Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa
File:                     cafde11a-c375-36a5-a218-aad0aa1a246b.roa (raw, json)
Hash identifier:          TOqegd48N/qRPdoXhONh9IJscBrdAQC2ciXBENkMh2o=
Subject key identifier:   20:6F:AF:B7:73:1C:F2:2B:24:CD:2D:BC:DB:0C:C2:0C:0B:47:0B:0A
Certificate issuer:       /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Certificate serial:       010D0C9F4328584DC5659479190663C9BB13F080
Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        135.109.194.0/24 maxlen: 24
                          135.109.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:94:79:19:06:63:c9:bb:13:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=c412cf0b-8625-4ac3-a2ea-320376ba3294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:df:48:53:bb:f9:a9:f4:a7:49:11:a5:76:
                    20:50:b6:2d:f4:39:8f:4d:c0:73:4b:bb:7a:fe:42:
                    6b:2e:f6:2a:c9:25:9d:80:ed:5c:26:e3:38:2d:93:
                    01:04:92:cc:74:11:06:1e:72:fb:b0:05:8e:84:23:
                    c7:06:26:bf:f9:79:67:b4:65:e9:15:51:20:f6:b5:
                    5f:c4:8b:97:7c:23:33:d9:7c:4c:72:1c:3c:41:c2:
                    03:2f:96:4c:27:01:98:6b:25:2a:ca:51:68:d3:72:
                    ba:5e:0a:c0:df:f0:53:3f:af:14:70:5b:fa:d0:e5:
                    fd:d0:c0:7c:6a:d8:ea:ff:5e:84:df:b5:69:e6:20:
                    f8:83:c1:ab:67:11:9f:99:6e:0e:8c:7d:a3:b9:8b:
                    54:1f:db:49:9b:f8:72:fe:d1:b1:f7:6d:fb:0c:e4:
                    ec:75:19:5b:53:57:a7:5f:50:d4:05:bb:ff:b3:43:
                    2b:73:56:7c:d8:a6:10:83:da:1c:70:1a:ff:24:6e:
                    cd:47:e5:b0:10:41:ff:ce:80:da:28:54:3c:17:2b:
                    7d:e5:b7:df:56:8a:e5:a6:fc:dc:e4:1b:93:51:72:
                    21:33:60:c3:b3:3a:24:97:a3:ed:57:2c:a3:59:3d:
                    99:9f:5e:7b:97:c1:56:2f:1d:16:ea:c7:1b:f4:fe:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:AF:B7:73:1C:F2:2B:24:CD:2D:BC:DB:0C:C2:0C:0B:47:0B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl

            X509v3 Authority Key Identifier:
                keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.109.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:37:c3:2c:07:dd:53:40:9d:3a:44:9d:73:92:71:a6:3f:
         de:f0:d7:10:4f:a6:73:db:48:aa:7a:0c:ba:0e:cd:a1:bb:39:
         11:31:5e:fc:f1:2a:0a:69:f6:97:fe:6f:9e:b6:42:cf:ad:1a:
         67:28:1f:00:25:9e:51:4b:ad:0b:b9:44:4f:09:d4:83:2f:bc:
         49:2a:72:02:94:52:af:25:31:64:20:50:58:ff:c7:47:7e:25:
         2f:36:db:3c:87:0c:50:a1:b1:5b:eb:da:20:5c:b7:6f:08:2b:
         80:6a:db:26:85:c8:1e:c2:ae:7c:85:60:ef:5b:a7:c4:c1:01:
         98:bc:99:bf:a5:fe:86:52:11:ad:53:78:1a:4a:af:ec:9d:0a:
         69:39:2a:f2:42:31:19:52:7d:8f:ac:4e:c5:b4:18:19:92:6b:
         41:f1:c2:73:73:71:7b:03:7e:fa:2b:7c:4c:68:29:48:13:92:
         65:e9:ca:44:1b:ba:1a:0c:f4:27:75:5d:ed:f0:1e:d7:0b:f2:
         2d:85:23:8f:c5:38:26:07:28:96:69:0b:a0:52:1e:af:5f:6d:
         a3:b0:15:5a:fb:d4:4a:7d:68:67:7b:7d:b0:6c:8e:13:55:89:
         77:75:8b:35:49:be:02:03:cd:38:ca:7c:0e:da:38:a7:28:f0:
         cb:70:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:27:21 2026 by rpki-client