Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/67c5abf7-a8ea-31d1-b28c-6c6c9881b661.roa
File:                     67c5abf7-a8ea-31d1-b28c-6c6c9881b661.roa (raw, json)
Hash identifier:          J9xImyKYO41NHLl/KMBmSq6f7ETwmn+JXjRojdw+47g=
Subject key identifier:   FD:D4:C3:3A:DA:2C:42:41:46:C6:CB:65:96:B6:28:5C:05:0A:B7:EE
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584D0EA7C1DCABBC8FB848178240
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/67c5abf7-a8ea-31d1-b28c-6c6c9881b661.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     54994
IP address blocks:        174.35.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:c1:dc:ab:bc:8f:b8:48:17:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=15d5026e-870c-4d96-adc2-9662cde70fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:10:91:c7:f1:fa:28:91:f6:e7:62:25:ac:
                    fd:99:5c:9c:74:f4:70:9c:de:e8:b8:8e:ef:92:42:
                    17:e1:38:6e:54:22:1c:ee:06:4d:ae:9c:da:50:da:
                    96:7c:4d:f9:58:ba:46:7f:6c:e2:8a:87:ef:3c:7b:
                    cd:82:6a:5f:28:8b:2f:6e:21:4f:ba:38:4d:d4:1d:
                    32:b6:ad:53:50:42:07:61:ec:4a:65:15:1c:49:6f:
                    2a:17:8b:0c:5f:b0:1a:72:10:8d:17:1c:5f:7b:ea:
                    77:a0:d2:fc:cc:5f:aa:20:e4:a1:b6:42:c3:7e:b0:
                    15:44:fb:25:4a:83:e8:79:62:b9:cb:54:44:e0:d5:
                    5c:95:b9:e3:ae:a0:b5:2e:60:03:bf:97:2c:f4:f1:
                    d5:f7:df:ba:a2:9b:6b:1d:de:72:dc:91:fb:e3:d2:
                    bb:2f:2b:45:64:9d:94:89:08:50:51:7f:7c:3c:29:
                    51:5e:c2:82:ed:1f:69:e1:c6:9e:cb:70:b2:a4:87:
                    05:e7:93:5b:56:d3:6c:28:fc:bc:ad:cb:84:9b:fe:
                    df:b2:9a:b7:bf:2f:03:62:06:8d:f3:3c:46:f0:e8:
                    a4:49:5c:3d:8e:7d:f9:cf:2a:4d:9a:f1:8c:93:9b:
                    80:72:21:73:ca:dd:b3:6a:94:cc:d3:0d:49:fb:f5:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D4:C3:3A:DA:2C:42:41:46:C6:CB:65:96:B6:28:5C:05:0A:B7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/67c5abf7-a8ea-31d1-b28c-6c6c9881b661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:ca:ea:bf:8a:b2:2d:dc:0e:e2:77:43:c2:0d:c3:d7:8a:
         4c:d3:a9:8e:67:9c:e6:8b:41:45:99:bd:da:c7:dc:e9:b1:05:
         fa:21:60:08:c7:37:0e:7b:79:cf:2e:c8:29:af:23:98:6f:e7:
         22:47:91:96:af:48:2e:14:e0:c5:36:f7:2e:dd:8b:68:76:7a:
         3a:fb:9a:6f:7b:9a:fd:02:99:7a:b4:87:04:6d:16:9e:bc:64:
         c9:ae:75:e2:50:6d:26:36:e5:c5:ac:9a:9f:71:4b:34:72:52:
         95:aa:e9:90:68:a4:cd:e7:39:61:61:42:1d:98:51:6d:bd:cc:
         a3:1f:f9:12:a6:57:41:6a:9b:63:c0:8f:ac:60:d9:30:b2:48:
         c2:5f:64:cb:b5:44:f2:69:ba:81:5a:52:ab:e3:9c:8a:8d:30:
         f8:24:d5:b6:bf:b7:6f:3a:40:2e:f7:94:02:03:83:b8:5a:cc:
         fe:b1:d6:fa:79:35:7a:27:5f:d5:a3:c2:84:b3:8c:5a:55:93:
         ff:ba:78:a3:ca:13:12:c8:7b:e2:eb:b3:d8:3c:46:35:37:79:
         f1:e6:a9:a2:18:db:63:cd:5b:58:dd:a4:fa:78:6e:a1:83:c6:
         80:09:02:74:96:4f:26:d4:70:d7:33:5f:1b:56:3c:d2:3f:a6:
         24:76:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:13 2026 by rpki-client