Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/82a1be08-f277-38b7-a300-95f59524cc1b.roa
File:                     82a1be08-f277-38b7-a300-95f59524cc1b.roa (raw, json)
Hash identifier:          cP4xINhEgPQYhW0NlxwForE1nQDih82UEZsHvx/r5qI=
Subject key identifier:   77:2C:51:56:86:00:A8:52:8A:1C:B0:67:20:18:AE:5A:C3:F1:B1:98
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584D4A8FB0D2EC7339973E862120
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/82a1be08-f277-38b7-a300-95f59524cc1b.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     54994
IP address blocks:        174.35.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:b0:d2:ec:73:39:97:3e:86:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=865b14b3-8a75-40db-8854-6f70aeae9f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:bb:36:1a:ff:b0:90:58:b8:4e:60:69:bf:
                    d1:1c:f6:60:ee:36:fa:56:49:d1:85:4d:97:d8:40:
                    6f:67:76:79:c5:f4:ea:2d:3a:46:ce:61:cc:cb:f5:
                    07:e5:c9:d1:70:fa:84:d1:72:5c:b4:c3:82:a8:32:
                    dd:79:2a:9b:f3:af:ca:11:46:dc:f8:e8:11:d9:5e:
                    97:d7:de:fd:fc:85:38:75:f1:1b:70:61:ac:8a:fe:
                    04:54:f2:19:6f:f5:50:86:e5:72:e3:4c:82:82:c0:
                    8d:9c:f8:78:59:4d:36:9c:70:bc:42:a4:a2:15:69:
                    1a:94:af:e6:c2:17:e7:84:cf:21:b3:28:78:b9:fe:
                    74:98:ab:da:c8:2b:f2:da:f9:84:34:c9:fe:b5:57:
                    ec:be:78:c0:6b:93:ce:95:5a:64:25:98:e5:46:f8:
                    92:0b:91:19:b8:5e:20:21:ca:eb:ef:4a:c2:eb:98:
                    29:13:7a:56:6e:ec:6f:bb:cd:50:fc:7c:5a:13:cc:
                    04:ba:77:16:28:30:9d:fd:a8:d9:3d:f7:89:5c:b9:
                    10:16:5f:4c:9c:fb:29:ab:f0:2b:02:3a:0e:1d:61:
                    da:5e:1e:36:35:9d:24:be:d0:a6:b7:41:40:07:77:
                    e4:8e:04:75:c7:9b:83:5c:ae:9d:84:94:1e:e9:83:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:51:56:86:00:A8:52:8A:1C:B0:67:20:18:AE:5A:C3:F1:B1:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/82a1be08-f277-38b7-a300-95f59524cc1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:34:81:b3:0f:4d:2f:57:99:19:1d:4c:f9:94:39:c3:d8:3d:
         3f:a5:2a:be:e7:90:ca:11:2e:2d:73:19:52:16:62:e8:95:4d:
         85:2d:fd:bb:36:4f:49:8f:6b:f1:72:2b:4e:03:09:db:b5:37:
         90:b3:31:78:5a:e0:bf:b5:c0:f2:36:e3:3d:19:9c:b9:b2:a7:
         f6:c1:cd:6c:d9:51:48:61:92:5c:43:05:67:75:71:82:ff:4f:
         7a:60:9d:b0:c9:47:b1:fa:5d:4f:d1:15:10:65:c8:7f:71:df:
         1e:6e:c3:c3:0e:10:d9:e7:c1:a7:f1:31:29:70:2c:fa:cc:3f:
         16:bd:cc:37:ee:99:a5:1f:76:ab:27:01:79:2b:8d:e7:61:ef:
         bb:13:89:08:10:0a:ce:87:7a:7c:d4:4e:10:22:c9:31:9e:71:
         38:29:e1:a5:d0:f0:f7:de:0d:56:e4:c5:70:bd:20:6c:a8:69:
         ae:4c:bf:32:d2:56:63:2f:b3:d8:b7:9c:2a:0e:58:4c:fc:33:
         b0:38:b6:64:a6:dc:1b:da:ae:dd:49:73:a1:ab:44:f5:93:5f:
         8d:21:73:51:c7:81:a4:e2:45:e0:10:21:d8:40:28:a4:26:06:
         1b:95:ad:14:7b:4c:9a:22:db:3d:0f:81:ec:16:07:9e:b1:94:
         b6:0c:93:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7DS7HM5lz6GISAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
ODY1YjE0YjMtOGE3NS00MGRiLTg4NTQtNmY3MGFlYWU5ZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zC7Nhr/sJBYuE5gab/RHPZg7jb6VknRhU2X
2EBvZ3Z5xfTqLTpGzmHMy/UH5cnRcPqE0XJctMOCqDLdeSqb86/KEUbc+OgR2V6X
1979/IU4dfEbcGGsiv4EVPIZb/VQhuVy40yCgsCNnPh4WU02nHC8QqSiFWkalK/m
whfnhM8hsyh4uf50mKvayCvy2vmENMn+tVfsvnjAa5POlVpkJZjlRviSC5EZuF4g
Icrr70rC65gpE3pWbuxvu81Q/HxaE8wEuncWKDCd/ajZPfeJXLkQFl9MnPspq/Ar
AjoOHWHaXh42NZ0kvtCmt0FAB3fkjgR1x5uDXK6dhJQe6YMWKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcsUVaGAKhSihywZyAYrlrD8bGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvODJhMWJlMDgtZjI3Ny0z
OGI3LWEzMDAtOTVmNTk1MjRjYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriNQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU0gbMPTS9XmRkdTPmUOcPYPT+lKr7nkMoRLi1zGVIWYuiVTYUt/bs2
T0mPa/FyK04DCdu1N5CzMXha4L+1wPI24z0ZnLmyp/bBzWzZUUhhklxDBWd1cYL/
T3pgnbDJR7H6XU/RFRBlyH9x3x5uw8MOENnnwafxMSlwLPrMPxa9zDfumaUfdqsn
AXkrjedh77sTiQgQCs6HenzUThAiyTGecTgp4aXQ8PfeDVbkxXC9IGyoaa5MvzLS
VmMvs9i3nCoOWEz8M7A4tmSm3Bvart1Jc6GrRPWTX40hc1HHgaTiReAQIdhAKKQm
BhuVrRR7TJoi2z0PgewWB56xlLYMk2Y=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:15 2026 by rpki-client