Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e09ae028-1896-3d05-a63e-8637d4dbb674.roa
File:                     e09ae028-1896-3d05-a63e-8637d4dbb674.roa (raw, json)
Hash identifier:          FU4Y/t1yqR6WNT2zlmPZxXtgQN0R4T3hspH4hF6utJ0=
Subject key identifier:   15:69:1A:38:39:BE:DD:DF:55:C3:63:E3:41:60:4A:E1:46:EA:66:B4
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584DC29AFDCD48BE752BADE9E400
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e09ae028-1896-3d05-a63e-8637d4dbb674.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     4540
IP address blocks:        135.136.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fd:cd:48:be:75:2b:ad:e9:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=e0950015-a89b-4100-aec2-f005394d6a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:7e:c5:d0:47:66:e6:f8:d8:8b:23:7c:8b:
                    d5:70:44:f9:fe:76:fa:97:a2:f8:47:dc:b4:67:ea:
                    cb:ba:f1:e5:65:a6:13:94:50:d7:90:dd:67:2b:b7:
                    fe:62:b1:8b:9d:a6:85:db:fe:0f:bb:67:27:3c:98:
                    e5:82:c8:5b:5a:ac:be:96:f5:b8:64:44:12:c8:d9:
                    3c:f7:78:88:86:b3:49:42:1e:c1:f0:d4:62:f6:62:
                    5a:6f:16:52:5d:ed:3e:0d:9e:fb:4e:7e:cf:9e:f0:
                    c7:d5:c1:75:df:2f:f5:01:99:95:29:6a:bb:07:b9:
                    10:cd:e8:93:73:14:cf:b3:f0:b4:d0:dc:8a:fa:6d:
                    05:de:65:5d:13:52:ae:09:d4:d6:d6:f6:7c:36:ec:
                    af:30:43:4d:bd:e9:84:29:fa:20:3b:79:17:50:fd:
                    c0:10:72:50:75:d8:3c:93:22:2b:19:1d:0c:eb:6c:
                    d1:b2:c6:bb:8f:ad:88:8d:81:f1:f1:ca:b1:36:e2:
                    f1:f6:96:b4:46:b0:2c:77:b0:b7:26:03:ec:67:11:
                    b7:e1:a0:ca:7a:d7:7c:21:e0:13:93:cf:68:85:58:
                    a7:5d:56:62:53:1a:07:59:d7:60:4e:d0:af:d1:7c:
                    b8:b6:00:5e:71:70:12:fc:5b:a7:64:41:8a:ef:d4:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:1A:38:39:BE:DD:DF:55:C3:63:E3:41:60:4A:E1:46:EA:66:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e09ae028-1896-3d05-a63e-8637d4dbb674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.136.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:67:09:55:6a:f9:6d:25:47:fa:b3:09:35:cf:4a:e0:0d:ce:
         65:53:24:76:76:ef:5c:73:23:b2:14:1f:1d:cd:4e:59:8c:d8:
         16:d7:53:04:ac:74:72:b0:f0:c5:a8:d5:6b:e3:aa:d1:a6:17:
         6a:ef:1d:19:5d:29:82:05:c4:64:0c:29:d9:ed:da:1f:16:46:
         b0:9a:10:2c:eb:3f:32:8a:33:60:dd:23:ef:70:e0:d5:4f:41:
         f9:27:01:7a:2f:12:66:66:17:a2:85:f3:bb:3c:3d:91:c9:e0:
         88:f4:75:80:0d:1e:c7:e0:a2:1a:54:9a:13:06:22:e4:77:2e:
         c2:91:69:b9:26:51:60:d9:f7:80:11:1e:d9:ca:1a:f7:31:0b:
         1a:fb:29:fe:b8:12:6e:17:9a:df:1f:cb:a9:3c:66:1d:13:18:
         d9:ca:77:5f:6f:9b:77:79:2d:71:8c:54:14:b9:65:40:ef:91:
         80:fa:01:11:54:2c:ee:ac:24:09:4c:22:6d:93:95:91:35:5e:
         d9:3e:f9:53:69:23:8e:93:bd:36:45:f9:ca:0c:23:38:8c:33:
         78:76:f8:87:a4:da:3b:0e:8d:a6:58:43:18:ee:30:37:b1:b9:
         eb:be:d0:47:1c:6f:5b:d5:8d:bc:ea:c4:e6:03:6e:6a:60:af:
         2c:72:77:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:31 2026 by rpki-client