Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/a1b36e38-4a42-3ff9-bc47-25a65b16c831.roa
File:                     a1b36e38-4a42-3ff9-bc47-25a65b16c831.roa (raw, json)
Hash identifier:          UYeukFwcZN+jvvfEdN6g5HJ5zdVklg1+PShDNYx8sZo=
Subject key identifier:   87:F9:14:A3:95:CC:33:22:A1:4A:4E:24:DA:7A:20:4E:CF:32:5F:6C
Certificate issuer:       /CN=00c081d9-ab0e-4270-b0f1-227e8a595105
Certificate serial:       010D0C9F4328584F093D1924A72C6EFDC8560880
Authority key identifier: EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/a1b36e38-4a42-3ff9-bc47-25a65b16c831.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     401315
IP address blocks:        192.35.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:19:24:a7:2c:6e:fd:c8:56:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c081d9-ab0e-4270-b0f1-227e8a595105
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=f498ab01-1037-403e-8bcb-95ea614889ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:d2:8f:c9:9e:f8:f9:d4:90:ed:61:d2:43:
                    cf:55:32:63:ec:02:a5:f6:62:56:52:32:fa:83:f2:
                    3e:7a:34:91:cd:52:e0:bf:41:e7:bf:2c:9a:fc:9d:
                    e5:84:29:4e:c6:d6:7e:10:18:09:6f:19:f1:73:68:
                    29:9f:6e:9b:64:40:b2:b2:80:a0:63:fd:c2:ef:22:
                    96:0c:93:ec:6b:d7:e2:a7:f3:84:06:f5:4b:a9:81:
                    53:23:32:ec:23:cd:69:b1:67:f5:f8:86:a2:5c:4b:
                    71:5b:98:d2:2d:76:8d:1c:db:3d:fa:ba:f9:f3:90:
                    06:1a:76:b3:c8:c7:30:4d:75:75:ea:61:6c:86:d6:
                    79:76:4f:ab:f5:94:3f:43:ae:94:b4:17:06:db:90:
                    41:b9:f1:83:e0:36:d9:d8:d9:f4:29:a6:85:da:77:
                    fe:51:07:f1:64:01:36:8d:b9:93:dd:91:24:44:d7:
                    1a:77:4f:d2:e4:c4:08:66:e9:99:20:7b:27:4f:b1:
                    92:50:7e:c9:f2:10:66:b6:db:c6:62:bf:a8:19:14:
                    71:d5:b8:fb:80:29:f3:61:fe:d7:c1:db:f1:fa:ac:
                    c4:38:74:db:88:dd:7d:c3:66:46:39:81:8e:04:ac:
                    d1:4b:f0:96:fb:e9:55:ce:66:26:67:de:e0:c7:25:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:14:A3:95:CC:33:22:A1:4A:4E:24:DA:7A:20:4E:CF:32:5F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/a1b36e38-4a42-3ff9-bc47-25a65b16c831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl

            X509v3 Authority Key Identifier:
                keyid:EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:73:23:b5:fe:2e:c8:11:12:ed:bc:80:8e:72:a4:ff:49:ea:
         c9:ef:37:38:b8:78:2b:4a:91:e4:d4:12:66:eb:19:06:d4:10:
         de:de:77:18:36:6f:4a:5b:ca:bf:a2:cc:5c:04:a4:c6:80:68:
         58:c6:90:a0:bf:68:e7:9e:af:cb:70:3a:ed:03:70:bd:bc:4d:
         b0:0c:ad:f6:63:ed:65:30:5a:7e:f2:03:c4:81:23:06:54:9a:
         9e:72:a3:e4:97:26:ca:85:2b:e6:1a:ad:62:43:a4:e8:87:7a:
         42:36:f6:27:bf:4b:7a:5f:86:3a:5d:31:c9:aa:c7:4f:58:1e:
         6a:ac:04:2b:e6:25:8b:6f:ef:6f:35:a8:38:19:76:ff:42:ed:
         86:a6:26:cf:ef:3b:a4:d2:b8:de:90:42:95:6d:84:44:67:17:
         cb:96:2c:7c:90:8a:69:f0:dc:13:4b:69:83:c1:60:9b:c2:f5:
         04:1f:76:41:1c:13:fc:0c:28:af:cb:02:59:20:f0:3f:bd:7b:
         91:df:2b:eb:6c:5f:03:ed:b9:b7:6f:26:82:be:48:d9:7f:ee:
         99:ba:ce:7e:8d:97:a6:c6:90:ef:e7:49:a3:33:a6:8f:18:83:
         3d:77:97:07:79:3f:9c:ca:aa:fe:4d:1f:91:f7:99:88:56:76:
         35:b3:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:34:07 2026 by rpki-client