Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b81077c7-af1a-3bb3-a276-dbad259b63fc.roa
File:                     b81077c7-af1a-3bb3-a276-dbad259b63fc.roa (raw, json)
Hash identifier:          ULDHyblBFOAmcwWfvv9PrP6M/YuunbkovD2GceX+Vac=
Subject key identifier:   F1:0C:10:B8:AA:13:F8:F4:5E:A7:E0:B7:2E:FA:95:DA:14:7F:F7:34
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F4328584F146792FFAFF994A37630C140
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b81077c7-af1a-3bb3-a276-dbad259b63fc.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     3356
IP address blocks:        135.84.120.0/23 maxlen: 24
                          216.168.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:92:ff:af:f9:94:a3:76:30:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=47b82e2a-2bc2-4ba4-89d4-3d2c0f95d549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:7f:3b:ca:91:b9:fe:c0:2e:a2:f1:3e:31:
                    9d:56:07:6e:7b:45:60:b4:f3:c0:9f:39:3d:10:ce:
                    7b:66:dc:0c:5f:61:47:e9:64:29:ad:67:f7:62:c1:
                    fc:45:2c:b6:39:da:4e:d0:63:27:8f:5a:d7:e6:cc:
                    0a:51:4d:dc:8b:5d:dc:79:e9:e2:f1:26:fb:7f:17:
                    10:14:f5:fd:68:96:ac:a8:df:bf:7a:88:45:34:06:
                    a9:f2:46:c2:49:a0:b9:d5:08:a9:ca:d5:ee:a6:c6:
                    d3:ba:60:9f:18:ae:71:df:6f:6c:fa:5f:65:1e:89:
                    48:92:50:00:6b:7f:99:1e:4e:ad:ab:a3:10:44:61:
                    9e:62:d8:5f:b6:b1:21:bd:af:1f:d3:81:79:67:c4:
                    20:41:18:9b:01:6c:15:01:27:cd:21:2d:88:7d:17:
                    a2:5b:53:06:22:af:6d:78:ff:5c:6e:0c:54:6f:9d:
                    51:d6:3e:06:08:41:fb:d3:8a:6f:bc:1e:ae:9c:b7:
                    99:12:9e:45:b1:75:e8:5f:27:02:cf:fd:a8:fe:90:
                    ae:df:91:e5:19:69:54:0c:5e:40:02:63:63:3c:9f:
                    f5:95:ad:db:bc:de:27:89:10:c2:e2:27:98:43:d9:
                    bc:2b:ff:d5:c5:3a:1c:c8:03:a6:63:39:cf:f4:bd:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:10:B8:AA:13:F8:F4:5E:A7:E0:B7:2E:FA:95:DA:14:7F:F7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b81077c7-af1a-3bb3-a276-dbad259b63fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.120.0/23
                  216.168.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:74:fc:f1:e6:9e:83:e5:e6:20:65:98:9a:4d:71:56:59:
         34:f1:48:cd:bc:f7:f1:a1:81:e1:fe:54:e9:44:65:60:c1:ad:
         1d:ac:05:f7:f9:2c:8e:a5:e0:02:e8:21:b3:b6:f6:5a:e8:23:
         2f:4b:5b:02:d2:ec:29:f6:0f:a6:28:14:c4:00:86:93:0b:b0:
         2e:9a:d1:54:ab:08:4c:93:7d:96:67:af:9b:48:d9:19:05:92:
         aa:59:d6:f2:2a:a1:fb:10:f0:95:7a:8e:3a:08:81:21:71:31:
         62:7d:86:85:27:6b:b4:03:7c:d1:ef:a9:fb:43:38:30:ad:c7:
         19:cb:37:c6:f5:f5:dc:e9:40:49:cb:e0:72:0a:b8:27:06:da:
         90:f1:4f:e7:b1:15:64:ab:e3:3f:58:e9:21:19:84:33:7d:21:
         8f:b5:e8:df:cc:91:c2:bc:2a:a6:05:2e:b9:6f:90:3e:41:ef:
         35:6a:d0:aa:7f:47:97:44:75:7d:b4:c9:b2:12:03:5f:1e:6f:
         63:61:e5:f4:97:2f:3e:b6:3f:8c:cb:f1:17:0a:31:cc:a4:b4:
         c0:a4:9b:8a:3a:98:f6:f0:f3:45:af:c6:52:8d:ab:ca:1a:fa:
         df:84:4c:4a:4b:bc:29:d8:37:ec:39:79:fd:dc:40:7e:bf:c0:
         2b:ba:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:54:57 2026 by rpki-client