Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/c9329c19-a80c-3400-b6db-1fab96f612ca.roa
File:                     c9329c19-a80c-3400-b6db-1fab96f612ca.roa (raw, json)
Hash identifier:          ZU3xrxz2WNNpFeVRt0zTtbf9YQmY0eINZQ2RArAkQE8=
Subject key identifier:   D7:63:8B:94:25:36:B4:66:57:EA:87:45:7A:1A:E8:93:54:93:CD:3B
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584EA7871FA353E99581B0FD4008
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/c9329c19-a80c-3400-b6db-1fab96f612ca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13445
IP address blocks:        135.84.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:1f:a3:53:e9:95:81:b0:fd:40:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4a814e6f-c52a-421a-9191-c20e41eb8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:f6:39:60:59:06:85:ad:79:78:2d:78:f8:
                    ed:de:02:cd:2f:67:0d:d7:1f:6f:be:e3:e8:72:c9:
                    04:0e:c1:39:e6:ee:1d:b9:1b:48:9e:23:62:d3:61:
                    6a:6b:71:26:40:1d:3b:bb:65:a5:d8:68:06:ec:48:
                    11:56:b3:ae:75:20:31:c0:be:88:e2:09:78:6a:a2:
                    fd:82:8c:f7:38:6f:98:f0:e1:05:9f:bd:d9:df:89:
                    b6:e3:78:6a:26:8a:f2:f0:76:58:cf:c7:9e:ee:e2:
                    8a:36:a8:5c:65:ca:54:5e:b0:b7:1c:c3:61:f4:d3:
                    22:51:4a:54:d5:a3:e2:d1:ac:6e:13:99:a6:40:f5:
                    33:43:30:97:33:f3:70:35:8f:47:0a:28:69:c3:f2:
                    3d:be:ab:06:0c:1b:ad:f5:ef:e8:65:7b:4b:9f:0f:
                    61:bb:5e:ce:6b:24:ba:46:c6:f3:df:a8:d6:a0:58:
                    8a:ab:aa:08:eb:89:41:fa:dd:1f:cc:93:5c:c2:80:
                    ec:ed:d0:d7:c7:26:74:af:0f:ce:1c:34:eb:94:84:
                    49:fd:8d:09:be:d1:1f:c9:20:17:83:f0:20:d2:ab:
                    78:f5:d2:61:d7:f1:41:92:49:b1:b6:00:15:4f:ea:
                    e7:a5:40:67:c4:89:e0:97:59:eb:3c:d1:8c:18:5f:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:63:8B:94:25:36:B4:66:57:EA:87:45:7A:1A:E8:93:54:93:CD:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/c9329c19-a80c-3400-b6db-1fab96f612ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:19:1c:51:0a:27:f3:fe:12:a3:ec:37:a3:79:30:b0:3e:61:
         2f:8a:52:08:b1:d7:b3:3a:02:12:6c:cd:e7:f3:b8:2d:53:f1:
         81:75:a9:4a:9a:82:9d:49:e6:c8:da:b2:e2:5a:01:dd:a4:bf:
         4e:e6:02:f3:7e:2a:21:8a:77:2d:98:3e:3a:ec:34:82:71:a4:
         b3:16:62:03:cf:da:fd:b1:35:b9:6a:bb:69:23:f3:26:20:55:
         fe:e0:0b:57:24:f3:82:cb:9d:ea:13:50:4c:ad:97:45:15:4c:
         94:7c:3b:35:6a:ae:29:2c:33:69:d2:e7:e6:5a:03:9c:80:3c:
         d1:6b:62:98:27:23:42:0c:2a:bb:60:6a:da:95:5a:0e:99:1d:
         18:c4:51:77:1b:68:89:63:30:5a:8a:5a:24:cb:6c:3f:87:3f:
         fb:56:8b:0f:9a:12:71:50:a7:26:c4:16:af:c1:7f:4c:75:31:
         9c:e3:84:e3:96:d2:d4:79:ca:be:44:cd:b3:03:ac:9c:97:e3:
         79:b8:67:fe:f1:f6:f9:3b:f6:c8:3a:4f:ed:92:71:02:65:e5:
         d7:78:97:c1:bf:b6:01:23:ca:3c:a1:64:c2:a4:50:5b:51:6c:
         0d:59:87:02:43:18:60:46:22:e8:c6:ea:76:ae:03:cb:67:1b:
         e9:77:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:35:18 2026 by rpki-client