Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa
File:                     8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa (raw, json)
Hash identifier:          1Qe0fnrx0zXrInHaBlTePg1pLbfnFTQFz56WgNnM21U=
Subject key identifier:   77:10:C1:15:9C:E9:2B:CF:39:9E:69:FA:15:35:14:B7:58:67:AC:4C
Certificate issuer:       /CN=02e2201b-75a6-4194-9898-6fe2f60eaf78
Certificate serial:       010D0C9F4328584F5E62DDA34221534B9A617680
Authority key identifier: 33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     32695
IP address blocks:        131.149.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:dd:a3:42:21:53:4b:9a:61:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e2201b-75a6-4194-9898-6fe2f60eaf78
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=7a250c75-3ac7-46cf-a3b1-94bb6deae159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:76:35:76:79:a1:ed:67:b6:27:dc:8f:9f:
                    31:be:2c:70:26:7e:1f:d9:81:86:57:d2:dd:63:d0:
                    44:c9:81:1f:ba:78:76:c9:2b:96:f0:d8:b0:26:08:
                    d5:d8:20:45:7c:bc:12:97:3c:90:e0:e3:f2:0b:7a:
                    30:65:59:89:9f:13:62:7b:6d:59:17:d4:b9:8c:11:
                    11:e7:02:af:75:9e:e8:49:43:ce:85:99:98:48:56:
                    21:58:15:c2:bc:33:d2:34:09:db:c4:6d:c6:80:ea:
                    8c:02:62:74:ea:e8:00:49:c3:c4:8c:5a:5f:fd:67:
                    f0:c2:51:99:90:6d:94:ee:0d:17:8d:04:df:7f:9a:
                    36:48:ec:bf:46:5a:6a:71:6c:84:13:be:a2:21:f3:
                    27:8f:de:95:f5:fd:5f:5f:ce:a7:49:2a:7f:aa:11:
                    33:39:b5:39:68:fd:f2:11:8a:9c:e8:97:76:13:74:
                    ec:0c:10:e0:71:82:65:ff:5c:28:38:a5:96:1d:be:
                    71:15:f5:2c:b0:54:f6:fe:cb:46:50:24:32:ed:0a:
                    88:c3:b2:07:77:be:c2:fd:9a:7e:a7:9a:eb:c7:4b:
                    1e:be:fb:fb:df:71:b9:d4:07:3c:f6:d6:1e:09:d7:
                    e8:bd:79:24:26:ae:3d:b1:4d:5f:dd:56:5e:c9:91:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:10:C1:15:9C:E9:2B:CF:39:9E:69:FA:15:35:14:B7:58:67:AC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl

            X509v3 Authority Key Identifier:
                keyid:33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.149.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:07:28:42:cd:90:87:84:5f:15:b4:03:84:7b:49:da:e7:e5:
         ba:63:6c:8b:4a:7e:ec:cf:40:b6:c5:56:d5:1b:a7:90:e4:29:
         ad:c3:cf:11:aa:e9:84:21:d2:e3:8c:1e:16:ce:48:57:82:86:
         37:eb:a3:20:0c:8c:1c:fe:76:e9:53:eb:74:c8:dd:6c:cf:ff:
         a6:9b:15:ea:77:d6:28:16:4a:d1:17:13:af:ac:b8:9c:44:fd:
         3c:7b:45:07:06:15:05:36:76:77:4f:0d:32:56:2c:37:02:1b:
         c8:e8:73:a2:eb:a7:43:f3:1a:79:12:92:46:96:24:f1:32:1c:
         2f:cd:76:f8:fa:a2:68:e2:41:7b:ff:ed:78:d9:f9:c6:94:0d:
         2e:9c:65:cd:e9:90:7e:bc:76:c8:36:fb:ae:75:94:18:ff:89:
         d9:45:22:5f:bd:dd:88:1c:01:b7:8e:ab:c5:4f:80:91:78:e2:
         3b:86:8d:52:15:19:ec:03:fd:a5:b6:8b:f7:dd:d8:d5:40:7e:
         5e:82:3b:cb:26:bf:95:48:4b:e3:5f:21:04:0f:6f:71:f2:8d:
         5a:0d:36:31:08:cf:9e:75:e0:c4:97:c9:28:35:f7:b3:98:54:
         bc:93:fc:b3:00:f5:d9:1e:67:a5:75:12:84:cd:e3:7d:81:59:
         f3:83:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:29:18 2026 by rpki-client