Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
File:                     a6b12d9f-9271-305e-847c-6c6fdf434670.roa (raw, json)
Hash identifier:          TTmpArjZmKJHncjYds+U+/wyizm2xftMm1eO3tEiTuc=
Subject key identifier:   E9:91:67:BA:72:A2:D0:87:4B:21:3B:C0:E5:AA:F6:31:91:80:75:7E
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F4328584EEEB75AACC78170DBAA125600
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     160
IP address blocks:        128.135.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5a:ac:c7:81:70:db:aa:12:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=e059e38a-b7c9-4cdf-9f96-4a3d8f63571a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:50:7b:2b:91:ab:2d:f3:97:d0:04:8f:3c:
                    69:46:e8:b4:1f:85:ce:5b:cb:50:e1:65:06:15:7e:
                    db:bc:24:08:dc:79:14:88:1b:4a:a1:a4:db:c7:78:
                    61:87:be:0d:fe:10:1a:59:3d:f3:7f:4e:25:65:66:
                    a2:43:84:f9:fe:1c:d5:87:d5:3a:26:9d:2a:14:33:
                    49:44:b5:db:a8:06:41:0a:29:ef:dd:c5:5b:74:88:
                    01:ce:7f:d4:3e:bb:8d:80:2f:0e:63:e5:5a:64:0c:
                    fc:f0:1b:67:6d:c6:e8:2d:bc:7c:cf:4e:2a:66:c3:
                    e2:6b:38:ce:b2:fd:68:8c:a6:91:76:34:c1:fb:9b:
                    02:39:91:7b:4d:a2:9d:0a:55:bc:bd:6f:26:f9:11:
                    d6:18:75:0f:00:af:0a:fa:d5:a3:77:6d:fd:df:d7:
                    0a:b5:b3:0a:58:50:fe:61:48:2a:9b:fe:6b:e9:df:
                    9a:41:9f:d0:e5:48:e5:08:97:95:21:2d:d8:02:6f:
                    cb:f5:96:25:64:59:1a:89:f3:df:34:18:e1:d4:26:
                    e2:b7:e9:0a:ee:d2:c8:bd:f7:d6:5b:08:bd:2d:99:
                    52:44:30:73:bc:37:3d:16:d2:3f:07:6e:b0:63:1e:
                    14:14:71:75:3a:f5:2f:7f:87:48:32:f6:48:a7:f2:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:91:67:BA:72:A2:D0:87:4B:21:3B:C0:E5:AA:F6:31:91:80:75:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:44:08:d4:e0:b1:1d:81:70:df:52:56:f1:19:c8:8d:76:
         9a:65:5c:58:81:f1:c5:7e:f8:4a:3c:45:0b:13:41:f7:94:c9:
         ca:90:ec:e7:d2:03:4e:9d:f6:4b:49:fa:34:e7:68:cb:2f:75:
         34:95:72:a8:8b:94:d7:4f:a8:13:80:e0:a5:fc:6d:ed:29:06:
         86:00:fe:3e:27:b1:05:17:dd:d7:e2:ae:56:49:95:94:47:1b:
         a3:3b:d0:a7:8f:7b:2d:f7:96:4e:5f:62:66:74:b4:42:55:9e:
         e5:2e:98:05:46:5c:35:ec:1b:22:bf:da:92:30:3e:77:37:9d:
         70:8f:00:26:10:1a:99:d3:86:db:f4:9e:68:6c:d1:14:ce:d1:
         56:2b:75:a9:a7:21:23:b4:eb:4d:3b:af:4a:df:39:5f:cc:f7:
         38:c4:0c:92:d1:e3:02:2d:a3:36:5e:51:f5:90:e7:93:99:0e:
         f6:85:1b:c9:c1:b6:17:b3:78:36:3f:6d:37:ff:60:df:4f:92:
         ed:18:a7:f1:f6:d0:9b:17:cf:d0:ac:df:b2:f9:87:85:be:fe:
         15:02:38:dd:15:de:f7:59:42:22:37:00:8c:78:be:3a:3f:a9:
         73:3d:af:b4:9b:13:f0:6b:f2:38:41:42:67:60:ed:e6:c7:44:
         fd:b4:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:49:21 2026 by rpki-client