Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/d8141e5d-1388-32b1-883c-7eabc6905072.roa
File:                     d8141e5d-1388-32b1-883c-7eabc6905072.roa (raw, json)
Hash identifier:          IceRVyVWVxBsA9ZkGAU1bVlIY0YRzIi/XkFB+W7PSgA=
Subject key identifier:   C2:DB:56:5E:B9:57:7D:4F:98:31:41:BD:0E:09:EC:EA:95:BA:A1:A3
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F4328584D59EA59ABDF5F9B110BCE5880
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/d8141e5d-1388-32b1-883c-7eabc6905072.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        135.84.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:59:ab:df:5f:9b:11:0b:ce:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=7eb2d91d-5294-4202-8ab0-d93f03e8a2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:ce:8c:9b:74:3a:73:89:64:54:56:9c:94:
                    55:75:5c:91:d2:d0:dc:ff:7a:02:5a:d1:1c:48:02:
                    b1:5e:5a:b1:73:a8:d6:4b:05:a6:6e:ef:7f:6c:54:
                    49:1d:4f:c5:1c:6f:20:b8:68:f0:17:22:9d:f5:dd:
                    dd:54:c4:c0:31:2e:30:3c:28:9a:b2:b4:1a:5c:93:
                    b8:1f:9f:d6:2d:90:27:e6:8e:96:51:48:b6:8d:c7:
                    3c:cc:eb:27:78:4e:c7:c0:49:8e:52:ac:75:00:63:
                    50:bc:e9:60:44:25:b2:3d:8b:4d:80:6b:b8:0a:01:
                    bb:e7:f7:e6:f6:d7:c5:c3:00:ea:76:b2:05:d5:d8:
                    1f:5c:90:01:20:fe:39:7c:d3:25:97:d2:03:bd:e8:
                    5f:6e:1e:86:2e:55:3a:d2:85:cb:65:bb:d8:22:a2:
                    8a:bc:f8:f3:73:39:18:46:e5:bb:5e:2b:a9:0c:d6:
                    dc:ce:8f:95:e3:13:c8:25:71:7d:b7:04:68:23:ca:
                    6f:94:b1:fd:34:6c:00:97:f6:e3:ff:2c:e6:53:8f:
                    95:34:0c:31:40:4e:f6:e4:30:5e:78:73:5f:98:fb:
                    b2:8b:b1:67:64:ea:cb:49:83:fd:56:a0:09:2c:37:
                    fe:f9:f4:ef:a0:69:8e:0a:1d:4d:49:ed:6d:c7:a0:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DB:56:5E:B9:57:7D:4F:98:31:41:BD:0E:09:EC:EA:95:BA:A1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/d8141e5d-1388-32b1-883c-7eabc6905072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:61:f6:0b:55:53:e4:93:dd:23:73:91:22:4d:eb:bc:fc:
         39:9c:8c:86:60:e7:f1:4b:1f:99:d8:90:99:67:a1:79:d5:e7:
         51:4b:22:2a:1b:8e:19:6a:44:d3:58:d6:70:ac:a2:99:29:db:
         8e:53:65:a4:e2:24:54:2e:81:4e:d7:1e:e6:13:66:90:26:b0:
         c9:83:42:49:1c:0f:92:05:be:0e:fa:87:df:aa:85:0b:f7:c5:
         1a:9a:57:0b:fd:57:72:fd:0c:fb:7b:dd:d7:80:0d:2e:bb:a8:
         26:87:a9:cb:d7:8d:27:78:39:0e:2f:62:d3:5a:aa:ed:49:39:
         39:55:f6:0b:9f:b4:35:ff:11:4a:36:db:ba:bb:31:ba:27:ba:
         bb:38:f0:2e:3b:67:9f:46:6f:26:8c:5d:1a:c8:f2:86:43:82:
         83:db:10:d0:b2:e6:42:79:b1:27:ff:b6:f9:17:7b:a2:9b:77:
         30:b1:4a:2e:40:c8:57:65:f6:df:5d:4d:6d:66:01:ed:ef:8e:
         4b:ee:94:1e:c6:49:08:11:78:86:29:f9:d0:a4:97:57:74:5e:
         49:4b:6c:20:1d:51:4f:ef:d6:a8:e6:e1:33:ee:65:53:11:f0:
         e3:53:f1:ae:15:1b:0b:d6:6c:bc:9b:75:44:4a:be:54:be:a3:
         42:20:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:47 2026 by rpki-client