Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa
File:                     b972c047-2afd-30a4-a40b-2b850202cf41.roa (raw, json)
Hash identifier:          fqSg15QulGwajzyeKE75Kvd/PE7MZoJ6jwvqz4phVu0=
Subject key identifier:   88:45:96:D8:8B:50:28:FB:33:2A:84:47:4C:E0:E3:C6:99:D4:92:51
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584A8146482A8C5B2F5B40B05080
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     14593
IP address blocks:        135.129.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:48:2a:8c:5b:2f:5b:40:b0:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=d3e42378-91b8-4209-b3bc-d7a40e6b5c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:5e:94:02:4e:90:c5:3f:50:2e:a9:dd:9a:
                    4b:53:95:03:d4:46:73:38:0a:10:5c:92:e6:58:e5:
                    ca:89:b5:f8:9b:36:c7:9e:b8:db:41:17:a4:ad:a6:
                    14:14:80:fc:1b:94:94:9e:e0:5e:49:5d:18:f2:be:
                    ca:a9:2a:f1:f6:29:de:38:82:62:aa:85:87:d2:79:
                    6a:83:b5:d9:e3:3b:53:89:c6:5b:4f:4b:02:ab:57:
                    57:16:b9:1b:2f:ee:49:0e:f2:59:4f:3b:99:7e:8c:
                    10:36:62:07:b7:31:db:de:be:a8:62:26:94:76:b4:
                    37:86:7b:8c:b6:ef:9e:84:da:6d:59:63:b1:94:18:
                    5a:92:08:c6:19:c9:8a:63:f0:24:42:56:08:dc:b8:
                    f9:d9:7f:c8:08:d0:c9:85:db:3a:7f:ab:de:29:c9:
                    38:0f:fa:79:17:7a:92:89:df:ed:a7:c8:b6:a6:ea:
                    e0:1c:bd:d3:b6:67:9e:b8:07:3c:4e:85:56:2f:f4:
                    bb:e8:2b:e4:5b:f4:50:30:b2:45:58:1f:07:bd:c0:
                    ab:2f:16:41:34:42:33:74:16:e7:01:76:65:ba:1d:
                    28:d1:42:29:c4:c0:90:c0:20:60:cc:7d:14:bc:d4:
                    7e:bb:0c:4b:7b:3f:ea:e4:76:9b:5e:4c:4b:94:16:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:45:96:D8:8B:50:28:FB:33:2A:84:47:4C:E0:E3:C6:99:D4:92:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:ff:98:ef:89:83:3c:fe:a0:ca:3d:70:4c:24:00:46:32:
         31:97:6d:37:c2:ad:e7:2a:60:e7:c9:2f:0e:ab:90:46:f5:49:
         04:c8:d9:1b:17:34:76:3e:94:d3:f6:53:74:e4:5a:d0:09:60:
         b8:c1:d4:47:7b:4f:c2:9b:3a:b9:96:27:85:c4:4e:da:ea:4e:
         08:ee:5a:f2:ea:80:4e:e6:ed:23:1a:c6:5f:cf:b9:4d:36:70:
         fc:b9:f6:4a:d2:69:a2:93:b4:04:7a:a8:79:e2:d0:a8:d6:25:
         0c:df:8e:9c:23:a6:5e:54:ee:6f:ca:ec:78:c1:62:81:ff:99:
         c6:3b:20:e4:de:e5:dd:f8:eb:2d:40:a4:23:c6:7d:7c:0d:99:
         1f:4d:f5:ec:44:67:55:78:d2:2c:93:16:c8:80:bb:94:3f:9c:
         e9:1c:b1:1a:1f:50:c9:34:ef:20:3d:91:c7:2d:85:58:3e:82:
         cc:4f:c3:10:f8:1a:b5:07:21:fa:b7:0e:d8:0e:c8:1a:56:59:
         01:80:5d:29:b6:7b:da:5d:58:85:e4:bf:9a:7b:f1:cc:75:69:
         88:9a:b2:ca:05:62:f4:ae:7f:82:0d:be:98:ff:e7:22:7b:02:
         74:e9:72:71:c2:de:ca:80:29:7c:e4:c0:12:2a:d1:0a:e1:45:
         38:a6:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:45 2025 by rpki-client