Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
File:                     8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa (raw, json)
Hash identifier:          UevQ2CrOSCk/Oop6FuLGZVHpg8aNIhmGCjXaF8TiWkA=
Subject key identifier:   98:15:21:DE:63:D3:C2:74:4E:68:3F:A3:05:EA:9E:A9:83:26:A5:3C
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B6631F3AFD692B9ECC2C93300
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     2914
IP address blocks:        174.35.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f3:af:d6:92:b9:ec:c2:c9:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=694661ae-689b-4938-8b61-008f65776a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:2f:ae:79:d3:4c:d8:35:13:5a:f9:25:e7:
                    2a:00:eb:e6:f2:04:93:0a:3b:7c:21:3d:69:9e:c6:
                    63:28:b9:85:ef:17:84:08:c9:62:6f:49:17:08:0d:
                    e5:5f:bc:78:54:5a:31:ac:09:ce:f0:2f:e6:65:b9:
                    f0:e5:79:71:9c:10:95:c1:89:51:ac:24:0e:76:c0:
                    14:01:ec:01:a4:64:ec:98:b4:e9:d3:3a:6a:b1:70:
                    ca:23:f7:68:2c:76:61:1e:08:88:21:7d:c8:23:58:
                    f6:93:17:8c:ce:a8:f4:bd:3c:fe:ec:e2:f2:87:4c:
                    ba:d7:52:db:fe:f0:bd:b4:3d:e3:55:4a:05:08:dd:
                    3b:65:c1:29:8e:ee:18:4e:b8:2c:66:e4:1f:1c:71:
                    5a:19:37:79:8c:ec:45:eb:6c:27:69:ed:75:d6:06:
                    22:5c:e0:73:b2:c2:2b:4c:bb:c7:41:65:e4:c9:d4:
                    b7:a3:87:60:bf:91:ba:87:5d:17:40:86:e1:67:75:
                    b9:34:77:28:e8:54:d0:42:b4:84:c5:f2:8a:de:97:
                    fe:46:7b:da:38:aa:ff:b6:0b:a0:94:65:ee:9f:c4:
                    6d:00:d3:47:db:31:a1:28:9f:2a:83:dd:16:7e:0c:
                    ba:7b:4f:92:1d:cb:b9:9e:13:6e:4d:26:6b:1f:4e:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:15:21:DE:63:D3:C2:74:4E:68:3F:A3:05:EA:9E:A9:83:26:A5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:5a:d3:91:38:31:17:4c:6d:77:f7:d1:81:9c:81:fb:58:
         9a:a3:b4:9a:ff:f3:32:4c:ed:6b:79:c4:65:19:ba:87:91:11:
         39:ce:c1:49:32:a7:35:66:04:de:af:94:ca:b1:2c:8d:e2:ef:
         bc:b4:e1:4c:d3:90:78:74:d0:05:ad:99:e6:0d:f6:07:ad:b6:
         22:f6:03:da:85:c0:4f:29:af:41:db:1a:09:54:45:80:c0:da:
         3e:97:d9:21:2d:8e:db:4f:f4:68:4b:59:0d:ee:a1:46:ed:31:
         0c:2a:93:1f:3d:88:50:d7:c0:5a:c8:1e:ae:a6:28:e0:f5:c9:
         94:45:74:f9:1b:ff:2f:d0:48:2e:49:de:80:72:58:3e:fb:25:
         91:a5:db:5c:16:f8:ce:82:bf:3f:64:66:90:ed:f5:55:ba:31:
         cd:c7:6a:b5:97:d5:40:05:46:cd:97:2a:31:d6:c4:86:75:39:
         60:bc:29:d8:c0:61:46:b1:4c:b0:87:71:ce:7d:b7:c1:07:0a:
         28:61:59:69:ec:4b:53:07:43:07:ec:87:1b:db:45:cf:25:20:
         fe:2a:83:71:bd:c4:c8:ce:6d:db:08:c1:5b:35:79:46:29:6d:
         80:e6:c0:3e:19:6d:c5:3b:7b:7d:21:e0:87:ab:90:9e:dd:c5:
         ae:43:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:46 2025 by rpki-client