Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
File:                     ae8c8fa6-957c-379d-8e86-602baa8282b0.roa (raw, json)
Hash identifier:          gjkerTDxSVG7NNfCu7dFSX0sVO3u4838KNtJ6mjFdcQ=
Subject key identifier:   9D:98:D2:DC:C5:01:5D:47:02:CF:AA:3C:08:B0:EA:F0:EF:90:DF:00
Certificate issuer:       /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
Certificate serial:       010D0C9F4328584DE150765285D9DD69AB0D4C00
Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        199.4.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:76:52:85:d9:dd:69:ab:0d:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=b9f362c9-50cd-4e63-89c4-dbab73a2f1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:e5:9c:cb:57:de:cf:ce:92:2b:b2:71:3f:
                    e0:93:47:c7:1b:12:63:40:dc:22:14:87:ab:0a:fa:
                    58:e6:62:af:22:6d:df:33:ce:f0:56:41:97:c3:71:
                    5b:7f:62:f6:77:66:09:f8:63:bb:48:c5:14:86:c3:
                    09:77:87:f6:5b:7f:e1:f9:51:d5:3b:3d:dc:28:7d:
                    0c:3d:20:0b:3e:9b:c0:a1:bc:3a:9c:ea:00:00:d6:
                    7e:48:ba:a7:1c:e2:cf:e4:1b:b0:39:a8:76:8f:f7:
                    9b:14:be:fe:07:1d:75:50:6f:b3:2b:d7:aa:86:90:
                    5f:1e:a5:01:82:8d:de:5f:39:39:82:d7:00:ca:45:
                    27:e1:42:4e:28:b4:e4:a5:29:1b:c1:4a:50:0e:32:
                    f6:c4:33:10:c1:49:f0:ef:c9:a5:55:ad:f6:aa:e6:
                    f7:db:ae:db:37:44:95:79:03:84:5c:ff:6a:e4:96:
                    62:9e:90:c5:e5:74:bb:8d:46:d8:87:94:0a:b7:81:
                    41:19:ab:51:2a:ab:8e:eb:ad:34:37:5d:a9:34:cd:
                    5a:94:cc:9f:6f:8a:07:21:d7:ce:e3:45:79:d9:ef:
                    6e:86:33:9f:9e:5f:23:35:03:8e:c5:dc:c9:5b:86:
                    01:c9:ae:20:fe:70:3a:9d:a4:01:41:1a:7d:8e:62:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:98:D2:DC:C5:01:5D:47:02:CF:AA:3C:08:B0:EA:F0:EF:90:DF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl

            X509v3 Authority Key Identifier:
                keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:68:d0:fc:27:59:56:80:b1:9b:ff:ec:73:e2:9a:66:ef:1a:
         1f:7e:6a:27:24:ff:af:08:3a:91:e2:80:dd:2b:1d:b9:6c:2a:
         c1:9b:1f:7f:10:c0:92:f7:f6:fb:4f:3f:2b:ab:c3:f1:6b:80:
         1f:17:d9:51:2e:48:9f:1f:16:93:ff:d4:52:20:e2:8b:de:21:
         85:e9:79:50:fa:f5:b4:b4:27:ee:34:1d:a4:35:25:4a:1f:14:
         47:e0:80:11:28:c2:6d:47:26:00:60:7d:72:cf:b9:e3:f9:73:
         e3:dd:57:50:15:72:df:48:5c:18:79:16:81:23:46:ad:53:f0:
         ca:8d:4a:12:48:09:31:b4:9c:2f:b3:d3:a5:01:c0:1c:ba:7c:
         70:ee:02:87:32:e5:2c:13:d3:38:e6:16:6c:ec:85:5f:52:71:
         2f:88:7e:02:e8:60:2a:5a:87:2b:a4:7d:de:0b:bc:fb:d2:22:
         8f:b0:e0:db:1a:87:23:19:8a:1d:f3:28:63:50:33:0d:bf:d5:
         99:bd:84:98:45:47:75:98:83:fe:56:2a:bf:1d:a3:bd:a9:f8:
         3c:37:41:50:4f:35:fb:12:86:c9:78:1e:d8:e1:6a:cf:26:41:
         e1:3e:47:f1:7e:9b:31:ee:13:4d:19:21:49:8a:74:60:f2:c1:
         88:49:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:46:23 2026 by rpki-client