Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f62a9fd-35fa-3563-82f0-4cdc05b7e529.roa
File:                     9f62a9fd-35fa-3563-82f0-4cdc05b7e529.roa (raw, json)
Hash identifier:          YweALs+YK3RXZ5l32DmEPmifGvzJ83x40f7b5dne71Q=
Subject key identifier:   0A:E0:6F:E5:89:0E:4C:28:A0:6E:83:30:4D:C3:D6:C2:9B:28:DA:76
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EA4450CDEE7CB2E612A235C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f62a9fd-35fa-3563-82f0-4cdc05b7e529.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     54253
IP address blocks:        134.185.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0c:de:e7:cb:2e:61:2a:23:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=a35b85df-da7e-4533-a253-dbe24e52caf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:4a:59:f0:da:00:11:bd:86:ff:eb:6e:91:
                    af:2c:b1:6d:1f:21:54:08:76:5d:03:0e:f2:e7:6b:
                    cf:de:48:13:2a:12:6c:c2:50:4a:a5:69:91:6f:5f:
                    97:27:a9:cb:8d:b8:60:bd:7e:da:33:87:0c:d4:25:
                    3f:48:f1:ce:3b:dd:5e:7d:60:63:cd:aa:f0:8f:aa:
                    9e:d0:6a:69:b6:a0:50:3a:1b:99:4b:ac:8c:52:29:
                    10:0a:ef:44:ea:7e:fd:50:ed:e7:a9:62:04:93:d9:
                    7e:ec:fe:4d:23:29:8a:e4:19:a2:af:81:f4:8a:c4:
                    63:f3:36:0a:25:06:cf:c4:43:70:b4:a1:bc:b6:3a:
                    ec:a4:01:9c:13:f2:ac:56:7f:75:27:80:f6:57:7a:
                    f5:63:29:26:54:25:36:2e:59:66:79:4e:0a:61:49:
                    79:f5:0d:94:50:b8:30:3a:e7:04:ae:e9:c8:01:c3:
                    54:c4:b3:05:fe:e1:ab:81:e1:a0:a3:e1:44:8f:c0:
                    a3:8e:fa:5c:1e:56:5e:65:03:b1:06:84:11:d0:b3:
                    b1:1e:a1:71:ee:72:73:34:a4:73:ff:9f:eb:ed:08:
                    79:57:5b:be:9c:ff:26:32:e0:c4:60:fe:30:31:c5:
                    73:1c:69:bd:26:64:74:54:3d:38:d0:b0:c7:86:ff:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E0:6F:E5:89:0E:4C:28:A0:6E:83:30:4D:C3:D6:C2:9B:28:DA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f62a9fd-35fa-3563-82f0-4cdc05b7e529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.185.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:41:d8:4b:a9:50:e7:c4:82:6e:46:06:82:be:c8:ef:76:53:
         4b:d1:42:23:c5:bb:2c:87:bb:e8:60:fd:d5:e8:a8:17:02:38:
         de:ed:d4:78:7d:aa:be:df:c6:01:e3:b2:6d:9e:61:93:d3:37:
         3a:26:8b:c5:44:bc:27:c6:70:df:39:66:5f:8e:7c:b9:34:aa:
         25:63:5d:7f:76:5d:2d:e2:d0:a4:79:9f:dc:ff:7f:62:58:46:
         64:60:46:d6:f1:eb:eb:b9:e2:ff:c6:8e:16:d7:c2:47:84:ca:
         54:f9:3f:58:fd:66:a4:f0:41:17:36:02:11:de:97:75:e0:a0:
         9d:29:0b:81:84:d2:cb:f4:21:ee:b7:27:d2:75:07:93:05:b2:
         c1:c7:e4:05:9e:a5:c5:26:83:cb:f7:b7:4f:e6:0f:35:9f:01:
         3a:f1:68:8c:0c:65:dc:88:64:66:2f:d0:14:6c:cb:d4:e8:e2:
         9c:4d:45:85:b8:c3:84:f4:61:25:f3:bf:27:c9:88:5a:95:50:
         2e:2f:b0:2d:25:6f:85:c7:e2:1d:3d:81:67:b9:52:7c:98:82:
         f4:c5:76:5c:8b:e1:0a:a6:9d:29:37:b4:d1:41:2c:97:ab:6b:
         d7:a7:03:47:d8:99:ba:91:d8:fd:cf:96:6e:f3:36:68:e1:5d:
         c6:94:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:09 2026 by rpki-client