Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7c7038a7-dfd2-3590-b8c8-578131b4794a.roa
File:                     7c7038a7-dfd2-3590-b8c8-578131b4794a.roa (raw, json)
Hash identifier:          dBFzcmFaHjXdAchjJboR4RdFrQ2ynvFtsVBSmvdp3qE=
Subject key identifier:   19:B3:84:13:E0:B9:B1:E0:8B:21:6A:7B:D8:11:B4:62:01:CE:82:4A
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584B233186550BF44808967E7BD0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7c7038a7-dfd2-3590-b8c8-578131b4794a.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     19637
IP address blocks:        135.14.66.0/24 maxlen: 24
                          135.14.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:86:55:0b:f4:48:08:96:7e:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=ae777e30-6e66-4bea-9b44-f58674b47caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:75:8c:db:3d:67:e4:38:47:fc:90:0b:81:
                    57:79:c6:d3:4b:85:7a:fb:89:db:c8:a9:73:f8:ee:
                    67:5d:f6:33:14:7c:02:a2:73:d0:a5:89:1b:6d:ba:
                    1a:8f:95:3a:3f:16:d3:fc:41:43:7b:54:32:a3:70:
                    79:d8:85:37:6e:d5:3e:87:2f:1e:c0:3e:d6:05:c4:
                    6d:12:c6:64:0a:bf:09:af:86:f7:a4:41:80:c5:38:
                    69:dd:8b:2b:b0:05:3f:2e:4c:fb:af:2f:50:e2:da:
                    92:70:fb:79:51:3d:a6:4b:36:a8:c8:e8:b3:65:ec:
                    d9:3f:f3:4b:a6:f2:bd:39:4a:02:7c:fd:3a:79:c4:
                    8a:a9:87:1a:b1:0c:47:89:a9:5d:fb:25:87:87:bc:
                    86:56:c7:ed:3e:33:a2:f4:d4:4c:ce:70:1e:a4:d9:
                    51:d7:8c:a4:a0:78:45:2a:7b:e4:cb:f8:69:14:55:
                    61:2c:f2:4a:e7:de:99:06:07:07:e1:21:9e:1a:15:
                    46:e0:07:f2:00:da:a9:78:9e:cf:00:b2:d6:10:f3:
                    17:e6:b9:46:1d:29:97:94:d4:c5:74:a5:e4:77:80:
                    e6:8a:e7:82:4c:31:fc:02:62:70:71:da:d4:bf:c7:
                    c8:be:e7:cb:59:65:34:90:87:c9:1b:50:8f:1c:2a:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B3:84:13:E0:B9:B1:E0:8B:21:6A:7B:D8:11:B4:62:01:CE:82:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7c7038a7-dfd2-3590-b8c8-578131b4794a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.14.66.0/24
                  135.14.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d6:11:c8:2d:d7:e9:40:b3:9a:ba:e9:6e:57:28:be:8c:47:
         6f:cc:12:fb:0a:30:7a:cc:9f:30:c0:f0:9e:66:b8:20:2d:c4:
         d4:5f:6e:77:1f:51:2e:6a:6b:60:da:31:41:0e:ca:ce:f4:52:
         89:99:a3:91:79:b3:0d:69:17:1b:12:aa:60:95:dd:b9:a7:f2:
         f9:a7:35:da:68:29:4d:00:a4:41:ed:55:f2:03:3d:b0:d3:f9:
         02:47:a1:61:fd:b8:94:6e:f5:67:c5:11:dc:20:e4:2b:08:63:
         b5:47:de:37:ba:af:12:85:be:4f:b6:41:36:b0:81:cd:06:74:
         ea:1f:17:a3:1f:6f:e2:67:05:51:7c:de:e2:e1:c5:2d:43:02:
         3f:98:9d:92:9e:1b:12:ca:9f:50:e0:06:36:1a:d7:a0:69:b3:
         c2:e7:9b:10:84:ca:ad:24:de:e8:a1:96:7b:78:51:92:cc:d7:
         10:d6:73:dd:3c:3b:9e:e2:ae:8c:a9:30:48:41:37:c8:ad:94:
         73:ef:d3:3b:a6:6f:df:61:8f:27:46:22:76:e4:1e:d5:d5:5c:
         88:49:6d:32:0a:30:3c:39:19:11:1e:74:5f:c0:e5:15:9c:64:
         59:68:99:94:92:36:ab:18:2d:35:2e:86:af:43:47:6d:10:76:
         bd:07:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:17 2025 by rpki-client