Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa
File:                     2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa (raw, json)
Hash identifier:          d+ExNqXzKqhPHgiA5NAy75XpRV+/BPooKpK8/hdffSk=
Subject key identifier:   68:0A:3D:C3:E9:12:DC:56:75:26:A1:95:A0:1E:2A:D2:FC:BF:88:C7
Certificate issuer:       /CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
Certificate serial:       010D0C9F4328584ABD4B75DF5910CBF909BD5180
Authority key identifier: 43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     10439
IP address blocks:        135.84.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:75:df:59:10:cb:f9:09:bd:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=77bdc3f6-f031-4eba-a417-344b4d8daedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:f3:73:88:ac:18:99:e4:12:8b:af:d3:1c:
                    7a:3e:39:e6:11:09:13:7f:32:a4:f3:d6:26:34:9c:
                    4f:5a:5a:25:07:5f:f8:31:67:38:f8:3f:e4:c3:37:
                    40:7b:06:b0:42:d7:61:63:3a:a8:48:ee:f4:b8:0d:
                    35:31:78:98:dc:c8:08:16:58:d6:99:9b:70:f0:13:
                    71:83:bb:49:c8:85:e5:1f:7f:7a:e2:a4:d7:cb:6d:
                    21:b9:cf:67:57:82:70:7e:12:ba:b3:ef:5c:df:40:
                    ef:f1:9d:9c:82:d4:b2:4d:0c:b6:0d:83:ad:f5:17:
                    fa:65:a8:7f:06:cb:f1:f3:56:fb:58:44:26:b7:93:
                    c1:a5:9c:ea:eb:c8:e5:04:00:06:7e:ab:a1:81:33:
                    2e:7b:84:ba:a6:eb:75:43:50:a6:98:fe:50:b4:2a:
                    1a:b5:6b:c9:e1:d3:b3:ad:d7:fb:39:c8:b8:77:31:
                    83:fd:78:fe:75:7c:e5:bd:f4:d1:74:5b:f5:65:4a:
                    41:23:5e:ef:9d:95:f0:ee:cc:eb:4c:22:e4:c6:ff:
                    ef:53:17:95:a8:06:7a:29:0f:06:9c:a6:15:42:f6:
                    12:62:13:c3:66:41:f3:bf:31:2d:8b:da:ea:6a:e3:
                    42:f0:1b:97:2d:df:fa:fa:6b:42:ac:05:15:0c:a2:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0A:3D:C3:E9:12:DC:56:75:26:A1:95:A0:1E:2A:D2:FC:BF:88:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl

            X509v3 Authority Key Identifier:
                keyid:43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:16:f5:3f:16:ae:d1:8a:10:21:c6:fe:62:83:4e:95:95:b5:
         cc:48:fa:5a:3e:3e:30:c3:24:3c:56:80:64:02:f9:b1:25:23:
         87:96:b1:b3:45:bb:0e:f1:b4:17:df:c6:81:05:21:23:2d:95:
         18:7c:aa:a6:c5:17:63:8f:85:5c:64:a0:9c:80:3b:31:52:21:
         32:7e:1a:94:6c:e6:13:dd:9d:6e:2e:c5:9b:4b:23:cb:fe:84:
         18:39:da:61:38:0a:3d:70:ac:7d:b2:4f:bf:a6:18:ad:ae:de:
         af:4c:d4:c1:f2:71:4d:3b:ba:3d:a3:78:09:94:20:fc:b4:4f:
         4d:11:b3:e2:30:e6:bc:d8:7d:17:74:48:02:54:1f:e2:66:c3:
         7c:ff:27:44:7e:f1:f3:b1:82:62:04:95:b9:86:fa:14:76:91:
         5a:04:1b:c7:3c:f8:b8:60:b4:34:3f:9e:2a:0e:9a:58:89:5d:
         58:90:60:0e:b5:c1:3f:1a:bf:59:aa:e9:11:e3:d3:66:13:f7:
         fd:26:00:1f:c4:4b:58:d6:dd:1a:31:88:69:e9:7d:9a:4f:82:
         e3:cb:fa:e2:bf:3e:c6:b7:b2:c5:65:ff:ad:4e:96:cc:b1:56:
         8a:be:d3:4a:07:c6:0a:c8:b6:f2:8e:25:31:0b:fd:b7:7b:39:
         9b:76:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:54 2025 by rpki-client