Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa
File:                     f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa (raw, json)
Hash identifier:          TGzIY2It3Cl+eaUAWMvz9ieXd8qgfc4EFgSTBCzWmG8=
Subject key identifier:   90:3A:AA:FA:BE:15:F9:B0:77:99:64:5C:F0:8E:E5:EC:49:A1:B1:78
Certificate issuer:       /CN=dbabdbb0-88ca-4067-bc81-7b081429280e
Certificate serial:       010D0C9F4328584C8A0C81EB53E694C70596DB80
Authority key identifier: 0F:11:95:F3:FA:28:FE:C1:D5:34:00:A6:EF:9C:4A:68:E6:C7:AF:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        135.84.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/dbabdbb0-88ca-4067-bc81-7b081429280e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/dbabdbb0-88ca-4067-bc81-7b081429280e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:81:eb:53:e6:94:c7:05:96:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbabdbb0-88ca-4067-bc81-7b081429280e
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=8f121b25-f198-4a9d-afb9-099edeaad584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:35:f2:86:0c:68:84:f7:f6:1d:08:28:67:
                    b1:44:07:b1:21:d4:5d:9e:6e:6f:d1:8f:6f:79:a6:
                    95:78:43:4f:59:d4:ce:b8:96:61:de:f9:b1:e1:19:
                    cb:33:fa:d8:20:38:fd:38:be:01:c1:49:6d:88:61:
                    f5:1f:97:7f:15:03:41:aa:2f:c4:8c:1d:59:1e:fb:
                    d1:2e:c7:7c:c7:fe:bf:0a:85:7c:8b:8f:a0:5c:56:
                    cd:09:fa:11:8d:ff:87:8b:98:07:ff:67:30:8c:03:
                    51:13:d8:d5:75:fb:b2:9c:27:23:b1:51:9e:72:b9:
                    93:1b:d9:0f:38:af:bd:a5:49:46:30:af:e1:48:a4:
                    a7:4b:98:ce:4d:b9:32:7d:85:e6:14:2b:ad:4e:a8:
                    2f:c6:bf:b3:55:d6:a8:7b:d1:5b:52:39:75:62:35:
                    dd:19:00:e8:08:bf:5b:38:76:2e:c1:e6:c7:31:84:
                    89:20:f1:e3:9d:56:a5:e9:5e:71:15:7d:c9:d0:8c:
                    b1:a7:35:92:90:6d:f9:83:a2:23:f6:39:86:ae:8d:
                    8e:7e:c7:88:32:d1:71:ba:8d:dd:19:cc:92:3d:bd:
                    5f:ef:06:42:c7:ee:20:1f:1f:5a:eb:bd:28:43:78:
                    8c:85:50:3f:9f:56:55:a8:23:67:47:8f:7d:17:f3:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3A:AA:FA:BE:15:F9:B0:77:99:64:5C:F0:8E:E5:EC:49:A1:B1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/f50683bd-eab4-339c-b47e-7e8f7e7fb204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e/dbabdbb0-88ca-4067-bc81-7b081429280e.crl

            X509v3 Authority Key Identifier:
                keyid:0F:11:95:F3:FA:28:FE:C1:D5:34:00:A6:EF:9C:4A:68:E6:C7:AF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dbabdbb0-88ca-4067-bc81-7b081429280e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:80:9b:93:f5:95:a2:13:7c:d7:c8:ce:61:72:aa:34:85:
         73:bc:08:c6:c2:90:98:b9:b1:9b:b4:61:c2:74:3c:5b:98:39:
         e3:71:aa:36:3b:8d:fe:cd:0d:d7:0e:3b:73:e6:1c:df:af:17:
         fe:cf:47:e7:d1:2d:ab:bc:7b:2a:26:cb:52:34:9b:f9:61:68:
         c5:38:e4:13:fc:3f:81:f8:05:97:b2:8a:b9:98:43:2a:67:1b:
         a6:d5:47:25:a1:61:7f:96:55:e4:3b:19:e2:91:e3:8e:b6:05:
         ab:70:24:31:6c:e1:f0:75:88:0f:07:56:b5:6f:36:31:86:84:
         35:71:d1:98:49:2b:aa:b2:13:19:bd:25:38:54:74:22:af:bf:
         a0:87:fd:f2:ee:c3:9e:44:ba:0d:b9:7c:45:e2:d6:fa:a0:c5:
         f8:75:26:db:c0:57:d4:f1:4f:09:83:6b:2d:51:bf:b7:db:22:
         33:5c:23:26:34:8e:1c:30:a4:65:7a:6d:79:96:c1:19:15:8c:
         21:97:4e:ed:40:e1:52:f1:24:45:fd:8e:f8:1a:35:35:f3:5e:
         96:42:3c:2d:2a:ca:3d:37:19:d6:0c:e6:48:f6:6c:51:80:56:
         60:f8:f1:64:2e:fe:03:e5:5f:54:05:1f:ea:f9:9d:5a:3b:04:
         0e:5b:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:29 2026 by rpki-client