Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aad7b8ef-be0b-3d12-91d3-2aec49e47398.roa
File:                     aad7b8ef-be0b-3d12-91d3-2aec49e47398.roa (raw, json)
Hash identifier:          LS6ZxFB5DyFAjPzCUmDQgd4aXY1kWGSrH5mrOHOFvgw=
Subject key identifier:   2F:8A:6F:A7:83:EC:9B:72:14:32:DB:88:70:6A:EC:DA:7F:79:4F:34
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584F3B7D26F0CA744F45F3B38C00
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aad7b8ef-be0b-3d12-91d3-2aec49e47398.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     398391
IP address blocks:        131.226.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:26:f0:ca:74:4f:45:f3:b3:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=5b74935b-788c-400b-bd6b-3e119aa87a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ea:ac:36:aa:72:a5:bb:c7:33:b3:88:b1:35:
                    0c:b8:71:41:37:f1:d1:55:d9:3f:b0:83:17:4d:1d:
                    33:57:59:80:e7:e3:a1:9d:43:09:29:72:b6:8d:3b:
                    e2:47:d8:61:9e:1c:c5:d7:ff:c1:2c:96:0b:5b:19:
                    29:b5:c6:9b:59:bd:99:59:8f:b6:be:51:3f:95:e3:
                    cb:d4:6a:f1:17:0e:72:f9:e9:c4:27:77:4d:8e:d5:
                    f4:0c:82:54:7a:05:3c:b4:fe:4f:2c:c1:60:e0:f1:
                    39:ea:ac:61:f5:c9:38:50:5a:d2:80:00:fb:b9:e5:
                    af:1c:06:9f:3d:8b:00:fd:4e:84:cf:2a:b9:c4:66:
                    a2:98:24:c7:f8:1d:8b:13:c8:aa:0a:5b:9b:af:50:
                    9a:80:dd:64:99:fb:b9:22:80:24:95:c5:ac:f0:cf:
                    10:44:d0:f2:4b:99:4a:42:ba:96:21:ab:ad:f7:f1:
                    94:a8:c6:06:a6:d3:18:37:41:b7:d3:c6:89:6c:c4:
                    ca:99:da:b4:c7:98:60:f7:d7:77:16:db:46:30:64:
                    ba:ec:85:8a:03:ac:d1:27:d9:cf:d9:1e:bf:69:30:
                    9f:fd:0a:50:dc:2d:3a:f7:92:b6:18:27:f0:e6:33:
                    61:86:68:7d:a1:25:2e:31:e3:4b:d4:1b:93:12:47:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:6F:A7:83:EC:9B:72:14:32:DB:88:70:6A:EC:DA:7F:79:4F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aad7b8ef-be0b-3d12-91d3-2aec49e47398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:86:2d:96:2a:3c:f3:ef:58:04:9c:52:ad:59:fc:c7:10:
         6c:52:c5:cf:57:93:92:4a:cb:42:31:79:16:3b:17:71:9c:35:
         29:14:21:8e:8d:4a:7c:1b:e1:8b:55:8d:f6:42:09:42:b6:37:
         b4:5d:95:1c:77:b0:12:21:9e:19:8f:bb:b5:a9:59:2d:06:80:
         94:df:38:ef:85:7e:ad:67:b5:73:e7:20:2b:72:d7:b5:18:7f:
         81:18:ba:a4:0a:0e:ea:6d:af:26:67:77:ed:bf:b7:32:da:f5:
         68:a5:5c:13:56:4a:69:c4:dc:37:e1:53:97:44:38:9a:fc:0a:
         20:40:ee:2c:12:3a:b5:86:c4:31:18:63:49:f7:bd:d6:92:17:
         9c:64:2c:f1:12:93:36:d3:b3:15:b0:2f:bc:45:da:95:2e:58:
         26:aa:43:53:c8:ab:44:9f:c0:59:e5:38:80:ba:ea:65:4e:e9:
         ad:55:28:78:c8:73:f5:1d:81:80:20:f2:9a:d1:23:7c:40:5f:
         4c:8b:32:f9:81:90:be:d7:73:83:af:bd:f3:aa:d2:be:50:c0:
         64:20:e1:48:28:e3:67:f4:b5:a5:b9:14:9a:66:eb:55:33:3d:
         c4:3f:7d:2f:89:68:55:39:c7:9d:ec:58:e5:ea:04:84:2a:67:
         c4:5d:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:50:00 2026 by rpki-client