Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa
File:                     ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa (raw, json)
Hash identifier:          CNAlyNuECOEFQBbKwtves3l8az6ckP5BNDKKvcZgMPY=
Subject key identifier:   21:D2:DD:F1:76:D4:25:B3:87:39:AD:22:2B:45:AE:83:48:14:1B:30
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584D91C00DA0312F35D1C6191780
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     398014
IP address blocks:        131.226.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0d:a0:31:2f:35:d1:c6:19:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=d52107ff-0c2e-4ecc-bfb7-610a6456f9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:16:3f:7a:23:46:b7:f6:64:97:d6:1e:3b:
                    3b:0e:cc:97:8a:fb:3d:a3:27:53:1f:aa:04:fa:ca:
                    e9:c1:5d:aa:a3:ef:dc:31:91:70:26:e6:ec:62:39:
                    96:e0:c3:ca:5c:45:51:6b:f7:b9:c9:5d:35:5a:d9:
                    f3:9d:d1:99:90:e9:9e:a8:6d:3b:1f:5b:43:c0:9f:
                    2a:94:c4:de:41:28:72:b1:0d:8b:ca:ab:7c:9c:2a:
                    0a:23:7c:1e:70:2c:fc:67:3c:84:e4:46:13:4f:39:
                    22:49:90:a6:a0:4e:52:d6:37:6f:18:aa:16:c1:5c:
                    5c:ed:3a:5d:24:66:c5:76:73:29:57:30:f0:76:a5:
                    6a:89:3c:cd:ef:3f:b7:a1:92:d0:5b:a8:35:26:cc:
                    c5:6f:83:4b:30:0e:dd:71:f0:06:1c:ff:a6:f2:fe:
                    15:42:31:ae:c5:32:de:86:9d:40:53:c3:9d:0d:e2:
                    25:7b:b9:a2:e9:0f:9b:b7:89:a7:d9:6e:d7:03:25:
                    fc:0b:79:b6:63:34:0a:37:9c:a7:d2:51:ee:8d:73:
                    f1:d7:ad:ea:65:c4:cc:f1:e3:89:78:65:64:d5:80:
                    f9:3d:36:5b:b1:96:c1:15:b2:a3:f7:0f:93:eb:49:
                    20:e9:13:48:3f:92:19:29:e3:d3:df:60:08:6f:50:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D2:DD:F1:76:D4:25:B3:87:39:AD:22:2B:45:AE:83:48:14:1B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/ec746cda-6b08-3f4b-9c2e-304be7a12eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:89:c3:26:60:1f:63:48:0d:f6:24:da:74:af:e6:23:b4:33:
         95:95:99:7a:4d:83:3d:8c:6f:63:8b:f6:33:82:61:2e:88:18:
         8e:38:ca:e6:89:5f:c0:be:96:ed:bc:eb:e5:a1:c0:eb:da:e6:
         10:8f:c9:e5:c0:53:ba:ae:17:c4:d3:85:d5:7a:38:2a:52:13:
         9b:82:ba:a4:14:37:5b:b8:7a:18:da:f5:54:fe:c3:ce:10:e5:
         d4:02:60:43:c5:3b:82:b6:e2:1c:a4:aa:4a:e3:c5:2b:40:d1:
         68:75:73:b8:eb:fd:fb:41:37:7a:13:20:bf:a7:05:8a:c6:1f:
         fd:6a:0d:3a:85:15:e2:d7:c0:b5:14:f8:32:1a:1d:1a:5a:f1:
         89:94:5b:37:01:b6:6a:9e:90:bd:1a:4d:e0:a7:f2:72:64:ea:
         81:8f:b0:33:56:21:b9:f9:b9:d7:4f:f0:a5:c3:6f:97:e5:5a:
         6a:ce:5d:43:d7:30:4d:c3:7e:e0:c0:d3:3d:93:f6:73:c3:7b:
         0b:45:ad:92:ca:dc:7e:cd:ca:b8:50:8c:90:b0:f3:f5:0d:98:
         16:11:6d:65:db:fe:1a:5f:92:52:02:d9:16:63:81:12:8c:77:
         54:01:fd:d1:3a:2d:40:bc:36:7c:4d:d2:0a:20:4a:17:d5:ae:
         54:ab:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:00 2026 by rpki-client