Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
File:                     b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa (raw, json)
Hash identifier:          g/9fhyARcAqH3KbM8tkhrKSZmUwDpoByFMaIjsZOfv0=
Subject key identifier:   90:0B:83:02:C5:0B:78:90:15:88:16:7C:07:72:9F:0B:14:D0:A9:EF
Certificate issuer:       /CN=15164b64-0a30-43c7-b7d1-dda370c303f8
Certificate serial:       010D0C9F4328584E97B507BB9093569BFDAF3580
Authority key identifier: 60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     11135
IP address blocks:        199.102.136.0/21 maxlen: 24
                          2607:d9c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:07:bb:90:93:56:9b:fd:af:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15164b64-0a30-43c7-b7d1-dda370c303f8
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=ea6bcddd-07ff-450c-83ab-35d2595eaf2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:7c:39:2d:4f:0e:bd:d6:e1:b3:40:7b:84:
                    d0:59:9a:d5:ad:83:60:ac:79:dd:e3:35:8b:b7:9e:
                    d6:75:18:3d:56:55:83:2f:3e:43:c9:ec:5c:88:07:
                    80:6c:a6:51:0f:d4:6d:5a:33:22:0d:59:78:11:f4:
                    f3:5c:86:08:fb:3c:94:9d:7d:eb:23:0b:a0:cd:25:
                    b8:9a:d0:9b:35:d8:29:38:63:ae:1d:d8:79:36:61:
                    ac:e7:52:02:ad:28:c0:9f:3e:5f:48:c7:ca:03:e8:
                    1d:bc:78:1d:1a:c8:6e:fc:28:97:0d:86:2e:9d:71:
                    70:aa:a5:fe:0c:70:e5:4a:31:a5:b8:a0:b0:9d:f5:
                    b3:eb:9c:78:22:3a:f8:76:7e:fe:4d:88:37:2e:be:
                    26:0d:8c:3c:74:77:98:6a:22:65:92:86:57:bb:98:
                    c4:c2:6b:7f:54:d5:9d:c9:6e:5b:1a:1b:7f:bb:8e:
                    5e:60:cb:df:68:74:89:b5:9d:44:a7:74:d5:50:98:
                    a8:74:60:e1:fb:57:6d:79:6a:95:96:a1:40:c5:92:
                    d3:2f:fc:cf:4c:00:33:69:22:12:6a:be:d2:5b:2f:
                    e3:03:74:fb:fc:b9:dd:4b:bd:ec:81:38:46:ba:ec:
                    93:61:26:ee:f8:dc:0f:88:62:50:17:42:47:29:66:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0B:83:02:C5:0B:78:90:15:88:16:7C:07:72:9F:0B:14:D0:A9:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl

            X509v3 Authority Key Identifier:
                keyid:60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.136.0/21
                IPv6:
                  2607:d9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:03:f8:30:36:a1:5c:01:d5:0c:54:e6:5c:b2:90:ef:fc:
         4c:f7:99:07:6e:ee:ae:53:aa:c4:e7:f3:cb:16:eb:91:4c:e0:
         dc:d9:b3:06:dc:06:09:ce:92:a4:5e:3f:e6:7c:84:c9:ed:ac:
         df:4a:30:55:40:d8:03:d0:35:24:ce:d0:c0:c8:e2:23:c1:27:
         0f:53:2d:31:81:8b:05:72:2d:05:b7:70:fe:4e:0d:f1:24:a0:
         3f:bf:92:75:36:de:ef:fe:ea:b3:91:2c:0a:20:aa:40:1a:0b:
         2b:15:3e:3a:80:20:31:04:5a:fa:5c:54:a1:2d:06:34:f9:e2:
         ad:f6:07:db:3f:a7:7c:72:56:2c:5c:c8:1a:bc:50:a2:20:4e:
         aa:57:05:32:21:43:03:77:16:71:07:4d:99:ca:d3:0f:b1:f4:
         9b:e6:a4:fe:34:0d:b3:82:95:b0:2e:08:70:3c:dc:f4:0b:33:
         30:9a:eb:56:89:05:69:80:e2:27:a4:d0:19:fb:05:f7:47:f9:
         f9:01:b3:10:4e:cb:4e:58:5b:e1:76:0f:60:ec:ec:1a:29:ee:
         8d:b0:d1:67:73:58:3b:50:c1:59:f7:33:2a:96:0b:89:5e:3e:
         64:16:ff:c5:73:ea:cf:83:22:a5:39:75:86:08:a6:cf:9c:92:
         ac:5c:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:56 2026 by rpki-client