Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa
File:                     170b8283-1c49-3af2-a654-4d686ca3d3fa.roa (raw, json)
Hash identifier:          HHcGO3ry9dWJPFCJP2X/iVlmipSr3kkaIV+xIxSC/tQ=
Subject key identifier:   6D:08:A0:C9:53:27:DD:92:1A:31:38:FC:26:B7:8B:11:69:3F:67:DD
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F4328584ACB40EC8D377ECAF00E1FD400
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        128.135.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:ec:8d:37:7e:ca:f0:0e:1f:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=8d8428b7-2e88-4534-b22b-02d4fb484adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:03:2a:3c:16:95:c1:77:09:25:4c:6b:80:
                    02:4e:0e:b7:85:8d:6d:61:86:36:07:0f:9a:d2:eb:
                    8b:ed:85:b2:88:e0:bb:d1:fe:ab:02:dd:57:f7:18:
                    51:1f:ed:0d:e6:b7:69:24:90:c8:83:9d:54:f3:42:
                    97:f4:d3:81:bd:24:ec:28:2a:a2:03:3e:2d:db:5b:
                    79:03:47:07:5e:8e:2e:91:13:39:6a:82:55:10:11:
                    3d:4a:ee:21:b6:9f:45:5e:1b:80:32:9d:4d:56:1a:
                    d8:4f:65:61:1c:2f:46:7c:9b:18:eb:b4:a7:5e:5e:
                    97:8d:92:da:df:02:e4:87:b0:c5:88:0a:7d:2b:34:
                    26:d0:c6:37:e0:6e:2e:9a:d8:4b:ac:1a:a1:18:fe:
                    b5:56:71:dd:f7:f2:92:68:ea:54:da:05:dc:ca:c0:
                    14:41:a2:b9:1d:44:ff:fc:8e:01:8f:6a:a8:cb:cd:
                    7b:79:a2:11:b8:0b:55:b5:8c:61:9b:4e:12:2b:bb:
                    77:e5:d3:a2:94:5b:12:37:78:67:d3:6a:ab:08:2f:
                    41:72:57:7b:fe:a1:86:8f:a1:98:5f:ea:d3:44:a3:
                    27:b4:ff:58:83:fa:64:cc:54:c2:af:34:bd:f8:4f:
                    12:93:f7:6b:f2:a3:34:ee:ad:a6:4f:c3:6a:1d:5a:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:A0:C9:53:27:DD:92:1A:31:38:FC:26:B7:8B:11:69:3F:67:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ca:af:d4:9c:33:01:25:7b:24:0a:8d:7d:99:d8:3c:c1:03:
         a2:21:8d:d4:3b:e3:71:4d:3c:70:e6:a7:ce:bb:62:4e:16:87:
         29:dd:0b:30:7d:ef:9e:75:d3:b9:54:de:cd:34:82:54:31:89:
         6b:20:8d:2d:56:55:fb:94:8e:7e:fc:c6:fe:d2:dd:cc:be:99:
         22:5d:83:9f:68:98:2c:28:aa:e8:e0:03:ae:ae:00:ab:e7:18:
         08:77:a9:d0:d0:59:f3:6f:e6:1b:c1:b5:90:23:00:4f:3c:14:
         50:46:15:63:d0:5d:f3:f3:4d:bd:c2:ee:4a:34:1d:92:77:8d:
         f0:79:f2:59:03:bd:01:16:11:4a:9b:63:89:4a:a1:3b:9f:61:
         82:fc:d8:5a:ea:72:74:07:3e:8b:fc:49:50:55:05:76:8e:c1:
         96:19:d6:74:81:9b:a9:14:c6:d1:fd:07:6b:17:01:82:dc:ac:
         41:93:bc:7d:78:a7:d5:23:89:d1:54:0d:7f:11:9d:f2:94:85:
         93:81:7a:01:dc:ef:92:bc:8b:00:63:78:7d:93:91:f2:87:93:
         23:db:28:f9:85:bc:d1:e7:dc:3b:0e:a3:c9:ae:70:b6:e2:fc:
         7b:eb:d2:54:f7:92:6b:3d:9f:17:6e:6b:46:7d:39:d6:f5:55:
         ad:ee:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:46:18 2025 by rpki-client