Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa
File:                     3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa (raw, json)
Hash identifier:          bwnxuu0ctk2IC7tst5qRUZAZjON0bFg5/wnOryXrsxo=
Subject key identifier:   F2:E6:88:FB:8D:59:7B:69:67:6D:15:F1:7A:EA:78:FF:41:9F:FC:E3
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E7FFA5130B6C4ABE06B6E84C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     137409
IP address blocks:        206.123.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:51:30:b6:c4:ab:e0:6b:6e:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=16a2f8e3-287c-4fc7-9fee-18167f58912f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:6e:52:82:57:d6:71:94:ea:94:8a:32:8b:
                    c9:b6:57:4d:53:f4:56:c7:f7:2e:0c:1c:91:92:45:
                    64:b2:c6:e2:53:10:51:9c:0c:e4:24:ac:97:78:42:
                    66:7c:87:69:59:6f:7f:78:8d:69:a0:88:1c:98:b3:
                    9c:ff:23:68:35:89:da:ff:fa:e8:cd:f7:f6:09:10:
                    a5:c6:04:86:f0:63:be:a0:e4:01:39:ce:62:92:cc:
                    c2:d1:4a:ad:d6:68:30:21:5d:dd:99:f8:c0:73:5a:
                    a8:d5:b7:45:25:9c:43:01:95:22:22:57:9b:5a:9c:
                    bc:ad:a5:33:95:86:40:cc:a8:d9:8c:c4:40:00:fd:
                    98:17:4b:e9:0c:f3:f0:27:b5:4a:15:f8:a2:b0:76:
                    5e:cd:c5:12:7a:e0:04:f1:e3:53:93:2d:9a:91:ea:
                    40:c3:1f:a7:d6:d7:43:da:73:33:0c:7f:17:8e:ff:
                    31:3f:05:f4:dc:4e:3a:ea:4a:e2:fc:22:4c:01:66:
                    7e:d8:ad:ff:5e:98:56:c9:81:47:b4:57:3e:f9:4e:
                    3e:4c:c9:f8:6a:49:a7:d2:39:f5:80:9e:d8:d9:47:
                    3e:e0:7b:2c:bb:71:0a:fc:4b:a7:24:80:13:87:41:
                    fc:d8:9f:87:6e:57:c8:d3:cc:7d:e1:c0:db:00:2a:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E6:88:FB:8D:59:7B:69:67:6D:15:F1:7A:EA:78:FF:41:9F:FC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:31:c8:74:1c:25:61:38:d7:78:9e:fa:32:c5:4b:6d:9e:
         7a:cb:56:f9:6a:1d:5e:a8:4a:bf:e0:0a:bc:67:5e:aa:3b:82:
         5a:30:c3:6d:9e:2d:85:0a:77:67:fb:d8:58:65:a8:87:a2:54:
         b6:7d:41:1e:79:02:be:fa:cf:6e:5b:a4:3b:df:1f:2e:3d:b0:
         36:9b:92:40:9c:3c:82:bd:40:43:ea:e0:a8:5b:19:94:7e:74:
         82:91:4a:84:a1:ed:c1:fb:1e:c9:30:37:40:3d:d0:e9:40:b1:
         44:a7:d6:3e:bc:d3:70:f7:c9:e0:c6:e5:e0:e1:9e:56:ed:2d:
         93:5f:ca:90:3c:7a:4e:8d:54:dd:9f:7b:9d:7d:33:9a:54:02:
         18:eb:01:c0:0e:b4:d3:92:29:03:db:28:cc:31:6c:c0:b3:1b:
         b8:77:98:8c:61:53:60:1c:17:35:7a:37:74:23:35:9a:8e:8a:
         c2:6a:12:51:ca:dc:b0:86:5d:13:36:4e:17:75:b6:8b:27:5c:
         ec:a6:12:18:71:1a:76:1a:48:8b:36:c2:be:92:c9:e7:ed:ea:
         48:37:19:56:83:5c:22:db:49:13:9a:59:5a:ff:6a:5e:ee:dc:
         75:d6:34:c7:2b:58:fe:b8:29:d3:9e:6e:23:fc:c7:70:c1:46:
         d1:c7:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:39:06 2026 by rpki-client