Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa
File:                     b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa (raw, json)
Hash identifier:          slLpCC8jguQMIoUYnuFJRM87V7qy/ulsmkNfZgmmQs0=
Subject key identifier:   BC:1A:C1:0F:5D:F4:14:C7:C0:9A:0A:BB:1E:3D:1C:5F:9D:2D:0B:69
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F4328584F03A779526E434E57E1F78F80
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     397865
IP address blocks:        135.84.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:79:52:6e:43:4e:57:e1:f7:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=048cf632-651a-480c-9479-4e7126173759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:ca:14:fa:4e:7d:fa:cd:c2:0f:98:56:50:
                    52:f1:2c:1c:1b:7e:36:1b:57:e2:8e:d8:95:cd:07:
                    4f:08:0f:d5:b7:ad:14:27:c7:1f:25:13:f7:d1:89:
                    b5:5a:e5:72:29:e1:db:eb:36:7c:13:25:be:4a:21:
                    e5:7d:d4:30:8e:d8:7c:f0:e0:40:5e:ed:cf:b8:11:
                    e5:3f:e9:8e:04:c0:39:a5:04:88:a8:b9:37:26:16:
                    ad:03:40:fb:f7:b4:4b:8c:ef:ad:69:93:f1:db:c3:
                    18:c6:98:c0:f3:02:80:60:3c:98:db:62:02:11:35:
                    20:11:71:fb:d6:04:fc:b0:22:cd:c1:09:15:d4:6b:
                    ac:31:df:2c:91:ef:93:f5:6b:c2:ec:13:af:fd:5b:
                    51:fd:d2:77:3b:cc:4c:cc:21:16:e4:e4:0e:53:59:
                    13:ba:a3:28:c7:4d:a6:08:16:b4:f7:ce:6b:95:13:
                    55:72:2d:8b:52:39:2c:ec:85:ff:cf:13:c6:76:6a:
                    00:ad:ac:57:b5:d2:5f:3e:78:8b:6f:aa:3a:25:b6:
                    c6:2a:31:55:8c:c7:5f:1d:8a:7f:e0:60:21:ad:11:
                    c6:81:a3:22:c4:f2:32:99:8a:c1:fc:c4:69:96:34:
                    d9:6c:90:10:d0:63:06:98:c7:d9:b7:38:c7:27:e7:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1A:C1:0F:5D:F4:14:C7:C0:9A:0A:BB:1E:3D:1C:5F:9D:2D:0B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:fe:e3:b4:c4:be:f3:93:06:83:25:aa:35:2a:3d:52:7e:
         c5:dd:15:ae:fe:1a:2b:86:53:a1:26:3f:f6:21:aa:23:90:21:
         58:c5:8f:c0:b3:f8:71:e8:c2:8c:2b:97:d8:dc:c3:d1:c1:5f:
         3f:2d:67:6a:02:9b:0c:8c:f2:db:03:cb:da:41:9f:9c:0d:82:
         52:cc:36:7a:42:12:80:53:6d:8f:40:4a:18:77:1d:d4:ab:18:
         83:e2:b0:0b:bc:03:ab:9e:61:ab:86:8a:59:a7:47:30:1d:a5:
         39:3a:08:91:2e:8c:fb:bf:f8:64:b0:77:d4:e4:09:34:bf:c9:
         dd:bf:56:cc:a0:d3:15:da:d4:06:f0:99:52:01:e7:53:76:fa:
         d9:5e:66:43:cf:b3:06:31:6f:5c:22:e5:82:7d:b4:b3:0a:16:
         1a:65:e9:28:87:a4:22:72:12:14:1d:4f:28:0c:66:cc:25:aa:
         02:f8:d5:d8:c8:ef:21:76:d1:b6:61:d5:d9:c9:07:f8:c2:36:
         2f:2c:54:ec:ed:35:ef:c1:0d:c2:6e:b5:7f:71:e5:d4:1f:58:
         87:1c:ce:1a:14:75:a3:fe:63:82:7b:6a:26:74:2c:c8:b2:ea:
         1e:12:5f:c4:65:2f:8d:93:d1:8d:39:6b:0d:2d:79:72:fe:61:
         67:4c:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:55:08 2026 by rpki-client