Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa
File:                     b47f4a91-d1d5-37c8-b661-b064d98eb393.roa (raw, json)
Hash identifier:          vIuxvPo3uc9FXKVeOG4A07Jq6pQ+6Ufb9QgHrGM4dfE=
Subject key identifier:   FE:47:FE:C1:B6:4E:13:CC:34:31:FB:2B:D4:C1:C7:94:0C:2E:F1:4C
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F4328584AB91B8436E4CB267839C5089C
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        135.84.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:84:36:e4:cb:26:78:39:c5:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=7eb62dfe-18e3-44e2-aa10-a68d52a4bc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:7e:d0:ae:00:69:56:a6:a5:a9:ae:09:ea:
                    5d:83:1a:b8:01:a3:ca:c8:18:09:b9:66:37:9a:ec:
                    d4:46:b5:0a:25:fc:d8:d2:8a:11:0d:3e:7c:4c:e1:
                    e1:40:65:a5:24:b3:1b:87:2a:f5:1a:2f:e9:79:00:
                    64:32:f6:d8:74:a2:85:0f:cd:83:ca:0f:98:7b:66:
                    87:df:a9:f5:17:44:26:10:0f:47:74:00:88:b0:83:
                    24:00:dd:35:87:79:30:86:fe:dd:c6:f2:ad:36:88:
                    6c:d9:73:2d:e9:24:13:a4:f2:0d:59:31:d4:0f:5c:
                    54:fc:9c:20:18:a0:2f:23:3b:6b:d3:a2:62:91:40:
                    67:93:70:01:35:43:36:11:1f:76:f7:66:75:7e:d9:
                    3a:c0:78:3d:85:06:99:e3:92:6a:f4:df:7d:84:67:
                    42:ff:8c:83:d9:ce:83:70:a7:c9:a2:b7:31:db:99:
                    95:52:38:ec:4b:8a:5e:ce:1a:9f:99:82:af:c7:a1:
                    5f:85:c3:1a:69:eb:88:98:ae:34:8d:ff:7d:a7:07:
                    3c:cf:8b:c6:ad:b5:e1:f9:48:ae:e8:27:83:c7:56:
                    e2:69:c7:52:73:90:a3:8a:46:b4:1f:98:08:b7:d0:
                    0b:25:b5:da:d0:a9:77:38:2c:36:76:4c:2f:be:23:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:47:FE:C1:B6:4E:13:CC:34:31:FB:2B:D4:C1:C7:94:0C:2E:F1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:93:74:1e:5d:b0:49:c0:02:ce:6b:cb:62:fd:c0:5d:5b:e9:
         27:18:40:2b:50:6f:a5:53:ea:2f:04:62:27:f5:4d:01:0a:87:
         64:07:25:f4:92:1c:49:e8:8f:e7:b3:fe:16:cb:24:5d:51:54:
         40:e2:09:ca:0c:75:bd:ba:80:91:0a:41:25:3d:fd:be:dd:c0:
         25:58:c9:19:33:d0:53:2a:09:33:f6:64:a8:96:22:95:11:e4:
         78:c1:72:31:30:bf:98:c7:5b:36:b6:a1:12:ec:81:73:77:d1:
         a5:43:1a:bd:ae:17:fe:3f:7a:78:71:90:36:58:6c:dc:1d:a7:
         f1:7e:9d:f2:34:47:41:0b:f5:d5:84:c3:8e:f0:bf:18:53:8e:
         71:8e:02:dc:da:d0:18:26:51:a8:85:01:5d:9f:d8:4e:78:06:
         ce:5f:1f:f6:d8:dd:90:a9:42:dd:d1:e3:de:53:c6:e0:54:20:
         26:0b:02:cc:d1:82:91:6d:5a:54:38:f7:20:20:86:0a:f7:fc:
         6e:60:6a:a5:ff:e6:f5:d3:f6:07:18:ac:80:09:80:af:b5:11:
         84:f1:50:d5:ed:6c:be:3e:cb:85:9b:c4:88:84:6e:46:00:33:
         02:ff:bf:95:54:00:53:aa:ac:6b:bb:03:01:ab:33:e9:5d:16:
         8d:f5:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:17 2025 by rpki-client