Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/34d5ca52-f467-3e25-9aa1-75ce7cb34385.roa
File:                     34d5ca52-f467-3e25-9aa1-75ce7cb34385.roa (raw, json)
Hash identifier:          Ze7n3bXNNn9Mai/1nMgEVUVWk84z026UC7VEVTDfDZM=
Subject key identifier:   EF:61:94:E0:1D:0B:F6:2E:60:F3:87:65:63:82:90:F6:00:55:E0:11
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328584F558AF1F9EBF36936585D2B00
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/34d5ca52-f467-3e25-9aa1-75ce7cb34385.roa
Signing time:             Tue 29 Sep 2026 08:59:07 +0000
ROA not before:           Tue 29 Sep 2026 08:59:07 +0000
ROA not after:            Mon 28 Dec 2026 09:59:07 +0000
asID:                     16276
IP address blocks:        148.113.126.0/23 maxlen: 24
                          2607:5300:140::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:55:8a:f1:f9:eb:f3:69:36:58:5d:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Sep 29 08:59:07 2026 GMT
            Not After : Dec 28 09:59:07 2026 GMT
        Subject: CN=c4d4bc1b-63ca-4168-91ed-afbf7e532cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:c9:44:a9:98:70:02:a2:72:e2:e8:e9:ac:
                    b6:48:24:94:2b:10:09:7d:33:da:27:c2:6c:74:73:
                    71:67:4b:9a:4c:a5:d8:03:cd:20:d8:1f:e5:96:a8:
                    42:e8:fc:5d:52:ad:4e:56:99:c6:a0:71:ce:05:ef:
                    1f:2e:52:7e:28:fc:d6:36:39:06:45:3d:1e:13:a3:
                    b4:3c:bf:cd:8a:ae:11:6e:07:55:e4:bf:e9:5c:47:
                    aa:0f:51:e1:4a:75:29:35:93:28:0f:31:0d:f6:24:
                    a9:8a:1c:1c:bf:6f:02:e1:2c:35:77:d4:33:3a:6c:
                    05:a8:53:10:ee:70:02:e6:d1:e7:70:b0:aa:1d:55:
                    92:1c:b9:1e:30:30:b8:9a:d4:7c:90:b3:d6:5c:14:
                    75:3f:08:62:f5:0b:72:05:4e:e1:32:35:b2:eb:0c:
                    b2:30:be:e3:3a:4c:a9:75:39:63:7b:97:8c:67:1e:
                    c0:50:ac:a0:3d:b9:88:08:d8:d3:9b:8e:c5:5c:44:
                    80:99:d8:91:95:be:e3:c9:2e:8f:67:04:99:e0:69:
                    de:af:23:b7:ec:ae:71:11:36:aa:12:ee:9f:25:51:
                    70:42:02:81:4a:34:07:3d:17:04:fb:56:90:a2:92:
                    ab:95:9c:25:d7:63:22:ba:aa:0d:ef:33:7b:d6:b1:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:61:94:E0:1D:0B:F6:2E:60:F3:87:65:63:82:90:F6:00:55:E0:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/34d5ca52-f467-3e25-9aa1-75ce7cb34385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.113.126.0/23
                IPv6:
                  2607:5300:140::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:89:6a:72:43:d4:74:f3:0c:39:6d:31:e6:14:da:bd:f1:c0:
         14:2c:ce:51:30:94:f7:f4:24:f1:7c:5c:cc:59:62:23:f7:cb:
         81:6b:89:d0:55:38:a4:93:2d:7e:fc:de:fb:71:0a:43:1d:40:
         d9:20:86:fc:b1:bc:91:8d:6f:f1:f1:41:98:72:bd:2a:4c:1c:
         8d:2a:45:e8:8d:5b:38:35:e5:86:a0:dc:64:cf:be:99:8e:ab:
         03:93:54:01:68:8f:3e:ed:11:35:63:31:a9:e6:4c:e4:c9:42:
         84:38:ab:0b:d8:8e:6c:ac:30:c4:70:64:c2:16:01:3f:c5:8f:
         e1:b7:ae:59:96:bc:d9:c4:42:2d:34:26:59:56:cb:d4:b2:d3:
         c3:09:d8:0c:43:52:11:f3:04:09:90:0e:3d:cf:2c:68:cb:83:
         fa:10:35:b6:93:13:06:8c:23:e1:81:37:6a:43:e8:19:71:b6:
         19:23:a4:3b:9e:c0:28:4a:27:1d:9a:df:fb:d5:a3:0b:05:15:
         84:3d:5f:fe:f9:e2:6d:ad:b8:9d:48:5e:e3:a0:5e:35:47:d7:
         d0:0c:a1:6f:18:74:24:9e:46:98:a8:9d:85:5a:8a:40:92:1b:
         12:51:c4:09:f7:68:9d:07:a9:50:63:4c:09:a1:44:42:d8:e8:
         95:d1:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:18:54 2026 by rpki-client