Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/7e39d1d7-c919-38da-ad5a-87ac02c414ce.roa
File:                     7e39d1d7-c919-38da-ad5a-87ac02c414ce.roa (raw, json)
Hash identifier:          XMhyHB9/Vrss94D/HL2TfF20SlBihxKyJJbenN4Gmzc=
Subject key identifier:   7C:47:78:12:C9:A0:D5:A0:81:4A:85:FE:0A:EB:88:6D:2C:2F:56:A2
Certificate issuer:       /CN=b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b
Certificate serial:       010D0C9F4328584E4D0D85B2AAD0B8E16013BAC0
Authority key identifier: 32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/7e39d1d7-c919-38da-ad5a-87ac02c414ce.roa
Signing time:             Fri 26 Jun 2026 15:13:00 +0000
ROA not before:           Fri 26 Jun 2026 15:13:00 +0000
ROA not after:            Thu 24 Sep 2026 15:13:00 +0000
asID:                     22062
IP address blocks:        135.84.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:0d:85:b2:aa:d0:b8:e1:60:13:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b
        Validity
            Not Before: Jun 26 15:13:00 2026 GMT
            Not After : Sep 24 15:13:00 2026 GMT
        Subject: CN=267493c4-8a76-478f-9426-c50633508c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:75:4b:dd:bf:81:67:74:65:5b:44:ba:35:
                    49:b3:45:5d:3f:64:fe:b4:3c:43:da:c5:ae:86:bb:
                    ab:4d:76:74:bb:dd:d6:86:3e:6b:59:3f:34:02:f4:
                    3a:eb:59:a0:94:2a:69:13:01:63:63:96:d7:e6:14:
                    8e:da:8e:f2:06:9e:20:59:dd:3a:88:af:d2:0d:54:
                    8f:cf:ba:8e:b9:81:de:a8:35:a7:ec:d9:bd:fc:a2:
                    15:be:6c:7f:f3:ec:6b:83:61:23:f3:9e:85:c3:4e:
                    08:c0:68:27:8f:10:1c:5d:e9:b9:33:3a:52:35:f1:
                    62:cf:bf:a8:6b:15:1a:f7:68:da:89:fe:b8:09:14:
                    77:d9:69:91:03:2c:f3:6e:03:43:a0:e9:a4:46:f9:
                    64:3f:ed:65:ea:8f:d5:0a:a8:df:11:c9:97:0c:76:
                    39:99:a5:6f:14:b2:22:dd:8b:f4:bc:ec:55:d3:08:
                    7a:ca:86:05:ea:19:81:a7:7f:2a:85:4a:f7:6f:5b:
                    2d:26:f7:5b:00:52:f3:e5:79:c7:84:82:73:07:9a:
                    9b:82:9a:b4:71:d2:27:0c:6e:a1:58:4b:0c:bf:58:
                    d3:51:c5:4e:4c:02:19:30:6c:aa:95:64:a2:bc:83:
                    09:be:30:dd:5f:fb:6d:35:b5:be:24:35:38:c4:c0:
                    64:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:78:12:C9:A0:D5:A0:81:4A:85:FE:0A:EB:88:6D:2C:2F:56:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/7e39d1d7-c919-38da-ad5a-87ac02c414ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.crl

            X509v3 Authority Key Identifier:
                keyid:32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:a9:ef:04:82:8b:cf:59:16:e8:de:ce:96:1e:16:b3:97:
         c0:55:56:ae:e2:91:d3:7f:97:b4:cb:9b:56:05:48:c2:6b:e4:
         13:bd:a9:b1:90:b3:16:f0:27:1a:5e:f7:92:d6:83:e9:7f:8a:
         28:d9:8f:94:45:70:62:ea:0b:ea:87:85:f0:1a:31:04:89:80:
         aa:b8:c1:02:da:59:8f:65:22:68:1d:5d:57:09:0b:78:78:46:
         c9:1e:24:29:94:d7:a1:09:b2:9f:6a:8d:b3:9a:74:8e:fc:3e:
         86:8b:2f:34:df:54:55:69:ea:1b:34:25:be:8a:f6:f9:35:cb:
         23:77:7c:9f:d0:bd:fd:4a:cc:69:49:57:c6:7a:44:ca:d9:13:
         9f:f8:aa:dd:5f:06:ad:95:e9:db:11:03:d0:ac:ea:d4:ae:3d:
         e3:cd:89:f6:b2:e5:9e:ae:33:a5:ff:86:6f:65:be:e9:ac:6a:
         38:1c:fe:26:73:66:84:53:c9:0f:b3:09:09:f1:ce:7f:5f:60:
         fb:d8:df:1a:fd:02:c7:9d:44:2d:46:9b:96:4a:39:a4:55:73:
         69:e9:1a:e7:f2:9c:1a:18:1e:76:74:a9:6c:d9:96:7c:c1:78:
         53:4d:0e:a3:23:f7:16:6b:ec:eb:3c:23:22:3f:c0:fc:8d:46:
         0c:64:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:32:00 2026 by rpki-client