Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/62fc55f4-7214-34c6-823b-425446e00dde.roa
File:                     62fc55f4-7214-34c6-823b-425446e00dde.roa (raw, json)
Hash identifier:          bawm4sAdUwhfPEEqeQ288IjYROIx9iv0qs1jUxdJuVc=
Subject key identifier:   89:17:92:23:82:1F:BC:EC:BF:AF:A1:36:85:77:C8:00:63:EE:D4:E1
Certificate issuer:       /CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
Certificate serial:       010D0C9F4328584EA78739D6BF0E8F7703FB4390
Authority key identifier: 05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/62fc55f4-7214-34c6-823b-425446e00dde.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62
IP address blocks:        165.140.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:39:d6:bf:0e:8f:77:03:fb:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=60a2e224-a0e3-4a3f-9d0c-8d9e75387e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:41:8b:bb:b7:79:60:bc:03:d9:15:a5:d6:78:
                    16:a5:6a:0c:ee:1e:f2:59:ad:db:e4:d0:df:23:37:
                    01:69:cb:1c:bd:c7:17:79:ad:71:56:5e:c4:9a:28:
                    1f:05:72:4e:d9:3c:fd:d9:db:62:5c:19:15:7a:4d:
                    c8:0e:1e:74:ed:4c:34:77:3c:fc:a7:11:a9:ef:cd:
                    5b:2e:9c:35:e3:ab:8c:3d:43:26:5d:8e:d3:f8:35:
                    b4:ff:64:ed:43:bd:76:c8:be:a8:2d:85:d5:4e:59:
                    dd:e1:fb:eb:dc:cc:45:75:ec:e8:15:56:44:01:fa:
                    12:1e:2b:5f:5d:af:dd:e8:01:41:9c:34:16:da:ac:
                    7b:c6:b2:c4:08:5e:07:a8:5e:ba:4a:f3:71:3b:73:
                    e9:2c:d8:91:f5:dd:8c:7d:e2:2b:19:a9:bd:d1:a1:
                    32:39:fe:b4:d1:f2:da:68:94:40:b3:a4:04:b1:77:
                    8d:2c:aa:1a:eb:3f:f1:eb:83:dc:ed:0b:b1:49:b3:
                    90:e7:52:1d:d0:d8:f7:70:2f:bc:72:f1:64:c8:ec:
                    83:c1:d7:76:45:a4:05:1d:52:a4:38:53:2a:03:a6:
                    e5:2e:92:92:e5:a4:c3:22:3d:53:3a:e9:b7:c5:1f:
                    00:49:5f:01:39:8f:e7:7e:3d:53:48:dd:6b:1c:ad:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:92:23:82:1F:BC:EC:BF:AF:A1:36:85:77:C8:00:63:EE:D4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/62fc55f4-7214-34c6-823b-425446e00dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl

            X509v3 Authority Key Identifier:
                keyid:05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:d0:f8:35:49:a3:d3:6a:ee:de:d7:35:c0:92:9e:19:a1:
         8f:ae:bd:48:ad:1b:5f:c0:ed:f9:5a:16:8c:26:9d:1f:80:8e:
         fa:15:2c:37:72:83:fa:b0:5e:cc:37:fd:b1:29:6b:c0:3f:44:
         7e:0f:0a:d1:1d:d6:23:6c:87:0c:99:73:d3:02:b4:5c:33:97:
         2c:9e:20:c3:60:35:77:09:08:32:7d:1f:2f:f0:61:a1:29:82:
         f4:c9:07:79:cc:1d:b7:63:a3:98:01:bc:cb:61:95:7d:66:00:
         d9:ef:ce:47:e4:fe:af:4e:b8:5c:83:95:10:09:50:74:40:27:
         a2:8f:6f:58:19:40:a4:67:66:95:1a:94:58:f7:cc:56:34:8a:
         7b:94:a8:2f:6e:bd:4a:56:61:62:94:f8:c4:eb:74:28:34:a1:
         26:24:b8:f1:e1:ba:97:35:a1:b9:81:74:89:34:7a:52:2d:86:
         6d:ed:1e:18:31:40:dd:02:82:5a:38:a0:4e:e5:b3:ae:84:a9:
         71:16:d2:dc:1f:f6:90:e1:99:3d:c3:80:55:32:cd:33:71:44:
         1f:12:b4:f0:05:bd:96:a5:c9:0d:27:58:cf:f8:2a:04:7a:78:
         4b:2a:86:2c:d3:aa:bb:37:a2:9b:a1:c2:d9:12:f3:61:2f:6b:
         cf:83:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:30:09 2026 by rpki-client