Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0c5b8690-e537-3188-910d-cc219e8d9d5c.roa
File:                     0c5b8690-e537-3188-910d-cc219e8d9d5c.roa (raw, json)
Hash identifier:          5JKjAz2hDpHq98y45wL04YKrqZsJo2wE1esmYQaOnO0=
Subject key identifier:   16:19:5E:76:AF:E8:A6:8A:B3:07:23:1D:36:CD:B2:D0:8E:BF:5D:E2
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584F655D5FC0FE935A6287D7BD40
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0c5b8690-e537-3188-910d-cc219e8d9d5c.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     402288
IP address blocks:        134.202.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:5f:c0:fe:93:5a:62:87:d7:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=a67b7c8c-378b-4480-b7e7-36a36c91937e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:1e:9f:7c:da:89:a6:0a:61:4f:c3:c1:da:
                    47:40:fc:5d:dc:8f:7b:41:b9:2f:ac:a5:95:1e:65:
                    96:a3:98:46:74:bb:ba:cd:d0:c8:ad:1e:a4:bf:15:
                    cd:46:4d:1f:5f:93:0e:b8:43:19:91:36:25:fc:40:
                    4b:68:fc:5c:7e:53:da:8c:68:b8:98:b9:37:d0:e7:
                    b3:21:a4:19:4c:78:de:4a:8d:29:7a:e3:92:c9:8a:
                    58:03:49:82:8f:59:1f:82:21:25:8d:70:ac:96:7f:
                    76:40:c9:6f:77:50:4c:bd:6a:8f:7a:ca:fa:36:28:
                    9f:ed:9c:e9:cf:4e:32:fa:54:0d:b2:5e:91:cb:5e:
                    4b:c4:3f:74:ce:81:16:30:6b:19:16:c3:67:0d:ca:
                    dc:32:32:ae:ff:73:32:f4:16:36:ee:bf:b4:ea:b5:
                    c1:a2:d9:20:f2:04:6e:6b:05:c2:e8:f5:3e:c4:ee:
                    df:4e:c8:ba:82:38:d0:0d:ec:65:97:c1:19:9e:54:
                    8f:47:42:3b:3e:8c:35:05:63:ca:76:72:21:d0:9f:
                    a1:a1:d6:89:46:63:af:01:0d:6f:ef:70:f1:99:d7:
                    c6:3a:5e:62:1f:17:f0:b3:d7:4c:da:46:8e:15:bf:
                    aa:77:f9:43:3c:40:12:f0:7b:24:d6:c5:d9:ee:b3:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:5E:76:AF:E8:A6:8A:B3:07:23:1D:36:CD:B2:D0:8E:BF:5D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0c5b8690-e537-3188-910d-cc219e8d9d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:11:45:5a:09:1c:39:05:25:d3:87:5f:5f:0d:b2:28:6a:
         86:71:1f:3f:2c:b8:b6:52:65:e1:23:02:df:e6:6f:6f:5b:1d:
         f8:47:df:ab:5c:1b:16:6c:50:8b:6e:68:27:ff:96:96:cf:d0:
         f9:80:ab:74:0b:78:82:b3:28:96:a0:80:81:29:79:9f:c2:d8:
         98:27:6a:84:84:0c:d5:16:a2:8b:a0:31:72:dd:de:0b:17:26:
         09:08:7d:95:f5:15:fe:b3:02:67:29:ee:f8:08:05:dd:61:0d:
         df:29:20:5f:e2:e3:3d:73:1c:f0:40:fb:9a:42:47:6d:3f:a5:
         bb:31:33:0d:14:9f:7d:a8:e4:2b:a5:14:b3:98:6f:66:48:06:
         45:d6:8e:e3:68:e5:ea:a0:15:73:6c:09:98:b9:b8:24:de:96:
         1c:e1:5c:36:0e:66:34:8f:4a:a8:36:2e:73:4d:68:d7:ad:0e:
         25:36:4e:ac:05:19:f3:db:aa:10:9e:42:49:53:b3:ba:c1:e9:
         9b:43:65:01:5e:47:e2:7a:4d:4e:25:43:98:0f:7d:4b:b2:48:
         f6:9a:f8:e5:9f:1c:4e:0d:5b:01:96:e6:45:46:7f:ac:c5:d9:
         78:4a:23:33:a0:80:11:82:02:15:88:3b:8a:5f:b3:ec:62:53:
         d0:85:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:47:33 2026 by rpki-client