64:f1:5a:27:26:ff:e0:56:
                    ce:17:9c:ab:75:20:3d:34:c6:e3:7d:c1:fe:6b:12:
                    b9:31:9d:f1:ea:62:fc:71:91:b7:e1:6d:7f:7a:0a:
                    d3:15:24:70:1c:98:0a:3d:b9:fa:f4:34:f6:56:d1:
                    e8:08:1c:ce:7a:af:97:f4:1f:7e:10:e1:97:44:3f:
                    3a:77:4d:88:52:61:c5:18:d5:ff:7d:53:2b:e7:d8:
                    b7:ea:69:dc:ec:2a:c6:73:32:3f:f9:46:42:8d:66:
                    2d:a5:79:2e:23:e0:5c:e6:d3:9e:f3:c0:68:c1:a4:
                    e5:07:b8:2a:3b:a4:3a:99:16:a1:09:a2:18:19:20:
                    9a:49:cd:2b:89:fd:a4:72:0d:1d:28:e0:3d:f1:86:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:50:28:DD:15:19:32:A9:72:62:02:60:07:BF:A3:5F:0F:A1:97:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.226.0/24
                  167.150.0.0/24
                  167.150.177.0/24
                  209.135.154.0-209.135.156.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:c4:5a:ea:fc:36:7b:36:0f:fb:11:48:f1:d4:c3:03:e0:
         dd:eb:d7:3c:eb:aa:30:eb:49:fd:a3:bc:01:f3:dd:b2:e7:ea:
         44:79:93:12:bf:aa:db:c7:4d:f3:c3:0d:79:d2:a6:da:de:f0:
         b3:4a:a7:c0:1b:b9:80:f9:18:02:46:32:96:cb:ef:27:d2:fc:
         30:de:28:4d:2e:7a:09:ab:38:ea:ad:c4:4b:fb:4b:71:fc:61:
         6d:7f:06:6a:74:b1:6c:25:6e:6f:80:d5:58:9c:e6:41:b5:e5:
         7e:d9:db:35:b3:2c:0e:1b:a9:34:3b:1f:70:3c:7f:65:2a:2b:
         4a:2d:fa:01:56:15:82:7f:89:f9:2e:e9:16:c4:4e:56:6d:4a:
         18:40:41:a1:78:e8:3e:41:21:59:fb:e6:d2:97:11:bf:35:8d:
         49:48:4a:49:fe:d8:34:4e:8d:61:e9:a5:06:76:60:d0:ef:7c:
         3a:04:9f:7f:49:15:aa:83:c1:73:c2:42:8c:fe:87:5b:13:69:
         91:b4:14:f8:ab:1c:22:00:d7:63:1c:1c:b0:b9:2a:37:9e:09:
         4c:13:58:cf:2a:b0:53:3a:5f:b7:73:a7:e0:c4:33:38:11:f5:
         ac:91:b6:94:d2:a2:b7:f1:cb:4f:95:b2:f3:65:e8:9f:84:87:
         07:f3:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:22 2026 by rpki-client