Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/00d94fa8-38b4-3d2c-964c-855e9e3893df.roa
File:                     00d94fa8-38b4-3d2c-964c-855e9e3893df.roa (raw, json)
Hash identifier:          PyLOtQTaAZ9VXK9eSHwRL870Nxyt8y5Y6bwoNvcKvRM=
Subject key identifier:   07:75:E0:BA:1B:0D:7B:CC:C0:30:30:D1:DE:BD:C6:E2:2F:AE:E1:2D
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584ECD37350B04758C43953F9D20
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/00d94fa8-38b4-3d2c-964c-855e9e3893df.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     12025
IP address blocks:        135.84.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:35:0b:04:75:8c:43:95:3f:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=8c9f8a14-8d17-432a-85d1-fb694f2582b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:7e:58:96:49:2c:e4:a4:bc:1e:12:8d:dd:
                    ed:a4:3b:2d:a3:9d:0b:e6:27:35:6a:45:16:0d:ac:
                    42:1c:be:28:5a:cd:95:cb:af:d4:e5:19:39:de:7f:
                    ca:88:a2:b8:dd:3b:b7:4e:c4:7e:f0:08:0a:f6:63:
                    6b:24:a9:79:4f:05:84:fb:ab:a2:23:56:13:4b:64:
                    a8:33:ff:b4:bc:df:1e:21:b4:d4:c3:94:a4:e5:92:
                    d2:af:ab:a0:40:aa:f0:db:0d:89:2d:14:6c:7c:66:
                    69:b1:61:70:a0:92:07:ed:ae:cd:cc:06:a7:ae:67:
                    b1:f9:d5:9c:47:1b:b7:b6:32:18:a5:e3:6e:dc:fb:
                    8d:43:3c:c3:ae:21:7d:3b:a2:94:ca:6f:6f:c2:b9:
                    d0:ff:c4:0c:3c:73:26:e1:7c:56:82:88:59:b8:1f:
                    4f:1d:db:99:05:3b:83:cd:fc:50:9a:58:8f:00:aa:
                    22:9d:16:0d:4a:cc:95:47:de:8b:83:4f:9f:b2:32:
                    61:fa:13:c0:d4:9e:cb:48:d8:0d:15:f1:79:c6:aa:
                    6d:fe:7a:1f:30:27:10:62:a1:01:38:84:86:01:d0:
                    65:35:b6:0e:48:57:31:80:be:ed:97:2c:3e:af:5b:
                    ee:d0:20:81:f5:1e:ae:a0:66:88:b6:89:27:0f:af:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:E0:BA:1B:0D:7B:CC:C0:30:30:D1:DE:BD:C6:E2:2F:AE:E1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/00d94fa8-38b4-3d2c-964c-855e9e3893df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:00:4b:51:7b:a9:b4:48:be:14:0c:07:47:f8:c4:1d:74:0f:
         2f:d3:82:98:de:3e:a0:b0:72:e5:91:1f:e7:7a:e8:c6:45:a8:
         df:a6:b3:b6:14:ad:b7:b1:47:fc:e7:47:79:45:7a:d7:b6:a0:
         4d:16:38:c1:47:8f:7e:ff:26:f5:31:58:ab:77:9c:d9:a0:77:
         ec:9c:08:48:91:35:c9:80:74:62:db:90:44:f8:f0:c0:0d:0e:
         cb:63:df:da:43:b2:5f:2d:a0:5f:b4:2b:ca:eb:2f:5c:32:7c:
         97:2b:b6:d8:ed:99:5e:39:f0:c6:18:7d:50:6d:fa:70:d8:7f:
         bf:ea:70:da:fb:4a:3d:2c:84:d0:83:9c:7f:f6:53:cc:95:12:
         32:1b:6f:6e:d4:0a:e1:c4:b6:55:8c:2f:c5:8d:7e:f3:5e:61:
         8e:d0:a7:95:5c:e3:7a:97:1a:89:76:1a:5e:c0:f2:7c:8b:19:
         80:09:a2:af:4c:54:36:fc:04:aa:64:88:cb:b6:f3:64:c2:71:
         6f:f7:2b:e5:ee:a2:b1:68:bb:81:8c:ca:76:45:1e:24:07:ec:
         38:f7:d5:c9:70:0f:1d:ff:cf:a2:ba:5c:dd:f9:45:cd:48:1c:
         ea:c7:a1:73:9f:27:9a:f5:a3:66:32:fe:e0:43:51:04:4d:07:
         3b:2a:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 05:53:07 2026 by rpki-client