Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26/7afacdc6-01c3-3948-abd2-be83a81e247c.roa
File:                     7afacdc6-01c3-3948-abd2-be83a81e247c.roa (raw, json)
Hash identifier:          FVOBWlosyMO6ggeIBBTSAY0GJuc4bDjq6HCbhaGjsEs=
Subject key identifier:   C8:90:35:30:BB:73:F6:49:49:E6:59:5D:CB:CA:18:B1:28:87:CA:04
Certificate issuer:       /CN=e84ff2fb-588e-4af4-bb5c-b23d7f873a26
Certificate serial:       010D0C9F4328584F45A3C718FCED96D2A838B840
Authority key identifier: 4C:11:7D:32:8A:6A:09:07:87:B5:4A:4C:51:BD:26:79:B9:3A:80:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26/7afacdc6-01c3-3948-abd2-be83a81e247c.roa
Signing time:             Wed 23 Sep 2026 16:16:13 +0000
ROA not before:           Wed 23 Sep 2026 16:16:13 +0000
ROA not after:            Tue 22 Dec 2026 17:16:13 +0000
asID:                     13911
IP address blocks:        142.202.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26/e84ff2fb-588e-4af4-bb5c-b23d7f873a26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26/e84ff2fb-588e-4af4-bb5c-b23d7f873a26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:a3:c7:18:fc:ed:96:d2:a8:38:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84ff2fb-588e-4af4-bb5c-b23d7f873a26
        Validity
            Not Before: Sep 23 16:16:13 2026 GMT
            Not After : Dec 22 17:16:13 2026 GMT
        Subject: CN=727f77ca-df87-4a4e-b57e-a1e497fcd03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:e2:5d:10:ae:09:fb:18:00:c2:3f:18:4d:
                    1a:f0:b6:a5:14:53:64:4a:6f:43:ef:71:de:32:0f:
                    49:80:c2:b9:88:0a:08:c0:55:5d:a1:3d:04:55:1e:
                    95:c7:7e:39:ed:f9:38:87:71:08:94:d3:82:04:10:
                    33:12:29:92:b5:1a:a0:ab:9d:07:85:1b:df:a0:90:
                    44:00:3d:6b:38:c9:a9:56:1b:54:74:fc:61:c7:45:
                    81:07:38:22:a7:b9:92:1a:5a:fe:e6:8f:c2:b9:66:
                    4a:24:9f:b5:01:dc:1c:01:bc:37:9d:aa:85:cf:87:
                    72:76:c1:c5:e2:65:6d:7e:5b:7f:7c:58:18:cf:26:
                    b4:88:a3:ab:17:dd:c6:5d:9e:74:f1:00:7d:a9:fb:
                    02:42:9a:9a:fa:1e:54:a2:45:1b:f3:55:d4:fa:df:
                    81:a0:a4:49:e1:d1:85:53:5f:a1:49:12:51:38:a2:
                    82:d2:a7:aa:ca:25:1b:17:75:81:8c:b1:50:49:2d:
                    ef:ed:c9:9d:81:5f:a8:68:2e:85:f2:e7:c7:95:4f:
                    13:53:c2:f8:93:3a:1e:a9:70:1c:96:6b:4d:05:19:
                    fc:02:44:6f:ff:f2:a3:db:1b:0e:ca:d8:34:e8:f4:
                    1d:68:82:94:e4:61:9c:0a:5b:ce:39:c5:88:3a:cd:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:90:35:30:BB:73:F6:49:49:E6:59:5D:CB:CA:18:B1:28:87:CA:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26/7afacdc6-01c3-3948-abd2-be83a81e247c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26/e84ff2fb-588e-4af4-bb5c-b23d7f873a26.crl

            X509v3 Authority Key Identifier:
                keyid:4C:11:7D:32:8A:6A:09:07:87:B5:4A:4C:51:BD:26:79:B9:3A:80:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e84ff2fb-588e-4af4-bb5c-b23d7f873a26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:a8:8a:f9:17:06:b3:66:cc:c7:4f:f8:e6:22:d5:e4:0c:
         99:fa:4b:21:4c:0a:ab:43:ea:fb:ac:91:ed:c9:f7:10:79:0e:
         ff:dd:17:a4:34:eb:68:26:16:68:43:1d:ad:60:b3:07:53:c1:
         8e:3b:a2:30:3d:23:cc:ea:d3:e7:50:a0:2d:81:2c:9b:da:39:
         86:21:02:af:0d:99:41:23:24:10:68:18:a4:10:49:f7:5b:a0:
         19:62:15:83:5f:66:01:cb:51:5d:cf:e0:08:93:f0:cb:84:cb:
         06:25:15:b7:20:60:c4:67:a5:77:93:0e:75:5e:e1:a1:09:77:
         f0:71:48:1a:13:14:e4:69:c1:3d:8f:b8:f4:e8:30:44:b2:a7:
         3c:1a:41:de:8d:77:3c:fd:9e:29:14:9b:df:fa:26:db:97:96:
         b2:e7:af:24:df:b5:3e:1c:0c:f9:4b:38:9d:41:1b:86:22:6c:
         a4:e7:bd:a1:8b:c5:e6:d7:9f:a1:9f:10:dd:c3:d3:cc:27:9e:
         f3:b2:86:ae:05:5d:f7:01:f8:11:cf:48:20:32:e3:2c:9c:f8:
         62:b3:04:c1:8d:ae:b7:8e:b6:dd:b9:ae:ff:4a:ca:1c:34:73:
         e0:2b:e4:ac:4b:cd:7d:5e:c0:8d:82:bb:19:4e:e4:7c:b6:3e:
         d3:93:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:03:59 2026 by rpki-client