Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa
File:                     5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa (raw, json)
Hash identifier:          zK17ecX9smE0ZRxPGqXpTYm/BqG5i1LjLddf8DcH8uc=
Subject key identifier:   2D:A9:BA:4C:53:6F:AF:B9:4E:9C:5F:7E:0D:F8:C8:A6:AC:0D:6A:12
Certificate issuer:       /CN=0c776cd4-6b58-4fae-83e8-50352d4178d4
Certificate serial:       010D0C9F4328584AADF0F8723520BD193907F280
Authority key identifier: 26:3F:40:D3:37:9F:BD:E1:95:22:4C:2B:3F:F7:29:19:1D:B8:8B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        135.84.69.0/24 maxlen: 24
                          135.84.70.0/24 maxlen: 24
                          135.84.78.0/24 maxlen: 24
                          208.86.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f8:72:35:20:bd:19:39:07:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c776cd4-6b58-4fae-83e8-50352d4178d4
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=c99278ed-576d-466d-8a85-bcfd52b5cd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b4:04:0e:98:7c:e7:cf:2a:f2:fb:c1:b2:d7:
                    7c:ab:80:5b:f1:4b:cb:f7:ee:d2:dc:dc:ec:9d:3e:
                    76:f5:ef:d1:af:d3:bb:b9:b6:1d:9a:8a:e9:b5:a8:
                    fa:2c:43:ab:46:9d:10:ef:d7:11:8a:95:c6:c1:ff:
                    b7:cb:8d:ac:92:be:f9:ef:4e:f5:22:d0:af:96:f4:
                    d9:a7:67:ff:e8:94:15:87:57:8b:3f:eb:c5:3e:8c:
                    d7:9f:00:99:35:63:d9:9a:5d:bc:44:4f:bf:6e:16:
                    a6:0b:c4:4d:01:7b:71:65:4d:be:ec:2a:55:93:0d:
                    87:c0:72:ca:a8:fa:64:57:f9:f8:88:2c:41:6c:66:
                    ab:28:59:e3:f8:35:53:1c:bb:22:10:a5:b3:9d:65:
                    47:0e:67:61:9b:3f:6f:4f:67:c1:e2:f7:6e:98:ac:
                    01:e7:52:3a:be:31:77:79:a9:4e:86:93:ec:9f:47:
                    61:27:98:c8:12:83:49:14:16:cc:b1:57:38:2c:9e:
                    0a:ef:87:9b:bd:06:e1:61:41:ef:17:bb:c4:15:83:
                    7d:9d:95:4e:5e:63:03:4b:78:da:23:b1:75:cd:27:
                    ba:69:cd:43:1c:eb:b7:28:54:90:20:37:47:4b:c9:
                    e7:49:b4:4c:0a:2f:0b:cc:78:90:2a:f2:8c:43:fc:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:BA:4C:53:6F:AF:B9:4E:9C:5F:7E:0D:F8:C8:A6:AC:0D:6A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/5d593449-c35f-3cb2-8ca9-ccce4e5f0b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.crl

            X509v3 Authority Key Identifier:
                keyid:26:3F:40:D3:37:9F:BD:E1:95:22:4C:2B:3F:F7:29:19:1D:B8:8B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.69.0-135.84.70.255
                  135.84.78.0/24
                  208.86.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:8d:aa:aa:be:0d:e8:34:7a:58:f6:87:96:07:cb:cf:9c:
         08:d9:35:ca:37:03:e4:e9:22:de:87:08:b8:c6:22:55:bb:ba:
         82:c7:49:93:a9:78:7a:b5:e5:60:7d:54:93:4b:a9:22:1b:4d:
         e1:73:c1:b2:53:d8:b0:3f:16:62:9d:df:7c:78:49:1b:6f:64:
         6a:50:a5:db:87:65:f8:c9:56:ca:d9:73:3a:38:46:d6:38:a0:
         ba:92:c1:5c:2a:cd:cf:1d:b2:1f:0c:61:ba:c7:4e:0e:79:d2:
         10:b8:d4:ba:0e:04:4c:f3:2b:ef:e5:48:c8:50:03:af:ba:b2:
         88:a1:df:5c:cd:9e:21:2d:28:83:9b:d9:e8:56:89:8c:16:f1:
         f1:31:b4:bc:18:54:57:73:22:1d:99:7a:cc:f3:e5:df:bc:65:
         f6:2a:ac:f8:29:f6:25:76:f0:9d:93:e1:05:9e:54:54:4c:96:
         f9:9e:63:56:aa:38:87:a4:7d:e6:50:a6:3e:ed:f6:7f:83:93:
         bb:63:62:2f:1e:37:14:7c:7f:84:2e:54:08:46:4f:d1:38:dd:
         6d:af:3b:fa:15:ed:cf:9d:fc:c0:2a:71:64:ee:32:d3:03:4b:
         01:eb:71:ff:b6:76:c6:f0:c3:65:73:96:81:2f:57:37:59:2d:
         13:7c:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:44 2025 by rpki-client