Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa
File:                     1f24da68-4901-3e47-aaf8-489871d7814d.roa (raw, json)
Hash identifier:          bLE+nfAURQUFNKU9GuBdg0ccntDqFVqssk9UIOSkxRw=
Subject key identifier:   27:BC:84:D1:C2:F3:71:A0:5D:0C:82:FC:2C:4B:F7:A1:7C:1F:04:12
Certificate issuer:       /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial:       010D0C9F4328584EA7876C870D316CAFE11B7B80
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15038
IP address blocks:        135.84.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:6c:87:0d:31:6c:af:e1:1b:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=56507788-2f92-431c-ac2f-74715c6a0746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:19:88:05:8a:20:e1:de:3e:af:49:5d:fa:
                    54:67:b4:2c:3e:e2:f3:c9:bf:ab:ee:93:aa:1c:b7:
                    b4:1a:01:21:62:68:59:e6:0f:b9:7b:d7:aa:fb:5e:
                    73:e2:71:29:da:f0:8a:bd:46:d3:00:91:52:4e:ab:
                    14:8b:c9:5c:8b:6c:cd:60:9a:04:6b:d0:6e:22:30:
                    a7:40:5b:86:5a:27:65:0e:f7:35:a2:57:8f:f6:e9:
                    ce:20:3f:57:f9:2d:be:05:4e:96:4c:0e:f4:a0:5e:
                    8c:64:6f:d5:fb:38:da:e4:77:96:22:19:fe:79:ce:
                    86:48:fd:43:ec:3c:63:e0:a4:b0:04:49:15:2f:f5:
                    10:d8:70:ac:5e:5a:50:05:95:85:fb:8b:66:f3:e3:
                    40:6b:02:79:8e:a7:f8:0b:d1:94:53:eb:63:46:11:
                    d6:0f:ee:6f:aa:5d:ae:e9:1b:2e:b1:e4:00:8e:0c:
                    ff:09:57:c0:bd:bd:6c:a6:a0:e1:8a:ca:33:43:e6:
                    f1:f1:89:b8:cb:13:6e:f2:21:b9:e8:6b:22:9d:39:
                    8e:6e:52:0c:a6:6e:20:cf:aa:4c:a9:e9:8c:6e:85:
                    a8:10:6e:76:50:67:d6:34:b9:ce:07:9d:1d:78:f0:
                    e9:0d:66:4d:88:6e:02:ce:d4:41:24:e4:ef:00:63:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BC:84:D1:C2:F3:71:A0:5D:0C:82:FC:2C:4B:F7:A1:7C:1F:04:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/1f24da68-4901-3e47-aaf8-489871d7814d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl

            X509v3 Authority Key Identifier:
                keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a9:61:cf:4f:5e:f1:37:25:0d:ed:cf:a7:68:f5:e2:ce:d1:
         78:ef:69:49:0f:8e:6a:f7:a3:87:85:95:9d:c2:f9:fc:42:f0:
         91:e6:8d:39:9d:db:56:89:70:63:09:43:15:15:2f:65:03:d5:
         10:74:57:7f:bb:2e:8e:d8:86:61:3c:c7:e2:1b:8d:97:67:c4:
         1e:1b:a3:e4:91:43:7e:e2:50:b5:76:5c:cc:10:db:40:4e:ac:
         8e:f3:e6:6d:5d:02:30:42:63:92:6b:94:f6:8c:e6:84:0b:33:
         26:0f:58:16:5c:e7:28:fa:93:db:51:74:d5:1a:ce:fd:74:12:
         9d:29:6f:5f:07:83:89:50:e9:a0:2f:fe:62:7a:31:55:f5:62:
         e1:07:70:74:4e:5d:03:1a:02:99:c8:c2:e3:80:b5:fa:eb:06:
         46:fb:eb:98:c4:ee:49:f0:77:04:70:7b:79:10:f8:08:67:23:
         83:f0:47:b6:cc:97:4c:47:db:c0:24:3c:5e:78:09:09:02:97:
         94:44:cc:c5:68:1f:0e:af:99:ea:2b:95:4b:4b:53:c6:39:d6:
         6f:a2:ac:f4:0a:2f:9e:34:da:ab:c3:10:bf:b3:eb:1b:91:84:
         93:65:cb:84:43:75:87:f1:0d:78:c4:c8:64:c7:3f:c5:99:cf:
         15:b7:09:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2yHDTFsr+Ebe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjI1NzQxZmItYjY2YS00OWJlLTkxOGQtMWI0NzUyZTY4
MTc1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTY1MDc3ODgtMmY5Mi00MzFjLWFjMmYtNzQ3MTVjNmEwNzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2EZiAWKIOHePq9JXfpUZ7QsPuLzyb+r7pOq
HLe0GgEhYmhZ5g+5e9eq+15z4nEp2vCKvUbTAJFSTqsUi8lci2zNYJoEa9BuIjCn
QFuGWidlDvc1oleP9unOID9X+S2+BU6WTA70oF6MZG/V+zja5HeWIhn+ec6GSP1D
7Dxj4KSwBEkVL/UQ2HCsXlpQBZWF+4tm8+NAawJ5jqf4C9GUU+tjRhHWD+5vql2u
6RsuseQAjgz/CVfAvb1spqDhisozQ+bx8Ym4yxNu8iG56GsinTmOblIMpm4gz6pM
qemMboWoEG52UGfWNLnOB50dePDpDWZNiG4CztRBJOTvAGMqSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCe8hNHC83GgXQyC/CxL96F8HwQSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MjU3
NDFmYi1iNjZhLTQ5YmUtOTE4ZC0xYjQ3NTJlNjgxNzUvMWYyNGRhNjgtNDkwMS0z
ZTQ3LWFhZjgtNDg5ODcxZDc4MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjI1NzQxZmItYjY2YS00OWJlLTkx
OGQtMWI0NzUyZTY4MTc1LzYyNTc0MWZiLWI2NmEtNDliZS05MThkLTFiNDc1MmU2
ODE3NS5jcmwwHwYDVR0jBBgwFoAUAlK0IrCFlJsA/ZZqCvwdM/q0FFkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MjU3NDFmYi1iNjZhLTQ5YmUtOTE4ZC0xYjQ3
NTJlNjgxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh1Q4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOpYc9PXvE3JQ3tz6do9eLO0XjvaUkPjmr3o4eFlZ3C+fxC8JHmjTmd
21aJcGMJQxUVL2UD1RB0V3+7Lo7YhmE8x+IbjZdnxB4bo+SRQ37iULV2XMwQ20BO
rI7z5m1dAjBCY5JrlPaM5oQLMyYPWBZc5yj6k9tRdNUazv10Ep0pb18Hg4lQ6aAv
/mJ6MVX1YuEHcHROXQMaApnIwuOAtfrrBkb765jE7knwdwRwe3kQ+AhnI4PwR7bM
l0xH28AkPF54CQkCl5REzMVoHw6vmeorlUtLU8Y51m+irPQKL5402qvDEL+z6xuR
hJNly4RDdYfxDXjEyGTHP8WZzxW3Ca8=
-----END CERTIFICATE-----
Generated at Fri Sep 18 12:05:42 2026 by rpki-client