Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/00d94fa8-38b4-3d2c-964c-855e9e3893df.roa
File:                     00d94fa8-38b4-3d2c-964c-855e9e3893df.roa (raw, json)
Hash identifier:          tnzMVx2D5iaKSj9CiAlrUIXh3TE1QrRlZGCnLae8VdU=
Subject key identifier:   9D:6B:5F:34:BD:80:67:0D:3D:80:F9:95:E1:CE:14:3C:58:FC:10:43
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E2AD46B4ECAEAD3225144B800
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/00d94fa8-38b4-3d2c-964c-855e9e3893df.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     12025
IP address blocks:        135.84.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:6b:4e:ca:ea:d3:22:51:44:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=6c75c168-4cc2-4962-be59-2e9244c923f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9c:f4:63:98:ae:53:9e:49:f5:15:30:d5:e0:
                    1c:6e:20:5b:44:61:da:e8:d4:1d:f1:76:9c:06:be:
                    3c:b1:25:b4:c6:f2:a8:e9:da:f2:cb:9c:8d:c2:b4:
                    fb:6a:7b:13:6d:82:b8:86:5f:e1:7f:0a:24:5c:66:
                    59:a7:fe:12:53:0f:2c:b7:ba:93:f6:e0:b5:ac:94:
                    6e:c9:40:e3:ce:f3:fd:f5:dd:0f:90:06:05:4e:38:
                    1d:d5:2a:16:69:12:d3:31:8b:be:f6:81:c2:a9:ad:
                    e0:2d:79:8d:5b:46:7b:73:47:c8:61:30:15:83:20:
                    98:bf:db:61:62:11:7f:9c:df:c5:f7:e0:c5:01:4c:
                    a2:d3:5d:e2:1f:3e:c5:52:e0:2a:ce:b7:42:0b:24:
                    b9:4c:de:c6:29:90:9a:22:5d:49:fd:72:20:10:22:
                    39:7e:88:2c:47:3c:d8:bc:0d:e6:1c:d6:5a:d3:3c:
                    d4:a5:eb:ec:ed:b4:09:f1:d0:f6:4d:4c:48:96:ca:
                    fa:99:f5:b2:ba:4f:3e:4d:58:1b:e8:06:5e:ca:f2:
                    d6:f2:58:2c:cd:ac:eb:12:58:eb:69:1c:e4:f0:7c:
                    5c:c0:4f:bf:69:57:19:3e:65:a7:20:62:88:68:82:
                    cf:5e:2a:41:12:6d:62:62:60:8f:7c:aa:ae:ab:38:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6B:5F:34:BD:80:67:0D:3D:80:F9:95:E1:CE:14:3C:58:FC:10:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/00d94fa8-38b4-3d2c-964c-855e9e3893df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:bb:f0:e1:9c:b2:af:bd:ee:ee:24:a4:7f:2e:34:c1:eb:
         f9:47:40:5c:07:24:3b:b4:fe:a5:8e:99:7d:f0:b4:a3:07:51:
         8e:f9:59:88:d4:86:a1:74:ee:3b:8e:ea:01:cd:fe:75:35:df:
         9a:c6:a3:66:d5:c4:48:76:92:10:15:b1:5e:8e:24:2c:4b:77:
         52:00:09:fc:e6:94:66:db:cd:4f:9b:a6:30:09:da:a5:8e:c3:
         a9:11:b3:6b:3b:d1:0f:a3:07:1d:1f:1f:d3:65:22:63:eb:44:
         6c:42:6c:c9:db:e2:bb:25:1f:08:52:64:b6:4c:69:b5:ea:be:
         a7:51:97:d1:40:c5:91:3b:55:ae:21:fe:df:eb:99:c1:5e:66:
         d4:c6:ff:9f:fc:04:2d:84:3e:31:d2:a8:64:ee:f9:c8:47:d8:
         64:90:53:3b:c8:c2:9f:ea:42:1c:78:a9:92:1e:69:79:4b:60:
         95:2d:3e:fa:42:35:f4:8e:32:62:3b:71:57:40:1b:56:33:8d:
         1f:f7:43:c4:5f:88:5d:ac:23:30:27:2f:fe:fa:29:c1:e7:80:
         d9:24:21:7d:18:b6:08:eb:4b:11:3b:ab:0b:ea:38:b2:2c:4d:
         8e:c9:c5:fd:47:f1:c7:86:59:72:83:ae:c8:d2:f8:60:bd:66:
         d6:0c:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 23:32:17 2026 by rpki-client