Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa
File:                     cd1d2995-4610-3bd4-b98d-17721b22293f.roa (raw, json)
Hash identifier:          YZFEaQjdnIy+1HO5GPeYIG4PyLowyKx9/4/Ju9iooeY=
Subject key identifier:   22:72:8F:81:C5:41:69:B4:08:3D:71:5A:4E:6A:39:E3:BF:78:61:10
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6EDA6030492D3C934F098500
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     60558
IP address blocks:        131.153.86.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:60:30:49:2d:3c:93:4f:09:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=ecf09bc2-01e3-4bb0-8bc3-809b7ad674df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:b6:90:cb:a0:82:a9:02:f1:9b:f2:4f:59:
                    c2:5b:12:63:49:0f:b7:d4:bf:a3:1b:1d:f3:4c:83:
                    31:01:09:bb:43:72:70:2f:80:0c:23:c6:78:90:eb:
                    19:15:2c:d3:05:e7:68:51:e2:50:59:47:b2:97:2f:
                    0e:28:27:8d:80:b2:41:de:cb:0e:c0:6f:11:60:ce:
                    6a:46:66:6c:04:0e:55:7c:80:ae:ec:6e:a6:d1:99:
                    9f:45:d5:46:71:7d:6a:1f:77:6b:8d:9f:d3:91:92:
                    07:03:8c:d7:fb:96:c0:3e:4a:f0:47:7a:84:47:25:
                    18:25:3d:9d:67:64:ca:5c:e6:30:f1:12:c6:f0:b0:
                    c8:c6:39:4f:14:5c:d8:bd:39:b4:44:7e:8b:99:a6:
                    cc:a1:78:b2:2c:65:c1:ad:dc:88:17:eb:73:3e:e0:
                    ec:45:b3:26:07:6d:a7:e3:e5:a4:04:1e:dd:f8:96:
                    7d:68:da:0b:e6:5c:67:08:1c:27:9a:b6:7d:18:6d:
                    93:c6:1b:58:a0:5c:d4:1f:59:2c:41:ba:24:3a:1e:
                    4b:33:31:e7:e2:51:b9:d0:4e:a2:44:39:9a:46:5a:
                    1d:c6:30:35:77:21:a7:7c:14:5d:1e:78:7e:d2:4c:
                    ea:6e:a0:e6:12:9a:1b:5f:58:49:ac:21:0e:ec:ce:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:72:8F:81:C5:41:69:B4:08:3D:71:5A:4E:6A:39:E3:BF:78:61:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:ef:9f:6e:1c:1d:69:bc:09:73:d4:97:66:af:fc:fb:04:
         70:ea:32:51:18:e6:fa:eb:e8:3a:ee:43:a9:3f:fa:e6:dd:bd:
         23:cc:b8:a6:a3:70:59:c9:bf:28:1a:e8:54:fd:e6:a9:21:e3:
         ec:00:cd:0d:9d:ed:5e:0d:cc:53:a5:0b:56:95:ee:78:0b:09:
         fc:ec:1b:8e:8f:8b:f2:ca:39:e5:cd:be:68:2e:28:c5:e9:77:
         8d:12:4b:2b:26:8d:39:ab:61:31:ef:0d:05:9d:70:be:55:37:
         ed:af:9c:c9:66:c1:97:8f:cc:46:51:d3:14:13:15:1e:57:0d:
         ba:1d:49:8d:8f:3c:43:7c:98:e1:79:d6:9f:ed:be:49:a3:54:
         a8:ff:51:20:df:6b:d7:79:1e:6e:d4:7d:24:b5:82:b4:65:ca:
         44:1e:bf:76:46:e2:a8:dc:20:95:4d:ee:1c:a9:c4:dc:4e:66:
         02:bb:f3:1f:d4:27:bf:01:ee:d7:6c:00:c4:e4:d9:67:0c:0f:
         3d:f8:e0:bb:0b:1f:55:00:c8:6a:08:a5:12:b0:f0:a2:ea:56:
         e3:28:b2:c1:74:e8:f2:ca:e8:66:4a:63:75:22:3c:06:14:ef:
         1d:ce:d6:f2:f3:bd:56:80:21:1a:65:98:6e:58:7e:b5:d5:d7:
         25:2a:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:51 2026 by rpki-client