Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/d56b03a7-0ec7-338a-8b08-d12daae44607.roa
File:                     d56b03a7-0ec7-338a-8b08-d12daae44607.roa (raw, json)
Hash identifier:          NIPBFYn+IfFWbmYSItci70mYA4siPucsjVmyGMuW7SQ=
Subject key identifier:   28:31:4E:F0:8A:93:F9:3C:EA:77:53:A0:9C:B0:F0:36:04:11:3C:C0
Certificate issuer:       /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Certificate serial:       010D0C9F4328584EA5AA6B44CE1DD725BA764B00
Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/d56b03a7-0ec7-338a-8b08-d12daae44607.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     7345
IP address blocks:        135.109.194.0/24 maxlen: 24
                          135.109.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6b:44:ce:1d:d7:25:ba:76:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=55e2d703-3e3b-4558-afa8-bef552a2501c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:08:4c:25:fa:41:2f:78:cf:4b:68:ff:71:01:
                    0b:fe:7b:0f:7f:3b:5f:44:e5:56:ec:58:0a:a4:07:
                    d6:70:21:40:34:40:ed:c6:8e:37:d1:b4:9c:1c:81:
                    2c:04:d5:12:b2:70:d2:f6:4b:17:03:10:32:87:8f:
                    21:47:f3:63:96:e6:79:60:22:7c:1c:8c:df:6a:1c:
                    c6:34:bd:29:fb:96:cb:fc:12:b9:7b:57:de:f5:0d:
                    3e:35:d4:f0:a6:28:cb:46:5b:42:c5:b3:34:a6:c2:
                    0a:41:8a:1a:20:df:dd:4d:ce:76:e0:0a:c9:3d:b6:
                    62:f6:f6:b8:30:46:53:9c:bc:ba:07:e6:16:72:2b:
                    08:6d:c8:fd:e8:0d:c8:dc:b3:7b:db:7d:be:87:d3:
                    7d:c7:cd:61:05:ac:e2:88:cf:37:d9:78:1e:56:50:
                    f2:8f:5b:f6:6e:e3:de:32:b8:ec:73:68:14:19:f3:
                    c5:43:b2:2e:97:3d:e3:44:7c:4d:f4:94:49:a7:07:
                    04:5e:69:4f:e4:4a:b9:e5:bf:dc:3c:81:4d:8c:d6:
                    9f:3e:0d:df:1f:60:94:d9:c1:79:c0:9d:fc:c7:64:
                    41:52:82:da:28:3e:ab:e0:5d:d7:c9:fc:41:75:87:
                    99:79:4d:98:ed:81:d7:1a:49:b9:be:6c:2a:ca:0b:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:31:4E:F0:8A:93:F9:3C:EA:77:53:A0:9C:B0:F0:36:04:11:3C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/d56b03a7-0ec7-338a-8b08-d12daae44607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl

            X509v3 Authority Key Identifier:
                keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.109.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:ba:3e:14:36:41:94:48:01:42:c9:fa:15:93:5a:01:ea:
         3a:ae:a9:94:0a:d6:23:e2:7c:38:07:9a:9b:19:2e:1d:b6:71:
         28:95:d7:fa:b2:a7:7c:09:3e:c0:b7:17:69:5c:4a:0a:c9:7f:
         eb:4f:e1:96:7e:59:ce:7c:74:cb:79:fd:07:0a:d9:b9:fc:a1:
         c6:4d:c8:bf:bd:fe:cd:5d:93:78:a3:dc:3d:d4:37:d0:c9:76:
         04:eb:66:53:15:ea:99:7f:38:b4:44:14:f6:e7:ca:88:3c:93:
         e4:4b:df:b2:5a:2e:df:1f:b4:d1:c2:bf:4e:b1:cd:42:e2:34:
         3d:0e:9a:ff:8e:cf:61:db:18:d6:d4:ee:4b:01:2c:d1:3e:9f:
         3e:30:de:eb:f2:6f:ca:9f:98:f6:2c:9d:4a:07:1b:c1:ad:5c:
         9f:8e:0a:4d:57:36:4c:d0:a9:cd:56:f2:f0:00:c8:d9:27:10:
         12:ec:50:ed:d3:59:7a:83:dd:07:f3:78:94:6e:99:fe:ca:16:
         9f:5e:de:8d:08:4c:06:c8:96:a9:bf:28:dc:89:f3:2b:3a:47:
         91:e7:0e:a7:cf:e8:d4:1b:6d:0a:f4:80:28:67:6c:e0:54:5f:
         0d:21:1b:49:7e:3a:56:61:39:44:97:df:a9:e6:b0:c9:79:70:
         65:16:20:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:23 2026 by rpki-client