Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa
File:                     5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa (raw, json)
Hash identifier:          WnM54xXEd6IGCy8tQ8cxriMj+eiCws2uhJSK6KFVYz4=
Subject key identifier:   D2:D4:77:7C:A8:7F:35:06:8A:B1:34:96:11:58:D4:BF:D1:B6:9B:2D
Certificate issuer:       /CN=0c776cd4-6b58-4fae-83e8-50352d4178d4
Certificate serial:       010D0C9F4328584B8EACBEC809FF236CDC356800
Authority key identifier: 26:3F:40:D3:37:9F:BD:E1:95:22:4C:2B:3F:F7:29:19:1D:B8:8B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     396982
IP address blocks:        135.84.69.0/24 maxlen: 24
                          135.84.70.0/24 maxlen: 24
                          135.84.78.0/24 maxlen: 24
                          208.86.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:be:c8:09:ff:23:6c:dc:35:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c776cd4-6b58-4fae-83e8-50352d4178d4
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=d8401e8a-9425-4c11-8a23-ed8ebecbda24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:45:ee:97:d9:58:70:5e:c2:18:85:cb:c4:
                    69:e1:e8:16:8b:7d:29:19:4a:97:dd:93:18:1a:c3:
                    40:82:b1:95:c7:fe:11:6a:d8:45:bf:40:ef:d2:7d:
                    e8:aa:49:98:c2:fb:d6:86:e7:b2:03:51:c1:1c:93:
                    61:a4:57:c4:f5:60:bf:b8:24:89:30:41:51:88:5d:
                    94:a5:a6:d2:0f:87:ee:48:d1:d9:ea:c0:55:8d:8d:
                    b5:12:3a:6a:55:9e:c3:7a:60:ac:04:fe:ce:fd:f7:
                    40:83:48:ba:7a:3c:ad:f3:86:e0:7e:08:f1:cb:c5:
                    89:2f:18:24:7e:47:b5:5a:41:56:2d:8f:6d:8f:83:
                    7c:69:eb:7b:53:7e:1a:ce:fa:5e:e4:d6:4d:9b:ad:
                    58:2d:16:ec:ae:3d:97:b1:63:c1:a3:9d:fc:b1:80:
                    ca:db:a3:7e:09:35:62:c9:28:b1:a4:54:ba:bc:43:
                    6b:3a:aa:e0:c3:63:de:cd:a0:d4:5a:b0:dc:24:45:
                    82:ba:6f:d3:79:48:31:c8:21:29:26:18:16:15:22:
                    1a:f4:14:e1:fd:c6:c4:52:2d:d5:07:45:4f:ad:71:
                    4d:02:06:6d:c0:b0:56:d5:98:1c:be:81:c4:a9:83:
                    62:4f:a5:65:57:b0:01:1b:ca:2e:0a:60:67:1c:0c:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D4:77:7C:A8:7F:35:06:8A:B1:34:96:11:58:D4:BF:D1:B6:9B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.crl

            X509v3 Authority Key Identifier:
                keyid:26:3F:40:D3:37:9F:BD:E1:95:22:4C:2B:3F:F7:29:19:1D:B8:8B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.69.0-135.84.70.255
                  135.84.78.0/24
                  208.86.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:35:6f:5f:08:ea:c6:f1:4e:2a:2a:5b:65:01:ec:1e:40:7d:
         a2:7a:36:7d:37:3f:a3:4a:04:02:6b:12:46:8e:74:37:f4:3f:
         3f:e3:2a:d7:5c:b6:71:a5:b8:16:65:42:1a:9d:f8:1c:5e:94:
         b5:19:19:eb:27:d8:f7:4b:95:ec:76:61:86:f7:be:2f:8f:d5:
         9a:08:b4:d6:8d:c1:30:09:4e:af:59:cc:ea:6e:e0:c0:46:09:
         c6:7b:03:19:dd:b2:cc:95:d8:93:ed:fb:78:ff:4e:bd:1a:47:
         6b:11:56:8a:6d:33:97:c8:21:ec:44:41:ab:b4:ce:23:55:61:
         f0:11:51:08:09:3a:43:da:7f:95:12:2a:cb:ee:f4:0d:18:89:
         e5:4c:23:1a:15:a0:b6:22:f0:f5:98:42:d7:dd:16:23:51:f6:
         70:fd:bd:c0:36:56:88:0f:cb:bf:bb:7b:73:d2:c7:62:23:4d:
         51:f4:18:fc:3c:5e:45:be:5b:86:67:f5:c7:e0:2f:58:de:8c:
         4d:b6:42:70:e9:31:2d:0f:13:77:3c:0f:ea:fe:a7:f9:56:40:
         8b:d6:42:35:33:34:2e:cb:1c:bc:43:b6:d1:6b:45:69:ac:69:
         2d:69:59:8a:ec:0b:8d:dd:8f:6c:ee:05:1a:3d:2a:85:ac:30:
         25:24:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:43 2025 by rpki-client