Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa
File:                     f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa (raw, json)
Hash identifier:          /yIGuEXVliKx0zifJuTqAhWKjQLpRKYVDKMMfflWLho=
Subject key identifier:   74:67:F7:F7:25:59:86:90:FD:6D:72:BE:D2:31:3B:CF:2C:D8:8C:B4
Certificate issuer:       /CN=dbabdbb0-88ca-4067-bc81-7b081429280e
Certificate serial:       010D0C9F4328584BAA97B526FA73BF14AEF77D80
Authority key identifier: 0F:11:95:F3:FA:28:FE:C1:D5:34:00:A6:EF:9C:4A:68:E6:C7:AF:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        135.84.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/dbabdbb0-88ca-4067-bc81-7b081429280e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/dbabdbb0-88ca-4067-bc81-7b081429280e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:b5:26:fa:73:bf:14:ae:f7:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbabdbb0-88ca-4067-bc81-7b081429280e
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=e61dd8d9-8d5a-45b1-8156-f107de1b5faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f4:02:a3:fa:f7:34:d1:85:d2:45:0b:b9:95:
                    37:23:18:62:38:23:d3:5b:6f:73:52:59:62:f7:6f:
                    2c:f2:ac:56:9f:30:4c:70:21:a9:d4:7d:32:d5:2c:
                    02:fd:f8:ac:13:60:11:18:7c:8e:86:24:58:21:0e:
                    0e:44:dd:ff:e6:7c:4e:75:c7:df:74:d9:33:e3:7d:
                    5b:1e:40:16:ad:73:31:3d:ea:44:d0:c0:76:fe:18:
                    5c:36:66:9e:e4:35:1e:b7:6a:19:a0:03:d6:1d:7f:
                    c2:01:1e:74:b9:b6:a0:2a:40:f2:56:ff:01:7e:da:
                    dd:c2:26:05:07:89:5c:66:de:83:2b:06:03:dc:9a:
                    29:91:83:d8:8f:97:4d:cd:29:06:a9:78:1f:59:a8:
                    24:b9:a5:55:50:1a:80:6b:99:ce:93:88:cc:ba:bc:
                    06:4e:3d:b4:73:ba:d9:66:ad:fb:75:b3:65:e6:a1:
                    ae:2f:31:15:fa:de:50:85:cb:9d:4b:8e:63:bf:c0:
                    23:82:27:79:8e:ce:a5:3e:8f:cf:8d:df:1a:f8:54:
                    9c:4b:a1:c9:24:bc:db:e7:9f:18:4a:cc:a0:24:2c:
                    38:04:d9:2e:83:6c:64:8e:2f:64:d9:5c:e0:b1:c8:
                    e9:d4:4e:89:c9:d8:ce:00:a2:e3:ef:df:e2:33:9a:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:67:F7:F7:25:59:86:90:FD:6D:72:BE:D2:31:3B:CF:2C:D8:8C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/dbabdbb0-88ca-4067-bc81-7b081429280e.crl

            X509v3 Authority Key Identifier:
                keyid:0F:11:95:F3:FA:28:FE:C1:D5:34:00:A6:EF:9C:4A:68:E6:C7:AF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:42:00:61:78:09:5d:8c:eb:83:18:13:2f:fd:6e:ef:72:
         76:13:e1:d7:13:1a:d1:f7:d6:69:9a:2c:29:de:07:6e:36:3e:
         1b:23:ef:5b:59:15:7d:dc:4f:11:6d:24:f7:9d:55:8e:fe:c2:
         96:58:c0:eb:2f:f2:22:de:4e:da:c7:e6:47:73:e1:aa:72:16:
         a7:2e:8a:c1:cd:33:40:96:01:c6:51:d8:c6:d3:78:f0:f2:bc:
         17:a6:77:ab:45:47:dd:6d:50:fc:ac:fd:86:00:6c:c4:95:1f:
         d2:87:df:06:7b:51:15:63:a9:ed:87:a3:e9:38:75:98:78:cc:
         8f:5e:0a:d9:a8:54:d8:bd:5a:b0:2e:fd:32:4d:f2:c9:4b:80:
         da:97:46:a9:3b:0b:df:91:94:79:d0:59:56:6c:b1:49:97:c9:
         78:df:10:37:01:ab:06:8f:ff:32:bb:33:cf:fa:6d:b1:17:6b:
         95:37:ad:92:6d:0c:17:a1:c9:4e:74:4c:11:63:46:44:22:f4:
         ed:bd:e9:1d:10:6c:94:8b:7a:23:97:ac:9a:20:14:99:60:b0:
         21:0c:3a:a7:12:af:d5:f2:20:04:45:8c:fc:38:25:cd:aa:75:
         eb:0a:49:80:7b:17:13:c8:3f:aa:2d:7f:cf:33:de:e8:5d:5c:
         3a:46:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:32 2025 by rpki-client