Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
File:                     ca174187-a544-3df0-8b36-2922d0060aea.roa (raw, json)
Hash identifier:          INrQH+FpcCXD+4aJiVrT8zfPwVwQNuS+gb5K1AKNX1c=
Subject key identifier:   5F:9B:FE:8D:CC:B8:8D:3F:E4:2B:C7:CE:BB:19:82:50:3E:5D:EB:89
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D746FBC6F796CAF22A03824A0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        131.153.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:bc:6f:79:6c:af:22:a0:38:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=6d15db08-1869-4ab6-8413-a4a7bdbf67ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:52:35:b8:f6:31:f2:6b:c7:c1:19:89:59:
                    ff:66:d2:32:69:29:8f:7b:eb:49:aa:47:fe:7a:1e:
                    91:9f:97:c7:43:c2:9f:6e:11:e5:a9:a4:1f:b5:1b:
                    ee:49:d7:ed:cd:c0:1a:8e:14:31:a0:cf:ef:c2:ec:
                    e3:7f:b9:1e:5e:b8:0b:6e:04:47:24:58:30:64:1e:
                    8a:f8:ba:3d:6b:28:78:75:f6:9f:1b:bd:99:0e:65:
                    46:8a:ed:4c:1e:c7:8d:11:b8:ea:2f:97:8b:e5:dc:
                    82:90:8d:3b:77:87:51:00:9a:12:d2:56:6d:d7:a3:
                    e6:59:06:69:29:57:fa:5e:03:90:88:93:12:ea:c7:
                    67:21:ca:21:85:53:08:0f:1a:d1:63:4a:6a:0c:98:
                    7f:bf:54:3b:80:46:9b:da:ea:5c:b9:a8:6f:0c:38:
                    78:df:0f:23:a1:d0:cb:24:85:16:d1:a8:a0:fa:e6:
                    0e:c8:ce:87:a7:77:5f:7f:fa:f9:22:f5:ae:3c:db:
                    f5:d7:99:69:fb:16:99:14:f4:12:9c:61:9b:06:04:
                    ac:e8:5f:b8:3b:4b:02:09:7e:35:70:99:f4:e0:0c:
                    11:cd:3a:48:61:d1:dc:df:60:57:73:fd:af:02:df:
                    94:7d:7c:b9:a9:8b:e5:9e:3b:b7:4c:37:57:99:cd:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:FE:8D:CC:B8:8D:3F:E4:2B:C7:CE:BB:19:82:50:3E:5D:EB:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:70:13:9a:e1:e0:66:a3:0b:56:73:10:54:c2:47:35:c8:
         f9:ce:68:73:65:e9:06:21:9a:44:ca:ed:10:a3:48:a6:36:2f:
         f6:a3:b5:4c:b7:dd:e5:54:67:2d:69:70:2e:03:65:69:d1:a5:
         79:0e:91:28:e8:b1:93:94:d4:24:b1:79:f8:e5:55:1e:57:92:
         21:42:ec:92:f2:9f:96:1c:97:ff:15:6f:57:a3:59:78:63:72:
         12:ed:8f:25:5a:cb:e8:4f:2f:1a:69:83:a5:fb:0c:29:1a:06:
         d1:61:de:24:65:e5:d2:d7:57:a3:4c:fc:15:cd:b0:67:7f:6a:
         83:22:01:4c:67:f9:2b:dc:60:1f:9b:72:59:dd:f8:a9:6d:2f:
         7e:fd:9d:7d:4b:96:9f:23:e5:19:89:e4:b3:d7:3d:6a:b8:5f:
         7d:e9:c4:25:79:24:8f:8f:04:fa:5e:ad:a6:56:9e:69:d7:64:
         d0:0d:cd:5e:22:92:17:2f:78:61:11:79:9b:98:1d:74:05:66:
         87:76:80:0a:ad:d3:e9:8c:75:2b:43:9b:63:e1:12:bc:06:e4:
         62:be:68:76:b1:a5:67:20:c1:64:6d:e9:9a:94:ce:58:6c:39:
         9b:7e:98:d6:74:aa:e5:ff:3b:ca:85:c5:f0:d6:46:8a:e0:dd:
         bf:48:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:40:29 2026 by rpki-client