Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/358f2860-6bdf-3864-a5d0-211da3bae63c.roa
File:                     358f2860-6bdf-3864-a5d0-211da3bae63c.roa (raw, json)
Hash identifier:          88I6P8uvr6FFJZDzez3c1WQau3e4jcrlyg5qXOKOg0k=
Subject key identifier:   2F:70:34:5D:99:21:58:9D:B2:C4:FB:1A:31:86:07:18:E4:3C:8E:C7
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F4328584F2C27FE47740147EF7C047600
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/358f2860-6bdf-3864-a5d0-211da3bae63c.roa
Signing time:             Mon 14 Sep 2026 13:11:36 +0000
ROA not before:           Mon 14 Sep 2026 13:11:36 +0000
ROA not after:            Sun 13 Dec 2026 14:11:36 +0000
asID:                     60404
IP address blocks:        141.195.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:27:fe:47:74:01:47:ef:7c:04:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Sep 14 13:11:36 2026 GMT
            Not After : Dec 13 14:11:36 2026 GMT
        Subject: CN=97377f81-e857-4ea9-bdc5-774e3617ce5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:b7:a7:cd:50:ac:57:af:9e:a2:72:82:95:
                    bc:f5:60:07:44:55:05:72:a7:c9:7a:d0:40:3a:0a:
                    bb:13:69:e2:f4:03:45:26:bc:6a:1b:74:6b:2e:d9:
                    56:42:c1:59:2b:bd:c5:28:53:a7:7a:f0:72:01:6c:
                    be:c6:54:b6:84:83:77:69:e7:9d:c2:17:09:f2:71:
                    e0:3a:db:21:1e:88:92:a6:3d:41:93:41:1b:a0:30:
                    85:4b:51:f2:d7:5f:b2:e1:7d:d6:5f:fd:e5:db:17:
                    29:bd:fc:d5:b3:b0:a8:11:09:4e:c2:03:92:77:89:
                    b4:e7:92:1b:34:e0:f4:6c:ca:af:a1:f2:4f:ad:11:
                    14:53:c6:b7:86:52:b7:c5:8f:a3:ec:15:65:e2:e1:
                    e3:a4:f6:5e:28:10:1a:f7:fd:c8:f4:f5:dc:a3:ab:
                    d6:aa:f8:e4:1e:ea:7b:e8:20:22:e3:4a:bd:38:01:
                    ad:57:fe:2f:2b:b4:49:15:19:b6:2e:2b:8a:74:d1:
                    40:bb:31:a9:13:70:5c:3a:08:56:01:6b:c4:0c:85:
                    b9:e2:ee:b2:00:38:a4:c0:69:da:68:7c:b6:37:67:
                    ef:09:b8:5e:a5:c1:20:28:30:dc:49:82:b1:c2:aa:
                    2e:01:84:2a:e3:04:a2:2b:29:6d:3a:7e:3c:d7:09:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:70:34:5D:99:21:58:9D:B2:C4:FB:1A:31:86:07:18:E4:3C:8E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/358f2860-6bdf-3864-a5d0-211da3bae63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:24:41:39:a7:0c:88:ae:db:dc:f0:27:85:96:33:90:f0:ee:
         2a:b2:0a:bb:2f:91:db:1b:ca:bf:87:c0:38:56:72:b1:53:eb:
         fa:3a:0b:4f:c1:50:c8:1f:47:fa:a3:6c:9b:0d:be:8a:b2:fb:
         2c:a3:72:5c:c7:03:9e:48:13:bc:0f:f1:0d:75:f0:c5:40:6f:
         09:44:13:32:17:e6:1d:2a:cb:1b:1e:78:ac:2e:d7:75:e8:3f:
         c7:68:b3:1b:7d:58:a4:dc:5b:90:b3:24:49:d3:9b:3c:d5:79:
         92:34:45:b8:85:a9:57:ec:e2:e5:d7:79:4e:34:0d:72:f7:ea:
         34:4f:5c:22:0d:9a:28:a6:f7:20:0b:df:35:9d:ef:5c:10:50:
         1b:ca:f2:40:65:56:d3:0f:1a:53:06:48:18:b6:08:0e:af:5a:
         83:45:01:9c:6b:62:24:30:a4:db:32:50:2d:7d:65:90:d3:ff:
         fe:93:e2:dd:ad:ad:64:cd:da:43:15:c2:49:44:95:29:93:d6:
         86:ca:ff:dc:d7:f1:1d:4c:35:1e:02:bc:4e:df:c8:b3:f7:07:
         46:53:78:e0:79:df:a2:1f:cb:4b:97:91:fd:2a:bf:79:96:3c:
         d5:94:c0:6c:4c:68:b3:26:16:ea:e2:6b:6b:f7:1d:10:3f:8f:
         0d:43:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:50 2026 by rpki-client