Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa
File:                     30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa (raw, json)
Hash identifier:          eE4Ih40kdHCS4/tjV3MtQHYmHuNxNUXqq+XDWkxHc8U=
Subject key identifier:   E0:DA:72:D7:93:D0:43:1D:F6:3B:21:A8:77:FF:EB:AC:CB:55:0D:41
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EF18201F449A28FAE8C3C3160
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     39239
IP address blocks:        131.153.89.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:01:f4:49:a2:8f:ae:8c:3c:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=1201cea4-1e03-4633-b4a2-654cfa9d140b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:0a:2f:f8:2b:b4:11:33:90:1d:fe:e1:1c:
                    37:f8:8e:74:f6:bb:46:5b:19:2a:91:bd:2f:0d:41:
                    b3:87:ec:90:7b:c8:e8:3e:8f:30:1a:cf:f0:8b:26:
                    43:15:92:2a:29:9e:f7:a4:44:48:30:b7:f1:50:41:
                    e0:71:5d:ae:45:ae:ee:13:32:f2:b2:85:56:51:c2:
                    de:e0:82:2d:da:55:46:d0:43:dd:6a:db:7b:32:0f:
                    3e:d3:9c:8a:5b:ca:47:a5:5a:e3:b5:fd:45:ad:c8:
                    54:36:15:b4:61:a4:eb:da:4a:8f:16:5b:30:00:29:
                    94:3c:39:34:6f:45:1b:2b:7e:29:c3:38:77:2d:06:
                    bb:ef:bc:1a:5d:69:e5:61:4b:9c:bc:b9:e4:a1:55:
                    87:e0:2c:ee:7c:07:f9:67:41:b2:8e:bf:30:eb:ca:
                    1c:cc:51:7a:e7:c8:0f:f3:6c:ed:fa:de:e7:14:e1:
                    cc:97:46:34:72:58:1e:c1:04:4d:1c:fc:f1:dd:d0:
                    bf:c9:66:81:88:c4:56:0c:1d:78:47:d6:db:0d:8f:
                    f4:eb:12:8f:a7:f4:81:fd:7a:3a:e6:5d:51:4f:13:
                    4c:da:3d:c7:f1:eb:4f:c1:ac:f6:56:d8:67:21:6f:
                    50:3f:6d:09:5e:ce:01:54:98:c3:a2:9e:39:50:57:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DA:72:D7:93:D0:43:1D:F6:3B:21:A8:77:FF:EB:AC:CB:55:0D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:0f:78:24:b3:01:b3:8f:3e:c1:32:dd:74:2d:b9:93:64:
         ed:ec:53:29:6f:8e:b7:77:03:39:d5:9f:b4:19:17:15:52:03:
         2f:34:2c:49:34:15:cb:37:ca:81:ac:22:e6:da:57:fd:86:a6:
         da:7a:f7:67:3d:8b:07:f5:44:81:13:20:dc:1b:75:66:4e:ff:
         d3:ee:42:e2:b5:80:f7:45:00:a7:5e:b9:ee:4c:cf:89:ec:af:
         1e:56:fd:3d:9b:52:5d:9a:3d:32:e9:4d:d2:5f:25:a7:f1:34:
         d1:16:43:70:07:78:b2:9b:d6:b9:db:6f:35:52:c9:43:31:cb:
         89:ac:28:0e:5d:b3:57:36:10:d9:c4:39:8f:1a:28:94:38:0f:
         5d:31:08:6a:88:7b:5d:01:73:cc:10:91:ca:1b:36:e0:b2:24:
         db:b3:2c:a0:7c:f5:17:58:da:df:82:a4:a4:85:84:eb:fe:21:
         5f:ff:65:81:f4:bf:d8:8d:f0:5b:f2:cd:8a:01:b7:4d:72:05:
         fc:60:00:40:be:24:78:d5:bc:ad:9e:0b:c7:db:9f:b5:d5:25:
         c0:72:7c:bc:53:33:e4:37:98:a7:33:7d:ef:f5:83:24:99:35:
         c8:4a:73:89:91:ab:99:58:0a:e8:15:78:aa:9c:d1:1a:89:d0:
         2b:76:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:29:18 2026 by rpki-client