Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/facb9f6d-63db-360f-ada8-edd0be484667.roa
File:                     facb9f6d-63db-360f-ada8-edd0be484667.roa (raw, json)
Hash identifier:          GO0o0qVG3KFtwxn/SkFcNgjarPn1I0ZoaMDBr7CzK68=
Subject key identifier:   08:34:7E:76:97:3C:D4:1F:DF:FE:76:E0:53:45:97:42:07:8A:DE:EA
Certificate issuer:       /CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
Certificate serial:       010D0C9F4328584B0CDC06ED0AEFF3C5DD6E2700
Authority key identifier: 43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/facb9f6d-63db-360f-ada8-edd0be484667.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        135.84.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:06:ed:0a:ef:f3:c5:dd:6e:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=4ec9d5f9-2d96-407e-ae9b-7a8557b6a6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:95:8b:b5:53:91:5e:4d:97:f1:29:14:7d:
                    36:ad:47:42:16:cb:4d:a6:f1:a5:f9:11:10:6f:77:
                    ee:d6:36:d5:4f:3b:bb:31:a5:68:c9:35:8e:5a:9c:
                    88:13:6e:0c:fd:d3:be:0e:9a:f0:1c:31:63:70:24:
                    ce:61:2f:b9:17:67:f2:bc:10:7b:48:ed:bb:01:45:
                    2e:f7:b6:52:26:ef:55:d6:27:e3:c3:7a:f8:89:82:
                    90:f1:52:5e:36:6d:b2:aa:6d:96:30:11:e1:21:88:
                    e9:41:11:ba:a8:64:78:3d:58:ed:7a:63:fc:fa:76:
                    45:54:de:d4:77:ef:e6:70:0d:12:7c:75:a4:6f:0b:
                    f8:14:1c:9d:2d:a6:2a:2d:ae:56:5d:67:f1:3c:84:
                    53:73:06:e2:e6:a6:5d:f8:99:f4:10:61:b0:be:4f:
                    d9:ff:f8:f7:21:bb:5b:45:5d:14:28:95:ec:82:46:
                    e0:c4:d6:7c:53:7c:56:e4:19:f5:cb:d6:9e:25:ac:
                    53:39:96:5a:5f:c3:f8:16:5b:3b:49:2f:d4:dc:38:
                    f9:50:02:07:67:f7:7a:6b:91:de:fa:02:d6:f2:60:
                    b4:a4:96:25:6e:73:d1:a2:6d:19:34:e3:3b:00:8b:
                    ca:d4:9b:20:8c:64:9a:6d:49:2c:73:1c:48:0b:65:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:7E:76:97:3C:D4:1F:DF:FE:76:E0:53:45:97:42:07:8A:DE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/facb9f6d-63db-360f-ada8-edd0be484667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl

            X509v3 Authority Key Identifier:
                keyid:43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:32:e1:c9:a3:30:8e:2b:8d:ac:0b:86:39:42:60:72:33:f0:
         70:19:a4:bf:a0:ff:75:8d:6e:64:49:f2:35:48:03:93:82:4d:
         7e:53:19:7f:e7:87:e2:82:2c:23:7a:db:ab:76:fb:37:ff:4c:
         77:53:5b:9c:69:39:d4:ca:e2:e7:e5:8a:9f:d3:63:80:b3:92:
         6c:5a:4b:f4:13:fd:e5:58:2b:21:ad:4d:ab:19:d8:5d:3d:59:
         00:ff:73:2c:cd:b7:ff:da:12:88:58:f2:55:c8:98:de:d2:13:
         d5:bd:22:bb:48:f1:a2:d4:72:ab:89:a1:71:38:94:30:11:60:
         72:79:a1:9b:5c:5a:30:2c:0d:b7:ee:8b:eb:05:06:e8:4c:2e:
         3b:82:eb:41:68:75:56:06:5d:f6:18:25:54:84:dc:ae:5d:42:
         46:67:23:05:a2:43:bc:1d:bb:89:af:e1:29:43:be:30:b8:e9:
         4d:b8:d8:4a:99:a9:3a:78:f9:b0:35:14:6f:ba:23:ca:ba:18:
         15:17:9e:43:00:d1:04:93:2f:41:ab:8f:05:e5:7a:c8:ac:d9:
         25:20:16:e6:a3:a6:5c:e4:87:c0:3b:9c:1f:0e:88:28:df:a3:
         e3:ad:d2:f1:38:79:bb:1d:c3:08:76:dd:19:11:a6:f2:ac:5e:
         bb:16:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:43 2025 by rpki-client