Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc/a3c5834c-849f-3d1e-a04f-5740d0fc5e7f.roa
File:                     a3c5834c-849f-3d1e-a04f-5740d0fc5e7f.roa (raw, json)
Hash identifier:          nCw1Gs/7u6Oivde0vQqwubMb2Nn8gV8joHPPXG7c4SE=
Subject key identifier:   DE:0D:52:14:22:F1:B6:05:2F:D8:64:7A:B6:53:16:E0:2E:1E:87:1A
Certificate issuer:       /CN=06a3edd4-337b-43ff-8a27-77dcc55f76cc
Certificate serial:       010D0C9F4328584F4F0804708A3B034AAA4BDA00
Authority key identifier: 23:47:DA:85:47:47:B6:FC:6C:74:5A:CE:DF:EB:2E:A1:CB:9B:D4:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc/a3c5834c-849f-3d1e-a04f-5740d0fc5e7f.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     394759
IP address blocks:        135.84.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc/06a3edd4-337b-43ff-8a27-77dcc55f76cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc/06a3edd4-337b-43ff-8a27-77dcc55f76cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:04:70:8a:3b:03:4a:aa:4b:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a3edd4-337b-43ff-8a27-77dcc55f76cc
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=29f7d29d-4897-4580-a421-b4d1785ffe7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:72:d8:af:3c:5a:96:e3:1a:52:03:87:9c:
                    db:0f:da:56:98:9d:c3:a1:fd:fb:e7:ef:65:0a:e5:
                    91:ee:87:78:90:3a:05:8b:ef:83:ef:16:12:c3:a3:
                    53:a3:ad:b0:43:6a:eb:3a:f1:d1:87:69:c2:59:56:
                    83:43:db:58:96:0a:51:fd:94:38:f8:3d:b1:26:46:
                    d2:06:ad:84:2b:d1:be:ea:f7:4d:0f:59:76:9a:50:
                    18:32:4d:d4:bd:ee:22:cd:13:26:84:15:d0:be:9a:
                    cc:4d:1d:2e:3a:1d:19:68:c3:28:88:30:bc:cc:e1:
                    57:02:5f:9a:3a:00:63:a9:3b:67:30:4a:31:87:15:
                    8e:3a:db:7b:91:3e:88:da:76:47:35:ab:c4:93:4b:
                    c6:dc:b7:a1:30:d1:d5:a6:fa:8a:4c:12:ce:8c:cc:
                    3e:b5:8d:ee:a9:a1:d3:b2:6f:c1:cb:a6:79:94:7e:
                    58:84:9e:6f:50:7c:ef:ea:5c:85:41:67:39:87:db:
                    6d:b8:76:dc:7c:8f:c7:60:46:df:f2:59:d8:23:b3:
                    a2:da:56:17:b9:6a:59:50:3f:9c:61:e8:1d:68:db:
                    18:3d:bc:7e:60:de:8a:3e:04:e5:40:a3:86:f6:30:
                    1b:29:50:70:bb:ed:1c:5b:12:29:cf:da:69:b6:61:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0D:52:14:22:F1:B6:05:2F:D8:64:7A:B6:53:16:E0:2E:1E:87:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc/a3c5834c-849f-3d1e-a04f-5740d0fc5e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc/06a3edd4-337b-43ff-8a27-77dcc55f76cc.crl

            X509v3 Authority Key Identifier:
                keyid:23:47:DA:85:47:47:B6:FC:6C:74:5A:CE:DF:EB:2E:A1:CB:9B:D4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/06a3edd4-337b-43ff-8a27-77dcc55f76cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:76:68:da:36:5b:5b:cf:45:31:65:5b:e6:d7:94:95:bd:e4:
         6b:fc:52:ed:3a:bb:68:08:32:28:43:93:ed:bb:86:8f:9b:6a:
         33:fc:b5:e5:1b:6a:41:04:a7:67:8c:4d:dd:40:46:5c:2b:ba:
         ed:b1:4f:c7:28:71:d8:99:5c:72:4e:b8:70:13:17:dd:0a:c6:
         65:8b:81:d5:1b:be:66:e2:94:5b:3b:dc:23:5f:c2:c6:88:66:
         9f:e3:90:41:d0:71:85:c4:40:fb:78:49:99:35:ec:ec:f1:b0:
         1e:a2:0d:ee:e8:35:34:c3:f1:e2:3b:c8:3a:5e:44:3f:9f:55:
         1c:a8:d7:11:2c:fc:44:dd:f2:e3:5d:72:db:cd:2e:37:97:08:
         36:5e:05:d9:5c:9a:d1:5c:9d:88:69:7e:db:39:4d:81:33:3f:
         ac:5a:bb:71:3e:ef:17:0e:87:db:14:3c:82:c1:e2:f6:d0:9b:
         a0:72:3b:69:51:b8:e0:88:fd:23:09:d6:7c:49:d9:71:da:aa:
         36:79:8e:11:9a:4b:84:9a:2c:58:95:02:0a:8a:f1:9a:d6:17:
         81:95:7b:08:cf:92:54:87:0a:04:96:8c:31:9b:d5:aa:08:4e:
         25:e8:cc:2d:5e:5e:0a:68:7c:14:52:82:5a:1b:14:88:e0:cc:
         71:94:d6:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCARwijsDSqpL2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZhM2VkZDQtMzM3Yi00M2ZmLThhMjctNzdkY2M1NWY3
NmNjMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
MjlmN2QyOWQtNDg5Ny00NTgwLWE0MjEtYjRkMTc4NWZmZTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomFy2K88WpbjGlIDh5zbD9pWmJ3Dof375+9l
CuWR7od4kDoFi++D7xYSw6NTo62wQ2rrOvHRh2nCWVaDQ9tYlgpR/ZQ4+D2xJkbS
Bq2EK9G+6vdND1l2mlAYMk3Uve4izRMmhBXQvprMTR0uOh0ZaMMoiDC8zOFXAl+a
OgBjqTtnMEoxhxWOOtt7kT6I2nZHNavEk0vG3LehMNHVpvqKTBLOjMw+tY3uqaHT
sm/By6Z5lH5YhJ5vUHzv6lyFQWc5h9ttuHbcfI/HYEbf8lnYI7Oi2lYXuWpZUD+c
YegdaNsYPbx+YN6KPgTlQKOG9jAbKVBwu+0cWxIpz9pptmGYywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4NUhQi8bYFL9hkerZTFuAuHocaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNmEz
ZWRkNC0zMzdiLTQzZmYtOGEyNy03N2RjYzU1Zjc2Y2MvYTNjNTgzNGMtODQ5Zi0z
ZDFlLWEwNGYtNTc0MGQwZmM1ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDZhM2VkZDQtMzM3Yi00M2ZmLThh
MjctNzdkY2M1NWY3NmNjLzA2YTNlZGQ0LTMzN2ItNDNmZi04YTI3LTc3ZGNjNTVm
NzZjYy5jcmwwHwYDVR0jBBgwFoAUI0fahUdHtvxsdFrO3+suocub1MAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8wNmEzZWRkNC0zMzdiLTQzZmYtOGEyNy03N2Rj
YzU1Zjc2Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1RaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADV2aNo2W1vPRTFlW+bXlJW95Gv8Uu06u2gIMihDk+27ho+bajP8teUb
akEEp2eMTd1ARlwruu2xT8cocdiZXHJOuHATF90KxmWLgdUbvmbilFs73CNfwsaI
Zp/jkEHQcYXEQPt4SZk17OzxsB6iDe7oNTTD8eI7yDpeRD+fVRyo1xEs/ETd8uNd
ctvNLjeXCDZeBdlcmtFcnYhpfts5TYEzP6xau3E+7xcOh9sUPILB4vbQm6ByO2lR
uOCI/SMJ1nxJ2XHaqjZ5jhGaS4SaLFiVAgqK8ZrWF4GVewjPklSHCgSWjDGb1aoI
TiXozC1eXgpofBRSglobFIjgzHGU1uI=
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:21:57 2026 by rpki-client