Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa
File:                     31a42a29-1dfe-34a8-ae78-fb73af442044.roa (raw, json)
Hash identifier:          zmUhhg2P2EI6vIIbgY/dsf3VAMdorvB3F0aIthdqJ0w=
Subject key identifier:   26:5A:40:13:19:BE:39:A0:F3:A9:A3:DE:AF:CA:3A:F1:82:C8:68:C4
Certificate issuer:       /CN=4b439f01-1270-40c3-9c4f-92fda6473e3d
Certificate serial:       010D0C9F4328584F15CCEE682B1046347E85AAC0
Authority key identifier: AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     399347
IP address blocks:        130.250.226.0/24 maxlen: 24
                          167.150.0.0/24 maxlen: 24
                          167.150.177.0/24 maxlen: 24
                          209.135.154.0/23 maxlen: 23
                          209.135.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ee:68:2b:10:46:34:7e:85:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b439f01-1270-40c3-9c4f-92fda6473e3d
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=956351fd-dfae-443e-90cc-6fd9bc026e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:8b:96:50:23:e6:be:db:c5:09:ca:e0:b3:
                    e9:f7:7c:5e:f8:98:10:4d:46:3a:59:f6:f3:4c:a2:
                    55:a2:93:1b:7b:6b:c5:2a:37:fa:cf:8a:eb:9f:1d:
                    4e:fe:01:d3:13:1b:33:24:1a:8d:0e:a7:62:55:41:
                    a9:ba:07:29:8e:28:7f:2f:1d:e6:d7:81:a1:dc:85:
                    ff:7b:18:54:3f:95:ed:87:dc:22:d4:cf:ae:94:8e:
                    0e:40:b0:05:42:df:90:72:65:64:06:65:6e:61:9c:
                    6c:f7:65:ee:45:f4:8a:5b:11:fa:b5:0c:ab:cb:3f:
                    1a:6c:68:9d:2b:b7:6a:16:a1:e0:93:9d:88:01:11:
                    27:d1:58:d0:5a:ea:3c:4b:ba:91:e1:ee:33:7e:81:
                    4d:3b:19:29:d7:89:61:a4:55:4f:ad:e9:af:a5:97:
                    a7:97:bc:de:46:34:68:56:ab:ef:b6:07:5b:d2:53:
                    b3:32:13:eb:3e:3b:09:f0:63:24:19:b6:f6:a0:c3:
                    56:b6:45:e7:cd:61:9c:aa:6a:90:12:4a:4d:c0:5a:
                    84:8a:09:a2:ca:60:e5:8e:63:7c:d7:05:8d:25:d2:
                    28:30:d0:c3:f2:fd:d2:b9:21:58:d6:df:d4:55:bb:
                    58:f8:80:80:b6:7b:8f:52:65:1d:81:64:11:bd:29:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5A:40:13:19:BE:39:A0:F3:A9:A3:DE:AF:CA:3A:F1:82:C8:68:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/31a42a29-1dfe-34a8-ae78-fb73af442044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d/4b439f01-1270-40c3-9c4f-92fda6473e3d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:8C:86:8A:48:9D:8C:9F:36:5D:5E:15:66:60:F3:77:2A:B8:BF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4b439f01-1270-40c3-9c4f-92fda6473e3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.226.0/24
                  167.150.0.0/24
                  167.150.177.0/24
                  209.135.154.0-209.135.156.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:e5:1e:27:51:20:79:ac:fd:bd:bf:33:83:5e:0f:00:df:a2:
         93:ef:82:bf:32:c8:57:05:9d:a9:b1:65:83:66:07:17:6e:49:
         dc:7f:07:7d:81:b8:2b:47:bf:c5:40:ee:72:64:37:e3:e4:03:
         c1:38:95:ff:3c:d8:89:13:be:a5:97:26:53:27:81:45:86:7d:
         ed:aa:08:bc:61:45:45:da:85:cb:ba:91:d6:25:cb:c4:29:24:
         21:c2:71:bb:9d:ec:11:e5:6b:89:74:ec:08:23:fd:9f:77:28:
         d8:f7:ac:a7:4f:3f:a7:74:df:b1:b5:31:9c:93:82:5d:af:80:
         95:d4:60:4d:9f:03:c2:c0:0b:3b:32:7c:18:cf:16:8d:3c:5f:
         d0:6f:4d:21:aa:32:93:81:61:1c:af:8b:c7:60:2d:c3:3e:34:
         b3:7e:50:c8:fb:77:76:70:16:2b:98:f3:9f:e5:b4:f9:bc:af:
         b4:2a:f4:78:78:12:ef:7c:3a:36:b4:88:fd:30:b0:c5:ec:ae:
         2e:0c:3c:da:37:6f:21:30:9d:43:d5:14:68:4f:2b:68:e9:b2:
         72:f6:56:b1:40:44:50:09:8f:f7:a1:62:cb:68:45:c0:55:3b:
         f2:96:0a:02:e2:bc:4e:05:10:82:f1:66:40:8b:73:62:4a:96:
         fd:6e:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:38:14 2026 by rpki-client