Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/c9329c19-a80c-3400-b6db-1fab96f612ca.roa
File:                     c9329c19-a80c-3400-b6db-1fab96f612ca.roa (raw, json)
Hash identifier:          cRUhLC8wz0VAr0u5VCkkH/WH56PjOTHSylwHwKHtrEo=
Subject key identifier:   18:0D:9F:4B:79:62:9C:96:EC:7C:A2:2F:34:5A:45:8F:80:75:4F:EC
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584F49890E09D36C734487FFAB00
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/c9329c19-a80c-3400-b6db-1fab96f612ca.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13445
IP address blocks:        135.84.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:0e:09:d3:6c:73:44:87:ff:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0744c224-e520-43de-b65f-e608d8d30a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a7:c2:d7:77:76:4a:37:b9:95:79:eb:af:69:
                    9c:45:a2:58:01:7c:77:d9:8a:2f:e0:85:37:93:31:
                    d1:81:21:4f:0a:24:e8:43:83:d1:98:9f:ce:c0:bf:
                    25:4b:fa:95:da:64:05:cf:6c:24:6e:05:ce:85:d0:
                    1f:e3:b7:3f:df:d2:68:af:9f:49:8d:1a:c6:bc:ea:
                    63:9d:79:e8:b1:26:b9:ec:07:a8:02:7f:c2:0d:79:
                    30:11:6e:58:1c:70:3d:9a:a6:f2:e5:31:17:7f:0e:
                    c8:7a:1e:69:c3:bf:18:1e:f4:eb:54:5f:72:57:13:
                    05:6c:cd:4e:16:7a:ee:56:e3:fa:59:af:28:f9:4f:
                    18:7f:dc:d6:21:41:6c:ca:5d:dc:ef:19:29:4a:e5:
                    2e:2f:12:1b:d9:ab:37:e1:6f:5e:12:85:95:07:ab:
                    cc:fc:07:06:47:32:6c:15:eb:10:5a:24:15:fa:7f:
                    c9:42:3e:78:1d:1c:8f:bb:14:f6:cb:14:31:42:81:
                    49:82:1d:fc:da:0e:70:0f:91:03:9a:f9:7f:bc:c8:
                    99:86:07:51:e9:ad:bb:7e:85:98:bb:84:5f:00:2e:
                    21:da:36:7a:9c:46:97:1b:f8:a5:d8:45:cf:75:c5:
                    61:d7:5f:9a:ef:f7:49:46:a1:cb:40:11:1f:af:e5:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:9F:4B:79:62:9C:96:EC:7C:A2:2F:34:5A:45:8F:80:75:4F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/c9329c19-a80c-3400-b6db-1fab96f612ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:89:c9:0a:38:7b:77:85:c6:90:a3:72:92:1b:3d:a4:86:3e:
         77:91:37:a0:a0:54:35:63:ff:65:da:ce:b8:69:d6:7f:30:ae:
         fe:6a:43:03:82:b7:70:79:0a:d1:bf:eb:b1:18:00:c2:a9:fb:
         52:ce:c9:39:7e:aa:71:c7:da:79:00:ee:26:71:b2:92:99:ec:
         0e:36:45:43:95:58:af:ce:e2:a3:27:ee:15:d4:4f:76:27:f5:
         49:02:ae:52:7f:be:bb:35:f5:60:a2:49:4e:b8:94:02:d3:a8:
         f9:28:38:f3:d3:df:66:3b:91:25:3f:e4:91:fe:a2:89:23:7e:
         de:41:ea:e9:08:0e:e8:b4:ed:db:46:9f:35:c0:01:f5:15:1e:
         8a:ee:8c:ce:e6:4e:1f:8e:03:18:a9:0d:61:22:c6:84:d5:a1:
         c5:e0:7b:e2:7c:a7:b4:23:bd:55:60:d2:e2:20:aa:dc:4a:56:
         34:55:17:32:2d:71:ca:7a:54:bf:b4:4b:ff:19:62:c0:93:58:
         24:12:22:c0:38:a6:dc:06:32:72:a0:7c:b2:c0:d5:06:1d:13:
         91:0c:9b:71:52:00:09:2a:49:a0:2c:dc:6e:8e:46:24:bf:e6:
         3b:0e:1e:5b:03:9f:46:cf:53:f3:50:60:94:45:41:5d:46:64:
         86:f3:43:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQ4J02xzRIf/qwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm
YjNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDc0NGMyMjQtZTUyMC00M2RlLWI2NWYtZTYwOGQ4ZDMwYTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqfC13d2Sje5lXnrr2mcRaJYAXx32Yov4IU3
kzHRgSFPCiToQ4PRmJ/OwL8lS/qV2mQFz2wkbgXOhdAf47c/39Jor59JjRrGvOpj
nXnosSa57AeoAn/CDXkwEW5YHHA9mqby5TEXfw7Ieh5pw78YHvTrVF9yVxMFbM1O
FnruVuP6Wa8o+U8Yf9zWIUFsyl3c7xkpSuUuLxIb2as34W9eEoWVB6vM/AcGRzJs
FesQWiQV+n/JQj54HRyPuxT2yxQxQoFJgh382g5wD5EDmvl/vMiZhgdR6a27foWY
u4RfAC4h2jZ6nEaXG/il2EXPdcVh11+a7/dJRqHLQBEfr+VhqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgNn0t5YpyW7HyiLzRaRY+AdU/sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl
NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvYzkzMjljMTktYTgwYy0z
NDAwLWI2ZGItMWZhYjk2ZjYxMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw
MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5
ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj
ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAh1SoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWJyQo4e3eFxpCjcpIbPaSGPneRN6CgVDVj/2Xazrhp1n8wrv5qQwOC
t3B5CtG/67EYAMKp+1LOyTl+qnHH2nkA7iZxspKZ7A42RUOVWK/O4qMn7hXUT3Yn
9UkCrlJ/vrs19WCiSU64lALTqPkoOPPT32Y7kSU/5JH+ookjft5B6ukIDui07dtG
nzXAAfUVHorujM7mTh+OAxipDWEixoTVocXge+J8p7QjvVVg0uIgqtxKVjRVFzIt
ccp6VL+0S/8ZYsCTWCQSIsA4ptwGMnKgfLLA1QYdE5EMm3FSAAkqSaAs3G6ORiS/
5jsOHlsDn0bPU/NQYJRFQV1GZIbzQ0g=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:48:11 2026 by rpki-client