Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
File:                     e6965540-cbd0-3930-b638-a04886e69eac.roa (raw, json)
Hash identifier:          CDdu6LWwns46e2hHAwRmzzz8cKO/20wsQ00KkEhueNo=
Subject key identifier:   33:BD:3C:C1:22:7D:0E:47:CB:86:C7:87:8A:01:46:C7:EC:86:CA:81
Certificate issuer:       /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
Certificate serial:       010D0C9F4328584E6F3A29A5C0901DB51CEBAA40
Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     4983
IP address blocks:        192.55.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:29:a5:c0:90:1d:b5:1c:eb:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=2b0f8999-bb1a-4891-8901-0335e409dac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:2a:f2:7d:55:99:15:38:58:39:ad:83:07:
                    e4:a1:64:46:e7:f2:01:69:b9:84:d4:df:26:5c:65:
                    93:76:98:ad:43:01:cc:1a:85:31:90:13:5f:6e:62:
                    c1:ce:ee:7b:e7:cc:18:51:d2:f3:43:3d:65:e5:7c:
                    43:70:86:a7:6f:18:de:6f:78:f9:4d:76:25:62:26:
                    98:a2:0d:dc:cf:ef:77:65:f7:26:69:ef:7d:bc:9f:
                    9c:66:87:50:4c:76:74:b8:9b:e2:e7:7d:c7:34:4d:
                    94:7b:6f:ab:4e:13:7a:c1:92:47:75:d7:ab:47:4d:
                    b9:03:5f:04:d9:f3:78:2f:5b:49:77:28:41:07:b5:
                    c2:1f:d7:6d:4f:f8:24:eb:54:ba:55:a7:6b:79:1d:
                    76:c0:00:6e:2b:95:fa:dd:cf:a4:c3:be:59:92:91:
                    ad:90:70:cd:be:a4:52:26:07:f3:e3:7d:6d:38:b8:
                    ae:ed:53:24:bb:44:0b:61:61:cb:9b:74:c0:46:c4:
                    8e:89:3e:e0:80:6e:a1:6e:58:c7:98:02:21:dd:6d:
                    32:0f:4d:1d:50:51:d4:62:d3:ff:0f:d2:34:be:d6:
                    a6:25:ac:27:64:18:fc:2e:d0:8a:30:74:f9:8c:d3:
                    66:49:36:25:2a:15:8c:9f:60:44:fa:e2:85:55:c2:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BD:3C:C1:22:7D:0E:47:CB:86:C7:87:8A:01:46:C7:EC:86:CA:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl

            X509v3 Authority Key Identifier:
                keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:ca:c6:c7:b0:f5:49:66:6a:6c:d1:82:39:81:62:e0:50:
         24:25:ca:da:16:e5:7b:68:59:9a:4d:dc:fc:39:41:8e:5e:5b:
         b7:5d:e6:45:c5:e0:af:ae:ee:3d:01:ef:82:3f:e9:b5:ef:f9:
         7d:48:20:17:da:f1:3b:ca:df:31:84:f5:af:71:c0:99:83:8a:
         12:d8:ce:6e:c4:4f:cd:ab:4a:8d:c4:fa:4c:58:17:4c:db:1e:
         5f:14:c1:8e:7a:df:9a:00:28:6e:5b:eb:c0:b8:2a:36:94:71:
         50:39:d1:35:be:c0:92:7f:98:cd:55:c5:3d:15:b5:67:64:4d:
         33:a2:13:dc:02:a4:59:05:6d:74:48:66:7f:e7:66:21:49:b4:
         4b:48:7c:5f:6d:69:e2:b7:0c:b7:09:85:c4:74:ff:11:d9:4e:
         a2:6f:7a:7a:ea:58:ef:83:0b:2d:eb:4e:a3:39:9b:70:e4:b3:
         9c:77:93:05:a2:13:f7:98:00:be:8b:11:5e:85:4b:6b:f7:b0:
         61:bd:1c:e5:fc:d5:80:a1:ef:c5:4c:c5:88:5e:09:09:a4:46:
         6e:81:76:43:33:10:35:2a:90:2e:1f:e9:8f:ea:de:dd:52:81:
         26:fb:5e:7d:04:22:ce:11:f4:39:74:11:3c:fa:c7:0d:0b:32:
         d3:c1:2a:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOimlwJAdtRzrqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz
ZGMzMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
MmIwZjg5OTktYmIxYS00ODkxLTg5MDEtMDMzNWU0MDlkYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtcq8n1VmRU4WDmtgwfkoWRG5/IBabmE1N8m
XGWTdpitQwHMGoUxkBNfbmLBzu5758wYUdLzQz1l5XxDcIanbxjeb3j5TXYlYiaY
og3cz+93Zfcmae99vJ+cZodQTHZ0uJvi533HNE2Ue2+rThN6wZJHdderR025A18E
2fN4L1tJdyhBB7XCH9dtT/gk61S6VadreR12wABuK5X63c+kw75ZkpGtkHDNvqRS
Jgfz431tOLiu7VMku0QLYWHLm3TARsSOiT7ggG6hbljHmAIh3W0yD00dUFHUYtP/
D9I0vtamJawnZBj8LtCKMHT5jNNmSTYlKhWMn2BE+uKFVcJxaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDO9PMEifQ5Hy4bHh4oBRsfshsqBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh
NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvZTY5NjU1NDAtY2JkMC0z
OTMwLWI2MzgtYTA0ODg2ZTY5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw
ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy
M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy
NzhlMjNkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDcjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4AysbHsPVJZmps0YI5gWLgUCQlytoW5XtoWZpN3Pw5QY5eW7dd5kXF
4K+u7j0B74I/6bXv+X1IIBfa8TvK3zGE9a9xwJmDihLYzm7ET82rSo3E+kxYF0zb
Hl8UwY5635oAKG5b68C4KjaUcVA50TW+wJJ/mM1VxT0VtWdkTTOiE9wCpFkFbXRI
Zn/nZiFJtEtIfF9taeK3DLcJhcR0/xHZTqJvenrqWO+DCy3rTqM5m3Dks5x3kwWi
E/eYAL6LEV6FS2v3sGG9HOX81YCh78VMxYheCQmkRm6BdkMzEDUqkC4f6Y/q3t1S
gSb7Xn0EIs4R9Dl0ETz6xw0LMtPBKkU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:28 2026 by rpki-client