Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/d8141e5d-1388-32b1-883c-7eabc6905072.roa
File:                     d8141e5d-1388-32b1-883c-7eabc6905072.roa (raw, json)
Hash identifier:          uMMoNPVZ4aKvaG6sJqecDHS1bo3QVQY67/G9PNgA5dE=
Subject key identifier:   B3:9B:A5:D7:5F:5E:51:58:F6:7E:A9:C9:7C:0E:8F:E3:2E:01:6D:F5
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F4328584B99D789395519432BB7D4A300
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/d8141e5d-1388-32b1-883c-7eabc6905072.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        135.84.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:89:39:55:19:43:2b:b7:d4:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f1f039b3-9630-4004-a76a-74d9b26f9146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:26:1f:41:05:13:cd:d7:07:6f:01:23:d4:
                    24:f3:4b:b9:12:e9:7f:3c:51:aa:a2:3d:14:06:3a:
                    04:07:1b:c0:40:b2:16:45:14:1d:4c:11:24:83:58:
                    03:80:61:23:13:3f:f7:fd:95:55:47:81:45:68:ff:
                    0c:e5:b0:d8:20:84:af:26:19:76:fd:5b:d3:52:43:
                    1d:de:a9:99:95:88:d7:2c:9c:b0:82:fb:b6:f7:16:
                    e7:d5:75:a7:8f:a3:1e:a4:38:b0:fe:ae:79:c5:72:
                    f8:9c:67:f8:17:c9:a9:d2:55:00:56:5f:4e:b7:35:
                    f9:6b:ca:d3:82:cf:27:55:59:3b:62:50:43:e5:0e:
                    8d:34:d9:1d:7c:5b:95:dd:ac:01:fd:7f:6e:44:ed:
                    10:ea:1b:f0:82:7f:28:3b:87:68:8a:7b:e2:58:62:
                    d9:a8:73:5d:5c:15:25:86:a7:d0:ca:43:56:44:41:
                    86:6e:01:44:02:08:ff:43:3e:e5:98:64:07:45:a2:
                    31:55:67:52:0e:d1:40:1d:1d:b1:65:98:da:c9:0d:
                    46:07:b0:45:f8:4d:e9:8f:71:5a:08:4b:6e:52:80:
                    e9:91:97:9c:67:fb:0e:59:4c:f4:85:de:4d:f5:f7:
                    50:45:17:4d:ae:6b:e3:25:f0:de:35:84:3a:37:bf:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9B:A5:D7:5F:5E:51:58:F6:7E:A9:C9:7C:0E:8F:E3:2E:01:6D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/d8141e5d-1388-32b1-883c-7eabc6905072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:ba:6a:f4:e5:2e:52:20:b7:9d:28:95:a1:32:bc:90:d7:
         8d:93:49:6d:c9:67:07:1f:bf:08:40:10:01:72:46:13:41:a6:
         74:61:2c:c6:bd:71:f9:b7:0d:1e:c2:89:d7:af:62:c1:25:de:
         68:12:83:de:90:6e:5f:cb:53:ba:26:cd:bf:2a:65:58:9b:15:
         2b:42:7b:2e:b2:e0:73:a2:1f:ea:14:53:d7:89:a6:b6:7c:54:
         f2:06:88:fc:db:db:91:da:92:81:eb:b1:cd:96:85:30:34:cd:
         b2:32:3b:7e:1a:b2:40:28:74:38:b0:83:be:96:a4:3b:80:fa:
         f9:4e:a4:22:d0:fd:39:c7:82:23:34:70:cb:fe:3b:84:e2:ab:
         0c:39:2d:c5:1f:38:c8:49:98:46:46:98:c1:28:0d:e3:04:ac:
         71:93:bb:bf:a9:8e:11:a7:fe:ed:5c:a3:fa:1b:eb:6a:e9:72:
         03:ef:44:dc:f7:bd:b9:f3:78:a3:15:35:54:9c:30:ff:0b:64:
         f0:8b:44:f5:a3:2b:5e:63:b5:04:a6:0e:a0:08:58:bb:e7:ea:
         a9:70:39:5f:5e:d6:3a:7a:25:ea:1b:67:74:f9:88:24:0b:8b:
         ca:da:0c:90:87:bd:65:aa:62:2a:87:7d:6a:bc:e0:4e:80:6c:
         42:1e:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:39 2025 by rpki-client