Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/a1c30eba-75e6-3657-8455-6a21a758f0ee.roa
File:                     a1c30eba-75e6-3657-8455-6a21a758f0ee.roa (raw, json)
Hash identifier:          3vkHpPwwl8WBCTbT+hwrZb5Lfbekxw9SATaVWO56eS4=
Subject key identifier:   A5:90:F0:FF:68:62:70:57:32:D0:7E:A0:DF:5F:10:D9:42:E5:A5:B3
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F4328584E7634E2ED39110F4A2D476E40
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/a1c30eba-75e6-3657-8455-6a21a758f0ee.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     1706
IP address blocks:        150.135.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:e2:ed:39:11:0f:4a:2d:47:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=1ea919a9-b86e-4261-bcfa-c32327029c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:8d:eb:ea:26:18:78:a2:a4:5a:b4:b3:6b:
                    97:7c:9a:0e:56:98:07:ae:b9:c9:ce:c1:ed:75:55:
                    79:d5:61:76:11:b0:95:73:a8:33:8a:3d:c5:f2:d3:
                    33:54:bc:8a:02:e0:47:39:a3:84:bf:1a:dc:d4:df:
                    a5:e5:97:03:8b:71:70:0b:e1:c7:ff:59:48:95:83:
                    bd:21:81:76:77:a9:43:3f:7c:cf:cc:d7:7f:bf:aa:
                    85:c9:92:dc:c0:21:37:9b:5d:22:0a:e9:71:00:c9:
                    ef:a8:d3:e5:e8:0d:a2:dd:19:c7:6c:13:7d:09:50:
                    50:66:c5:48:b7:b5:05:c5:01:b5:a6:8a:58:c9:dc:
                    5f:e3:f4:4b:0d:03:5b:98:13:78:dc:64:d1:c4:cc:
                    ff:0e:8d:44:ce:a6:4c:38:92:98:9b:12:c5:a7:e5:
                    ff:83:aa:15:7e:e3:49:ce:42:3e:77:f9:a0:ef:73:
                    17:9c:63:f4:f0:b4:68:64:0e:c5:be:f5:f8:64:7f:
                    3c:04:0d:eb:3d:a8:4a:b0:58:aa:41:91:62:77:45:
                    82:c4:95:88:f7:4a:b1:21:22:49:a1:9a:ab:3a:4f:
                    91:ec:aa:18:3d:41:44:e3:5c:24:45:03:50:cf:eb:
                    33:5d:01:fe:30:12:c3:5e:9e:cd:1c:5e:d0:14:74:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:90:F0:FF:68:62:70:57:32:D0:7E:A0:DF:5F:10:D9:42:E5:A5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/a1c30eba-75e6-3657-8455-6a21a758f0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d3:2b:9c:23:f4:5a:bb:88:af:fb:36:08:b9:43:ac:08:bc:
         82:ad:ba:93:3c:43:47:9b:4f:26:30:ab:4b:4c:71:0a:15:27:
         fd:db:18:b4:8d:4a:41:cc:d5:3b:83:76:c1:fd:87:c7:89:36:
         4c:25:23:5e:30:0d:de:1e:8a:90:46:2a:06:c3:e2:5f:80:54:
         31:89:13:ab:3e:7f:0a:ac:f0:51:1c:0e:80:29:df:ae:26:cd:
         5f:3e:a3:1a:e9:ba:6b:9d:cc:0f:2e:32:52:73:b1:91:83:33:
         f8:b3:7b:e8:93:eb:f2:37:23:f7:bf:ea:50:75:8a:f9:47:ef:
         40:c9:70:55:7f:47:ed:e1:03:6f:f0:76:e1:ea:bd:ab:ac:91:
         bf:95:43:be:04:d0:48:1d:77:4e:fb:e8:75:0e:e2:1d:9b:19:
         9c:eb:46:da:e8:d8:45:f0:6d:90:ff:f2:e2:e0:8e:d0:15:d9:
         b6:f6:31:c5:87:b3:10:29:31:38:7b:fc:f6:62:9c:db:4e:60:
         e7:fb:7d:6f:5f:eb:f4:5f:cf:d9:89:2d:ba:f3:9a:98:df:d9:
         c8:e3:3c:91:20:ea:fb:65:8d:62:6b:d2:6f:4e:e7:7a:26:b1:
         ee:78:a6:c3:1e:56:e6:46:2a:b6:1e:99:30:de:6b:e4:c6:4f:
         a1:22:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:55:24 2026 by rpki-client