Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5c3b1899-1a77-381f-842f-ca0472ff89f0.roa
File:                     5c3b1899-1a77-381f-842f-ca0472ff89f0.roa (raw, json)
Hash identifier:          JMgFlUrosJ8gSMh/ylfoVdgFjaqmm0wJsj+SwKsE8Dc=
Subject key identifier:   02:AA:66:E8:3C:8E:5C:13:A8:6E:7B:19:E9:15:B2:3C:79:DC:76:D1
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584D95F00B974A89559E1D746300
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5c3b1899-1a77-381f-842f-ca0472ff89f0.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     54994
IP address blocks:        174.35.70.0/24 maxlen: 24
                          174.35.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:0b:97:4a:89:55:9e:1d:74:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=b0d0f14c-3a49-4203-98f2-3804b1490a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:a0:0a:2e:62:c1:9b:42:86:bd:e8:32:e9:
                    dd:c8:12:8b:d4:d3:7c:68:e6:a1:82:82:54:43:a4:
                    2b:89:fb:b8:ca:ed:4c:22:1c:6d:6a:59:00:ae:96:
                    d3:fb:ab:f2:13:cf:1a:47:2b:9f:2a:0b:96:41:fa:
                    0f:1d:a0:92:67:be:39:30:cd:4d:2f:3c:2a:e2:ba:
                    ba:37:4e:76:a6:05:42:ff:75:56:57:30:53:f8:3b:
                    59:d5:9e:64:2c:7d:a7:34:53:5b:89:38:74:44:17:
                    cd:d7:56:f2:71:1c:44:b4:4e:f3:15:f1:7e:2c:da:
                    18:4c:ac:e7:07:78:e4:14:e6:34:a9:e7:88:4b:81:
                    42:55:f7:28:2a:4c:3c:a8:85:5e:e8:31:d5:22:c3:
                    f8:a2:03:08:f8:73:b7:2c:b2:80:09:14:af:c5:85:
                    27:5a:c9:23:e1:55:1a:ff:f0:3f:df:49:2f:ef:eb:
                    60:19:73:a7:c5:3c:d5:f8:36:d6:88:6a:d3:9d:92:
                    a4:12:2c:ed:7f:79:83:af:65:f6:1b:f9:e5:8a:f0:
                    39:5c:b9:42:eb:6d:8c:68:36:34:66:2d:2a:d3:ea:
                    39:03:a8:fd:a0:16:c1:ed:83:47:1c:fe:e1:bf:b4:
                    ae:7a:31:2e:b2:d8:9d:ae:ac:a7:a0:d8:5d:e0:b7:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AA:66:E8:3C:8E:5C:13:A8:6E:7B:19:E9:15:B2:3C:79:DC:76:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5c3b1899-1a77-381f-842f-ca0472ff89f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.70.0/24
                  174.35.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ea:2a:1b:ef:c0:b6:fd:6b:2c:63:8e:34:e8:13:0f:9c:85:
         3d:10:51:cb:0d:7d:f3:d3:d0:e2:96:53:0b:4d:84:08:d6:30:
         8c:bf:9d:87:38:09:93:91:60:49:c7:6c:54:ba:39:75:c6:ac:
         c2:97:d7:01:50:9a:dd:6a:64:55:cc:28:fe:79:15:9a:33:f1:
         86:47:18:a4:b7:93:2d:5c:8e:98:50:48:fc:86:6a:ee:80:c6:
         b5:69:47:44:bc:2c:0b:8f:6d:86:c6:0e:2f:4f:a2:ea:99:de:
         18:80:45:0b:7b:ba:77:8b:f1:5a:a6:3a:1a:b4:17:30:c3:97:
         7c:32:e1:f8:ea:bd:97:fa:21:fc:34:22:39:b5:18:db:53:96:
         cf:4e:ed:99:43:f9:2e:17:26:28:09:c3:80:f7:8b:9e:62:6e:
         0a:07:8c:65:70:e8:6a:68:ec:21:9c:32:e3:7f:58:a9:47:e4:
         13:da:64:d8:86:3e:09:b5:cc:51:33:90:24:08:c6:06:b8:00:
         b3:6d:58:4a:a5:67:81:cf:4c:2e:cf:59:24:9a:60:23:d6:42:
         e6:92:0e:9d:20:9f:28:d4:a4:8b:25:27:21:3f:30:21:5c:b8:
         a6:17:a7:ba:40:29:c6:9c:18:f9:a7:6c:8b:b5:66:b1:5d:18:
         9c:52:17:b6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2V8AuXSolVnh10YwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
YjBkMGYxNGMtM2E0OS00MjAzLTk4ZjItMzgwNGIxNDkwYTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnugCi5iwZtChr3oMundyBKL1NN8aOahgoJU
Q6Qrifu4yu1MIhxtalkArpbT+6vyE88aRyufKguWQfoPHaCSZ745MM1NLzwq4rq6
N052pgVC/3VWVzBT+DtZ1Z5kLH2nNFNbiTh0RBfN11bycRxEtE7zFfF+LNoYTKzn
B3jkFOY0qeeIS4FCVfcoKkw8qIVe6DHVIsP4ogMI+HO3LLKACRSvxYUnWskj4VUa
//A/30kv7+tgGXOnxTzV+DbWiGrTnZKkEiztf3mDr2X2G/nlivA5XLlC622MaDY0
Zi0q0+o5A6j9oBbB7YNHHP7hv7SuejEustidrqynoNhd4LeYLwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAKqZug8jlwTqG57GekVsjx53HbRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvNWMzYjE4OTktMWE3Ny0z
ODFmLTg0MmYtY2EwNDcyZmY4OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAriNGAwQA
riNTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABDqKhvvwLb9ayxjjjToEw+chT0QUcsNffPT0OKWUwtNhAjW
MIy/nYc4CZORYEnHbFS6OXXGrMKX1wFQmt1qZFXMKP55FZoz8YZHGKS3ky1cjphQ
SPyGau6AxrVpR0S8LAuPbYbGDi9PouqZ3hiARQt7uneL8VqmOhq0FzDDl3wy4fjq
vZf6Ifw0Ijm1GNtTls9O7ZlD+S4XJigJw4D3i55ibgoHjGVw6Gpo7CGcMuN/WKlH
5BPaZNiGPgm1zFEzkCQIxga4ALNtWEqlZ4HPTC7PWSSaYCPWQuaSDp0gnyjUpIsl
JyE/MCFcuKYXp7pAKcacGPmnbIu1ZrFdGJxSF7Y=
-----END CERTIFICATE-----
Generated at Wed May 13 12:01:04 2026 by rpki-client