Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
File:                     2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa (raw, json)
Hash identifier:          94IMUhSD0rYVn/WTJbl+CnxTNmiCd4RCIi0a+pL7AJ0=
Subject key identifier:   7F:2A:5E:11:A5:05:72:CA:7E:40:14:27:C5:03:89:10:63:D9:39:47
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584CEFF2325D19DCF30D197A6900
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     19437
IP address blocks:        131.153.239.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:32:5d:19:dc:f3:0d:19:7a:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=2fc5fafa-5a48-4249-ac02-53c9da56413a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:82:9c:68:aa:cd:ba:5b:a9:7d:4a:fc:5d:
                    8a:9d:52:37:55:e1:c6:d3:3e:98:01:60:46:06:fe:
                    fd:51:37:d4:a7:90:39:16:1e:5d:f0:ff:f1:12:13:
                    37:bd:df:20:41:f9:1e:ba:8c:34:dd:7f:de:8a:69:
                    07:89:56:23:52:e2:19:ea:53:dd:5d:cc:75:1e:44:
                    8c:ed:32:fa:de:9b:6c:d6:46:1e:c3:07:9c:77:83:
                    61:6a:e6:52:6f:22:23:09:d9:d1:c2:90:49:e4:e2:
                    a8:db:8a:ff:c1:2b:63:89:e5:8f:96:b9:b0:96:88:
                    0f:ce:ab:fc:96:26:36:14:b6:0e:12:0b:a5:46:cf:
                    2f:2d:22:ce:ba:e1:3d:d4:d7:0d:3d:90:74:e7:9d:
                    69:0c:02:6d:08:f3:6b:38:88:75:d2:94:bb:ae:7c:
                    ca:2e:48:85:68:b0:85:60:df:d3:4c:17:79:55:da:
                    31:d2:97:0b:82:66:57:32:14:8d:79:e1:9c:8c:ec:
                    5d:17:e6:0f:69:0e:e5:22:18:20:fd:24:00:4e:80:
                    ec:91:e2:89:b6:f0:11:0c:1b:dc:e5:81:bf:83:5e:
                    7d:be:54:cf:33:17:3e:2a:d8:0e:2f:83:c0:76:5f:
                    d7:db:2b:65:44:70:24:20:d3:e7:c5:b0:cd:a5:af:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2A:5E:11:A5:05:72:CA:7E:40:14:27:C5:03:89:10:63:D9:39:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:21:21:97:da:ca:86:6f:34:80:45:3d:8a:95:f3:03:a3:
         32:5f:f4:3c:a8:f3:14:90:6a:a2:ef:3d:e9:3b:09:1c:08:f4:
         c9:9b:4b:6d:a0:a6:1d:32:0a:d8:ab:81:1d:c8:be:42:b8:8d:
         82:41:39:c9:2b:c0:21:26:2a:fc:f8:a5:f9:4e:c0:92:3e:b3:
         76:98:85:7f:49:18:b2:7e:2a:52:62:cc:da:18:81:6b:d3:73:
         6f:47:6c:2c:e3:e3:ad:1a:67:2d:90:93:c4:fd:12:61:11:9a:
         c9:fc:34:49:a1:a9:aa:fe:53:42:06:5c:cc:6f:eb:f1:c7:66:
         40:dc:60:46:db:05:83:2f:c2:57:b7:8f:7e:d8:6d:3a:dc:be:
         70:f9:c0:b6:c4:d6:6c:4f:93:87:8c:e9:cd:1f:19:fd:61:8c:
         5f:88:e4:5c:e8:51:b2:63:db:0f:88:48:fa:71:23:67:7c:9f:
         0d:9b:d9:a0:22:16:74:d2:db:53:d6:20:1b:a9:65:80:8b:0a:
         63:1e:ed:81:a7:3d:6e:4a:1c:e3:29:ab:9c:b9:c1:18:37:a8:
         14:86:7f:5e:de:49:81:57:1a:26:15:18:91:81:64:78:ee:b0:
         40:a6:3e:35:1b:3d:2d:e0:9f:f6:be:d8:5b:88:d4:f6:bc:e3:
         0c:dc:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:08 2026 by rpki-client