Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa
File:                     3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa (raw, json)
Hash identifier:          oQGrOBf3Mu2LibD3op2RajKBS6NuYk3Lt4HFUWq/kqM=
Subject key identifier:   19:3D:9D:F6:3E:E9:9D:4C:C9:E4:F5:C5:AB:6D:35:5F:6E:57:80:34
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584F4975E434A2E59D7C58551680
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        174.35.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e4:34:a2:e5:9d:7c:58:55:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2380de25-9f26-4d64-8180-403f7855c3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:28:26:ea:11:fe:99:b5:64:ba:d7:a6:28:
                    d0:f6:ea:f7:ad:34:a3:a8:8f:ff:2e:ed:6b:f4:14:
                    ae:f2:65:44:c0:ec:d9:b0:1f:c7:77:cf:d0:ed:b7:
                    ae:6a:0c:1f:54:0d:5b:46:4c:13:1d:7f:cc:88:ad:
                    ec:18:e2:e5:2d:a8:cf:31:d3:89:9f:b7:8c:0c:58:
                    e8:f4:4c:4d:d0:6d:1e:ea:1c:40:9c:c0:a5:3b:70:
                    8d:c2:fb:40:bc:e3:a4:1e:40:7e:30:1e:4d:eb:a6:
                    68:59:79:03:ce:9c:2d:70:4d:27:c6:d5:ff:bd:e7:
                    d5:0e:98:80:07:5f:19:01:8d:c8:5e:0e:1b:ad:83:
                    16:b0:2a:e3:5e:ee:a5:76:f5:1b:0e:51:9a:96:43:
                    d3:88:96:bd:28:78:3c:c4:5b:42:d2:7c:41:ec:55:
                    6e:79:c0:86:6a:3e:a6:b8:9c:8c:79:95:e8:d5:af:
                    08:32:6e:5c:1c:e7:a5:1b:1c:50:82:6a:3c:94:ba:
                    c2:a4:af:39:ed:71:1e:ee:bc:bd:21:26:74:e7:d6:
                    95:5a:19:17:f1:5e:5e:59:6f:06:90:fd:97:68:bc:
                    54:9c:d9:5a:27:5e:96:13:20:73:eb:06:a4:c4:b3:
                    c2:da:70:f4:10:be:49:93:af:98:30:ec:bb:aa:13:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3D:9D:F6:3E:E9:9D:4C:C9:E4:F5:C5:AB:6D:35:5F:6E:57:80:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:93:9f:23:43:30:eb:8e:ac:3b:59:10:f9:e8:3b:d8:21:
         5b:c6:81:8e:6b:a7:cc:41:11:91:40:27:65:c9:74:df:04:93:
         b4:18:e8:a9:93:16:2b:c5:60:e1:ae:6d:77:35:17:13:2b:d9:
         20:6e:3c:58:6c:2a:8c:53:11:c3:13:8d:91:b8:3f:92:09:5c:
         19:67:af:67:34:47:c9:17:51:81:34:99:4d:6e:d8:ee:48:8c:
         ee:b3:bf:ed:8b:21:78:e7:53:73:6a:aa:d6:3a:07:3a:d3:bb:
         c4:7d:7c:eb:15:17:83:cc:85:65:cc:6e:65:2b:b1:bf:94:52:
         20:0d:a2:44:1c:c5:2e:91:2a:03:0d:ec:41:3f:c8:b0:36:2d:
         ab:f4:4a:1c:76:e4:0f:06:5f:75:f0:c9:76:26:76:a5:23:4a:
         1a:8f:51:91:cd:70:19:2d:43:de:6a:fa:b9:f2:6b:49:90:11:
         b5:05:1f:04:d0:c9:ff:b5:f6:13:8a:15:a0:9e:0f:38:74:ec:
         9f:34:a9:4b:4e:62:41:50:45:d3:86:90:a6:2d:42:e3:c4:7b:
         97:f5:b0:ab:9c:33:e0:fa:d7:b1:ca:f3:28:c9:5e:ce:a1:d5:
         09:42:00:10:92:cf:75:18:31:e5:cc:59:30:93:37:d5:33:1a:
         14:5c:68:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdeQ0ouWdfFhVFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjM4MGRlMjUtOWYyNi00ZDY0LTgxODAtNDAzZjc4NTVjM2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPkoJuoR/pm1ZLrXpijQ9ur3rTSjqI//Lu1r
9BSu8mVEwOzZsB/Hd8/Q7beuagwfVA1bRkwTHX/MiK3sGOLlLajPMdOJn7eMDFjo
9ExN0G0e6hxAnMClO3CNwvtAvOOkHkB+MB5N66ZoWXkDzpwtcE0nxtX/vefVDpiA
B18ZAY3IXg4brYMWsCrjXu6ldvUbDlGalkPTiJa9KHg8xFtC0nxB7FVuecCGaj6m
uJyMeZXo1a8IMm5cHOelGxxQgmo8lLrCpK857XEe7ry9ISZ059aVWhkX8V5eWW8G
kP2XaLxUnNlaJ16WEyBz6wakxLPC2nD0EL5Jk6+YMOy7qhOhywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBk9nfY+6Z1MyeT1xattNV9uV4A0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvM2E2MDFjYTktYjU4Zi0z
YmIyLThlNjEtNzUzMmY2NDAwMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKyk58jQzDrjqw7WRD56DvYIVvGgY5rp8xBEZFAJ2XJdN8Ek7QY6KmT
FivFYOGubXc1FxMr2SBuPFhsKoxTEcMTjZG4P5IJXBlnr2c0R8kXUYE0mU1u2O5I
jO6zv+2LIXjnU3NqqtY6BzrTu8R9fOsVF4PMhWXMbmUrsb+UUiANokQcxS6RKgMN
7EE/yLA2Lav0Shx25A8GX3XwyXYmdqUjShqPUZHNcBktQ95q+rnya0mQEbUFHwTQ
yf+19hOKFaCeDzh07J80qUtOYkFQRdOGkKYtQuPEe5f1sKucM+D617HK8yjJXs6h
1QlCABCSz3UYMeXMWTCTN9UzGhRcaMc=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:25:05 2026 by rpki-client