Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
File:                     86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json)
Hash identifier:          1EdjYszjjrvc3ErgyTf20XhK173XB6Vs76AH/2onM4o=
Subject key identifier:   1F:BF:68:FB:D4:15:88:DC:4A:47:7C:0E:6A:D9:18:70:3F:9A:8E:1A
Certificate issuer:       /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial:       010D0C9F4328584E4AEF4801544A59B303C82F00
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     12980
IP address blocks:        129.35.160.0/20 maxlen: 20
                          170.225.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:48:01:54:4a:59:b3:03:c8:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=ee0e2975-a4e2-4b3d-a7f2-25a6309d31e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:03:4e:49:9c:3c:cd:ea:03:30:79:cc:93:
                    30:0d:18:ed:35:4b:ff:2f:8c:cd:1f:3e:91:dc:cd:
                    00:1c:b9:8e:db:e3:71:9f:5e:14:e4:d9:43:57:ef:
                    e9:38:29:65:a2:00:b3:64:06:ae:f8:bd:8f:bf:ad:
                    bf:80:1a:92:7a:51:5f:34:28:9e:e5:47:b5:be:79:
                    9c:0a:cf:c1:fe:4c:2a:8d:6f:fa:b0:af:cd:7f:33:
                    8c:31:f0:ff:b8:fa:66:7b:e6:51:62:b2:66:f6:83:
                    93:2a:60:f8:a8:29:33:68:19:8f:8f:97:34:30:df:
                    b5:1b:40:cd:26:5d:e1:d2:e6:90:ab:44:17:c8:aa:
                    3a:d2:25:fe:3a:0b:b6:d4:6e:b3:d9:15:d1:68:12:
                    e1:5c:c9:05:49:9a:6c:b8:61:1b:bb:4e:14:95:5e:
                    d8:b1:54:c9:81:2e:4e:77:c7:59:9b:c6:ba:76:12:
                    6b:35:60:c0:e4:f6:35:97:03:60:f6:33:2f:34:49:
                    39:d4:c6:22:64:28:ea:56:58:00:ca:1c:67:81:eb:
                    60:6a:de:fc:b9:f0:ca:9b:a1:3c:bc:1d:ca:82:8d:
                    e0:73:ca:e6:ce:bf:f8:d2:0d:36:52:9a:04:e1:b5:
                    36:1c:c4:ac:7b:f4:5f:21:c4:f2:1f:66:63:79:c6:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:68:FB:D4:15:88:DC:4A:47:7C:0E:6A:D9:18:70:3F:9A:8E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.35.160.0/20
                  170.225.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:08:62:36:b1:ba:f5:53:6d:91:c1:50:83:e5:7d:4c:68:18:
         93:71:c0:0b:86:b1:56:ae:24:9b:85:d4:37:1a:b8:e6:ab:f0:
         e8:e3:b3:71:ff:02:8f:f2:d5:9c:9a:d7:e2:44:c7:ae:39:af:
         c7:c7:57:51:0a:4d:66:0f:68:de:96:68:7e:18:77:12:5e:be:
         71:ae:a5:58:4d:d4:bd:30:58:b4:c1:4b:e5:e7:37:d9:22:93:
         0c:3f:be:55:79:08:3d:34:86:99:f0:d2:4c:94:51:36:21:fd:
         ff:9b:fc:48:b7:fd:6a:20:23:cf:4b:3b:67:2d:df:d7:84:7e:
         9b:ba:3e:d0:c9:4a:2e:5a:63:4c:9f:1d:14:86:de:20:32:a7:
         2c:51:53:f3:a4:09:33:b6:ba:3f:f0:46:f9:18:e3:eb:7e:bf:
         d8:fc:30:d7:43:b2:54:0f:62:63:65:f8:96:2a:8a:b5:85:2c:
         9a:fd:05:04:85:2b:ca:3e:01:14:eb:94:c3:63:c4:70:19:96:
         0b:3f:1d:9e:e7:39:1d:d5:68:37:17:a9:a5:d7:0b:c1:d0:2d:
         5d:65:26:ef:8e:06:8c:86:35:4a:b1:5c:56:3e:2d:7b:aa:94:
         22:de:91:70:38:c7:33:77:5f:bf:97:3b:6f:ae:07:65:a7:bf:
         8c:28:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:40:05 2026 by rpki-client