Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/6c258969-e635-34cc-b2e8-323087062bda.roa
File:                     6c258969-e635-34cc-b2e8-323087062bda.roa (raw, json)
Hash identifier:          0R3RXfx0/4Nb+uZxG2Fv+V3rC7qW1lQBT6zs/HRZAHk=
Subject key identifier:   79:8E:87:FB:37:34:90:F2:ED:6C:A7:F4:34:87:E0:3B:D1:08:02:6D
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584DC29AFDD8A89C70918D266E80
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/6c258969-e635-34cc-b2e8-323087062bda.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     4540
IP address blocks:        135.136.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fd:d8:a8:9c:70:91:8d:26:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=0e587c8f-1e63-45fc-9d45-87d8e870a0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:d0:1d:b6:08:50:01:67:14:0a:03:f1:18:
                    33:a0:97:04:db:8d:ea:5a:0e:01:a4:49:a2:09:d9:
                    e2:68:81:eb:db:09:1a:b4:28:d7:a2:e0:8e:9a:49:
                    cf:e4:28:4f:01:21:f8:60:6a:e3:f3:3f:b0:96:e8:
                    cd:8e:cb:bc:ef:7a:89:dc:db:64:55:1e:40:16:74:
                    6a:e4:f2:12:b9:45:57:fb:7b:d4:28:a7:64:c4:ed:
                    7b:38:19:94:89:00:0e:f7:5f:c5:f1:82:1d:7b:b5:
                    44:df:ed:78:63:64:a1:be:92:50:42:d1:f1:13:35:
                    d7:e3:37:44:b7:14:53:ac:15:74:06:e3:12:d6:32:
                    61:80:1e:87:e7:f1:eb:38:00:80:d0:22:a1:d8:8d:
                    3b:b1:df:0f:ca:b4:7f:ac:3f:52:b2:12:94:76:9b:
                    b9:c7:7e:83:5a:53:c1:ce:a4:ac:cc:e6:37:f5:a6:
                    b0:4c:fd:98:d6:4a:49:cb:59:e8:7f:0c:88:46:63:
                    68:dd:02:05:d4:95:af:00:8b:88:0d:76:4b:62:ca:
                    3e:40:74:c2:ad:b8:af:b8:5c:80:64:8d:6e:0c:3c:
                    ef:37:12:79:6c:ed:c4:5e:ab:cc:03:f3:fe:e3:38:
                    fc:83:f6:bc:c8:22:08:23:24:47:81:67:e9:38:c6:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8E:87:FB:37:34:90:F2:ED:6C:A7:F4:34:87:E0:3B:D1:08:02:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/6c258969-e635-34cc-b2e8-323087062bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.136.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:68:9f:6d:35:2d:d2:f3:2a:f1:fa:b0:61:8a:e5:37:3d:94:
         21:fa:97:e6:85:49:0d:68:af:af:7e:fd:87:58:16:6b:e2:7a:
         23:41:66:b8:90:34:e9:11:38:8d:0e:cc:60:5a:1a:24:37:2a:
         3f:1e:f3:53:43:a7:4d:3f:ae:a5:4b:a1:4c:44:07:31:aa:13:
         3a:6d:c6:7e:b9:b4:0f:45:bd:f5:d1:df:8f:92:4e:1c:3c:c1:
         b0:7a:c3:b5:b4:6c:9a:51:9c:63:b0:bb:eb:b3:8d:8d:d6:4f:
         10:24:24:94:a3:d4:97:ee:6a:c3:7a:d1:b5:7e:c8:7f:0c:f2:
         8c:b5:11:9e:9d:de:8f:4d:ce:23:4a:35:a2:10:b1:77:f5:13:
         2e:a5:25:c0:70:08:89:62:32:84:b9:0d:13:31:f3:b7:a6:08:
         57:10:4a:ac:a7:32:78:0f:4b:70:68:b1:aa:a2:f7:e8:03:0d:
         d4:44:a0:ca:4a:4a:76:32:64:ff:b0:4d:0c:55:e7:47:ee:e9:
         70:9d:5d:f6:62:b6:94:71:ff:54:1d:7c:6c:49:3a:5e:3e:94:
         a5:0c:5d:a6:f0:90:18:0c:67:1d:d9:b7:af:12:4a:4c:eb:91:
         d4:ec:55:5f:b6:c9:4d:fd:f0:6b:d9:cd:90:0a:53:ac:d4:aa:
         5c:6b:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:17 2026 by rpki-client