Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa
File:                     87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa (raw, json)
Hash identifier:          xkirtdV4oPBEiyDvEP7lDerOWLBcL+7z34ShhlMTE2I=
Subject key identifier:   AE:7C:69:38:98:7C:4C:C1:28:58:42:5A:97:86:EC:87:F1:ED:E5:42
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584E4C5489705E8FE72E2F4FD140
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     4181
IP address blocks:        135.131.0.0/16 maxlen: 24
                          135.134.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:89:70:5e:8f:e7:2e:2f:4f:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=600d141c-47ff-4a26-abda-7bfd2da7e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:a7:b8:23:86:e1:64:29:26:7a:85:f1:7c:
                    32:b0:af:81:07:59:0d:46:3f:a0:d7:53:33:b7:cc:
                    74:17:17:69:72:e0:19:42:9b:45:1a:36:70:c5:06:
                    19:e4:74:58:16:44:df:09:34:73:42:29:31:c4:a6:
                    3d:72:97:d1:a2:0e:4b:88:65:37:b8:4d:c5:7b:35:
                    03:e4:e7:f0:3a:a6:7f:43:9a:6d:f6:c6:87:93:dd:
                    bd:2e:dc:c9:7d:b0:41:ae:5d:0e:04:18:25:0b:e6:
                    a4:8d:03:56:b9:f6:09:bd:b4:ca:3a:33:c6:88:a1:
                    d1:c2:4b:82:3a:95:5f:4e:4c:57:3b:f9:10:17:01:
                    9b:95:ea:40:5b:18:87:df:85:e7:7f:c8:65:f6:db:
                    a1:b9:9f:e5:82:bb:7b:eb:97:87:70:70:5c:73:c1:
                    49:30:2d:4a:c9:50:05:4c:ee:36:a1:0e:49:30:53:
                    fc:33:5d:70:62:e7:d1:8c:29:24:43:56:87:34:e3:
                    f9:c6:ab:9e:d5:ae:02:48:d6:ae:96:ab:a1:b0:a3:
                    4b:29:fd:f5:18:01:a4:23:0d:84:ca:9f:41:5d:d0:
                    b7:03:69:ed:af:b2:39:ea:43:2d:cf:97:a9:91:19:
                    33:2f:6a:f1:be:05:88:6f:9d:23:27:75:08:30:15:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7C:69:38:98:7C:4C:C1:28:58:42:5A:97:86:EC:87:F1:ED:E5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.131.0.0/16
                  135.134.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:10:82:23:a5:cc:55:b3:f9:e7:2d:e1:56:2e:88:86:ca:
         a2:e3:1d:f7:e0:48:c8:9a:f3:90:c1:4f:94:57:bf:ac:e8:62:
         58:0e:46:0f:a0:71:a5:b1:89:3c:ea:86:be:db:f6:f5:5f:3e:
         6d:04:9f:86:ac:23:82:62:c1:38:4e:0d:9b:19:11:81:84:9e:
         7c:90:83:9b:e2:ee:5e:76:d7:1a:55:a9:58:7d:77:e8:c7:de:
         0e:b8:d4:e4:e6:4d:3a:23:98:bb:2f:7a:1a:3e:a8:b2:69:cb:
         aa:5b:89:04:ef:ce:81:22:03:ba:e1:2b:8f:05:73:ef:58:3c:
         d3:b3:39:83:67:4c:29:c9:97:0e:fc:44:44:c1:ad:35:07:40:
         10:18:ad:db:8b:e6:e1:2d:32:47:6f:4b:e1:43:8a:8f:08:f0:
         c8:0b:a1:4e:b0:78:a6:de:e4:69:e6:b5:7d:e6:03:a7:07:1f:
         cf:3a:d4:e2:b1:82:9d:b1:fa:4f:f4:c9:c3:26:7c:ad:9a:fd:
         97:cd:f3:1a:79:7c:68:9e:af:8f:32:46:fa:81:63:c7:bd:e5:
         a2:1d:1f:dc:98:69:25:de:a3:24:94:18:dd:7b:af:28:f6:71:
         d5:61:5a:7a:55:9f:5c:f7:18:56:d5:6a:3d:d9:25:11:a1:f7:
         b6:93:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:39 2026 by rpki-client