Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa
File:                     34356c57-8521-34f3-a43c-872918075c40.roa (raw, json)
Hash identifier:          SY3fLksHzTAKD6KbtJvvZBbjDBmgiMUcZO84YkXaNus=
Subject key identifier:   28:AA:68:52:B1:97:4F:FF:A2:DE:27:78:B0:96:5F:43:26:D9:2F:98
Certificate issuer:       /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd
Certificate serial:       010D0C9F4328584EA78805C7FFA7FB6F9D758480
Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8075
IP address blocks:        138.128.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:05:c7:ff:a7:fb:6f:9d:75:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fea76465-2894-4ba1-b3bf-e5773124a978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:50:1c:e2:41:a5:4d:3d:7f:66:e7:9e:ad:
                    b4:38:d5:4d:df:d9:0c:7a:61:ce:7e:02:0e:4e:a1:
                    cc:0e:4c:0f:bf:56:fe:57:5e:bc:18:12:13:af:64:
                    21:1a:25:a7:65:6d:cc:9a:41:b9:10:78:d7:a3:44:
                    c2:50:4d:2f:9e:67:02:d8:a8:75:23:0a:78:61:56:
                    9b:db:8f:20:db:70:74:5d:33:12:8c:17:96:cd:e6:
                    7c:83:f6:e6:61:5f:76:13:6e:30:9e:dc:60:5c:8d:
                    fd:9c:d4:6b:cf:e1:a4:d8:b7:c5:18:04:b3:2a:25:
                    bf:48:7d:4f:47:39:d7:75:27:48:0e:05:9b:59:0b:
                    02:05:7e:e5:32:5b:b6:f6:b1:fc:55:79:5d:77:30:
                    4b:d1:dd:77:2b:ca:2c:35:72:a6:10:7a:74:11:a5:
                    f6:0f:40:5f:65:3d:87:a4:4b:f1:96:9a:b2:e1:4e:
                    47:e9:18:66:b2:d4:e1:39:83:16:c4:19:b4:6f:ce:
                    ce:ed:0c:35:72:8d:80:df:83:50:17:b8:59:a2:93:
                    59:58:88:d7:66:a7:f0:51:3a:b9:a7:33:22:03:fb:
                    62:64:45:17:3f:43:8d:7d:2f:fe:ae:18:b5:1b:49:
                    f2:3b:42:9c:88:63:00:b8:c4:c7:e2:30:be:99:f8:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AA:68:52:B1:97:4F:FF:A2:DE:27:78:B0:96:5F:43:26:D9:2F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl

            X509v3 Authority Key Identifier:
                keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:c4:fe:1f:37:2b:52:30:08:31:a6:c2:f7:f1:33:dd:a7:
         43:ef:91:c7:c2:f5:a6:af:cf:c9:9d:be:9b:38:10:5a:2d:3a:
         8b:15:a4:a3:88:b6:c1:63:0c:3a:5e:f0:64:3f:ae:e6:d9:b5:
         5e:d0:5d:f4:12:3c:d9:4c:dc:1e:73:ab:44:2d:e9:c9:e3:a8:
         1a:d2:22:54:50:3b:fa:f3:f3:08:60:f9:c8:2a:b5:23:82:cb:
         81:28:2e:0a:90:25:ad:16:4c:ce:11:11:07:9e:56:4b:5a:56:
         de:dc:2c:ec:de:01:97:c6:a8:8c:07:8a:04:5a:a4:02:e1:c4:
         23:03:d6:f9:29:be:77:41:f7:85:37:7c:21:04:48:1b:46:d1:
         8c:8f:f0:4b:cd:90:f0:04:3d:fc:75:32:9a:96:ef:2c:83:be:
         75:ab:e4:15:58:91:5d:55:d8:f3:d0:95:57:ee:60:e0:29:05:
         8c:07:94:d9:fd:93:4d:40:bc:79:6c:ca:ba:9e:f6:a6:a8:7a:
         bd:f7:2d:72:3d:fd:5c:b7:53:9f:e7:dc:47:91:20:21:cb:5e:
         a3:89:48:a4:aa:5d:75:14:09:e6:d9:3f:06:e3:0a:63:76:10:
         ec:82:df:bc:c2:02:f3:a3:fe:8c:9c:3a:71:d2:84:a4:63:07:
         80:90:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:55:57 2026 by rpki-client