Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d34c3e28-2741-3931-b04c-a989d84d5bf2.roa
File:                     d34c3e28-2741-3931-b04c-a989d84d5bf2.roa (raw, json)
Hash identifier:          Vliaus2iXn/AiF54HDy7tuDB3AIcIEg5DAPtxAk5758=
Subject key identifier:   5E:AF:25:85:4F:0E:2A:C2:3A:39:07:8F:46:3B:EC:71:80:2D:24:51
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584CEA5CEC2E01091B278250F8E0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d34c3e28-2741-3931-b04c-a989d84d5bf2.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     14114
IP address blocks:        157.133.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:ec:2e:01:09:1b:27:82:50:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=1ea275c0-ea65-4eec-bf42-325acb473be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:b6:f8:71:6a:b0:87:3b:07:16:53:94:5f:
                    0f:1d:4e:a2:f8:5f:c3:15:c2:b3:e7:59:82:36:07:
                    35:87:26:18:65:d2:65:af:9e:57:b6:77:29:ab:31:
                    9f:15:dd:1b:ed:78:f2:bd:5e:46:af:93:8c:d9:9d:
                    3f:e8:45:d2:3a:f6:02:b0:a3:11:f2:c6:21:f6:ac:
                    90:29:1e:8d:03:28:d0:c0:6f:13:36:02:ac:7c:a5:
                    ba:3c:e6:f4:15:32:61:95:08:5c:82:0f:ce:81:12:
                    12:6a:c7:da:ed:eb:2b:93:60:59:78:6e:53:05:e2:
                    36:4c:4e:de:70:b7:56:fa:c1:cb:66:8f:71:06:f2:
                    5e:94:ac:c0:0e:0e:db:01:c0:cf:03:d8:29:7c:90:
                    eb:70:df:b8:e8:96:e3:fa:06:e7:b0:b4:61:8e:fd:
                    1d:83:a7:cb:03:eb:67:cc:dd:5f:00:39:b2:0f:6c:
                    7a:4f:8e:48:1d:01:5d:87:43:b5:06:9e:2e:ce:31:
                    e3:9e:07:7e:b5:79:59:4d:b9:03:e0:90:76:c2:40:
                    21:28:c7:bd:d2:74:7c:79:04:de:ad:f1:37:e5:16:
                    53:b4:4e:cf:1f:be:ad:2d:89:2a:77:e3:b4:b4:58:
                    ff:2c:ab:71:a3:a8:00:af:c8:7b:70:67:a5:ee:94:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AF:25:85:4F:0E:2A:C2:3A:39:07:8F:46:3B:EC:71:80:2D:24:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d34c3e28-2741-3931-b04c-a989d84d5bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a5:ae:a5:fc:24:c0:c1:32:b7:6b:38:ac:fe:8b:60:8d:50:
         f9:a4:68:02:da:74:8d:85:da:66:03:2e:f0:84:ce:2a:36:64:
         80:79:34:ba:74:0c:fe:91:5e:a9:63:db:32:e2:3d:03:5b:ee:
         5b:eb:10:f3:02:52:89:ef:42:11:a2:24:ce:51:46:79:5f:c1:
         a2:65:12:69:45:ef:46:a2:2b:54:29:4c:02:8e:ba:a7:8f:e2:
         3f:66:a7:c9:af:7f:b2:ae:8d:0d:3d:9c:1a:27:92:56:8b:3b:
         04:8b:7c:e0:81:59:1c:06:27:fd:cb:e3:cd:e3:c3:26:19:a3:
         31:6c:5d:63:00:51:a0:52:44:94:4f:d1:fb:86:cd:38:b9:b9:
         60:1f:c1:5b:7c:e4:c6:a2:9e:e1:75:16:b6:f6:67:d9:8a:8a:
         f4:8c:60:d1:1a:16:4f:7e:fa:49:7d:ff:03:4e:3d:a0:42:95:
         c0:89:06:ae:4d:f2:28:fb:0c:20:e8:64:bd:c3:05:71:66:49:
         af:cb:6d:b2:0c:40:53:45:35:60:e8:1c:50:90:f0:0d:67:fe:
         a6:10:90:e5:df:bc:97:d0:87:cb:1c:a6:e7:0c:fc:56:53:0f:
         0e:9b:0b:62:54:43:6b:b5:00:5e:87:38:72:88:0b:cb:b2:5e:
         a7:53:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:57 2026 by rpki-client