Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/31016496-cc89-3953-8c7b-1d9c5466f6da.roa
File:                     31016496-cc89-3953-8c7b-1d9c5466f6da.roa (raw, json)
Hash identifier:          fBgSOV4NJFtWNtpF3MFqSDOtUsXO/1AETGPTTlN/JK4=
Subject key identifier:   EE:68:A5:E1:2D:87:B6:33:AC:19:49:99:CD:ED:02:9D:74:90:4D:5A
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584EA17A5FFD87960FBF5B55F500
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/31016496-cc89-3953-8c7b-1d9c5466f6da.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     16589
IP address blocks:        134.202.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:5f:fd:87:96:0f:bf:5b:55:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=d16f1238-fe7a-48fe-9752-cf4a13968f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:cd:d2:0b:59:c2:55:1f:52:f5:ab:1c:8f:
                    62:e4:cb:60:ce:40:bc:86:b5:2b:ad:1b:e4:af:66:
                    03:f7:aa:10:87:2c:d7:e0:0c:cd:b5:50:5e:54:75:
                    d9:37:c3:10:7a:03:51:9f:67:26:d0:5a:35:02:7e:
                    d2:42:1a:ae:12:2f:7a:29:99:9b:dc:d7:6e:10:61:
                    cb:82:6b:ae:7c:f5:8a:9a:ee:54:b3:ec:0f:b3:42:
                    b1:15:92:4c:0f:38:39:5f:9e:a8:d7:62:ae:d6:00:
                    21:38:0f:33:d6:93:9a:c9:0b:3e:5d:35:64:30:47:
                    e4:89:63:1e:9f:f4:59:fd:67:da:2d:f9:12:79:c6:
                    41:37:9e:3a:bf:dc:c2:90:1f:c0:2d:3b:14:28:3a:
                    e0:59:e6:db:10:07:02:f7:b5:a8:e7:1d:a2:40:87:
                    d8:40:76:c1:35:88:84:f2:14:ff:99:28:3a:a2:7f:
                    8c:ae:57:dd:fe:39:6d:58:9e:03:d9:7e:6e:54:0e:
                    6c:af:cb:e7:fb:9a:2e:0d:e5:9c:54:3c:d1:67:c2:
                    e2:d0:2a:7a:46:0f:58:02:8c:3b:31:4e:7a:f1:4a:
                    6f:1d:58:92:62:dd:35:27:69:26:90:d9:c9:df:e2:
                    bf:57:58:0a:95:04:f4:04:59:2f:d7:e7:d5:d1:0a:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:68:A5:E1:2D:87:B6:33:AC:19:49:99:CD:ED:02:9D:74:90:4D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/31016496-cc89-3953-8c7b-1d9c5466f6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:d2:30:79:c6:56:c7:e8:28:70:da:a2:7b:ec:6d:c5:68:
         65:80:a9:8c:09:42:82:3b:d4:e3:6a:81:1d:13:f3:dc:0b:57:
         30:ef:67:33:dc:10:87:4f:5d:15:0d:e0:0b:c7:aa:37:77:d6:
         b6:06:78:e5:40:b0:68:cb:89:2f:ba:f5:0d:38:79:70:ba:78:
         5a:4b:f8:84:5c:da:24:ac:95:f1:7d:28:6e:74:93:ac:38:d9:
         37:1a:f4:4a:6b:1b:87:ba:9a:ce:f5:95:63:82:19:b0:cd:76:
         44:13:51:e5:1f:31:eb:0a:06:59:8b:c3:2c:38:c6:96:08:8c:
         d2:ca:ae:00:52:b0:6a:52:f5:b7:21:f3:60:44:c6:a2:e3:58:
         f7:39:93:b5:44:7d:23:f3:4a:97:b2:29:4f:c7:e4:94:e6:14:
         49:73:98:2b:35:8f:35:05:89:54:e3:d7:a2:6b:79:52:ff:91:
         1b:9f:96:1b:21:c5:bd:12:a5:0b:18:a3:21:15:14:09:e1:57:
         6d:29:aa:9a:a5:ea:35:6c:d4:b3:ab:22:e9:cf:99:78:7d:26:
         18:7c:d0:49:fd:9a:80:04:f0:ac:36:1a:7a:de:d3:a4:b9:f0:
         0b:ef:4d:de:1b:78:ea:77:1e:2c:a4:16:39:3f:5b:bf:25:c3:
         ed:e9:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:35 2026 by rpki-client