Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa
File:                     50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa (raw, json)
Hash identifier:          dDk30Qmi7L04xOawYqCooc4ZBYT2UkrIakB95zEGIb0=
Subject key identifier:   C3:09:67:8F:C2:69:9D:89:69:36:0C:59:D6:DB:BA:67:90:EF:6A:42
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6EDA6060878DFDAAAE234680
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     209485
IP address blocks:        131.153.91.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:60:60:87:8d:fd:aa:ae:23:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=46c59020-2450-4c40-9bbe-2a3ee900bfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:14:a7:09:eb:fe:6b:bc:7d:0d:95:7e:7d:
                    d5:b6:1c:5e:f3:34:48:c5:e4:46:1a:a4:d4:c7:c5:
                    b9:cf:36:d2:ac:e2:a3:ad:a8:e9:05:91:af:a9:6d:
                    1a:e2:ca:16:ee:f3:bd:5b:94:da:fa:09:e9:0a:d1:
                    a2:a4:82:76:65:d5:2c:35:75:98:77:89:68:1c:84:
                    52:69:a3:e7:e3:fe:6a:91:87:a0:31:d3:a9:64:71:
                    0e:49:c5:8f:d1:17:b8:94:60:24:ff:ad:a8:f3:43:
                    5a:be:fe:92:db:17:3d:6f:7e:77:e2:45:c5:2b:0a:
                    08:5c:e3:47:67:dc:94:c5:fb:df:a0:29:98:7e:b6:
                    b0:35:9f:89:b2:64:25:7d:58:6c:87:e2:42:fc:91:
                    b3:d0:c9:f9:47:5a:2a:df:1c:44:7a:7c:99:a6:64:
                    d0:dc:d1:22:eb:7e:bd:d5:85:b2:b4:1d:90:7e:43:
                    f4:27:e5:54:d6:76:be:d0:bf:9b:27:c4:0e:4e:3a:
                    fb:e5:54:4c:48:ad:d6:b8:c2:dc:fc:8a:18:2f:5d:
                    6b:88:6c:b2:12:62:92:8e:11:5a:11:c8:96:4e:1c:
                    55:6c:71:c2:b6:97:ed:8f:d8:d1:fb:c4:af:09:88:
                    ed:2f:ae:dc:88:10:02:dc:96:73:f9:f2:93:1d:6b:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:67:8F:C2:69:9D:89:69:36:0C:59:D6:DB:BA:67:90:EF:6A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b0:ca:ad:b0:d6:3a:8a:64:ce:57:af:e5:8b:b3:7c:53:97:
         41:a6:4d:25:fd:aa:eb:89:d0:12:67:63:cc:78:2a:14:ee:00:
         d6:0e:af:20:97:1e:39:a4:20:b8:e2:c6:bd:79:e9:5a:65:14:
         6b:8c:b8:d7:8d:54:20:e9:5c:b3:b5:65:fe:76:31:cf:68:93:
         b6:c1:b2:67:a4:9b:cc:42:74:4a:79:0e:79:a5:24:18:65:86:
         99:b2:30:5e:ab:56:02:0a:cc:9c:fa:3b:2d:78:1e:10:2b:ee:
         f4:c9:68:9f:23:e8:30:d0:23:0a:79:7a:95:39:18:b4:17:3f:
         c8:a5:46:d9:d3:7b:5d:6c:ad:0e:9e:10:5d:39:40:25:b0:72:
         ea:55:a5:99:c5:83:14:64:33:99:79:f4:41:a0:41:d1:ab:e8:
         49:6f:ad:cf:8d:28:a7:5e:c4:1e:ea:31:68:81:6d:d1:0c:31:
         66:60:eb:a9:ca:30:a7:c0:b8:0c:93:eb:f0:50:13:9c:31:f1:
         c5:1b:5f:42:e7:56:4a:15:ca:fa:04:48:31:9d:25:a1:90:c1:
         8f:89:55:64:6f:9a:74:a6:70:5e:10:db:b6:8b:f3:fe:e5:6c:
         bf:7a:24:50:99:35:fa:9c:60:cb:5a:48:a1:f6:dd:cb:73:0b:
         db:99:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:05 2026 by rpki-client