Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/9365665f-7456-339d-a013-b0f07c8c29c9.roa
File:                     9365665f-7456-339d-a013-b0f07c8c29c9.roa (raw, json)
Hash identifier:          7m1GXnHVJ6GMN0E1Rg7FB0vXMGObIe8R9t/L47xX04o=
Subject key identifier:   4D:3F:67:73:A1:56:69:72:21:66:6F:8C:94:2B:7C:F6:6C:AD:1D:4F
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B2066E1ADBD88B79CE18D3AC0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/9365665f-7456-339d-a013-b0f07c8c29c9.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     54994
IP address blocks:        174.35.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:e1:ad:bd:88:b7:9c:e1:8d:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=6450e711-a8de-4a6e-9a6c-d9f933f014dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:40:c9:d1:67:ae:cd:5a:65:fe:5d:39:52:
                    92:d0:fa:ae:57:f0:2c:80:91:fc:3c:1e:67:48:75:
                    73:01:72:f0:20:bb:d3:85:e0:81:25:84:4a:09:03:
                    1c:98:3e:1b:02:a4:f0:ae:19:4e:a5:94:19:9b:c0:
                    da:be:1c:1e:41:8b:a5:9c:e6:9c:5c:75:af:a7:59:
                    27:35:e4:aa:6e:60:da:34:94:cc:83:32:d5:53:bf:
                    29:ed:9e:89:34:1b:ba:63:87:19:13:07:41:99:55:
                    e5:c7:50:e3:6b:83:8e:d4:5f:90:1c:10:83:7c:77:
                    0d:b5:a7:bc:5d:bf:30:e1:12:17:db:88:3b:16:d1:
                    f7:af:fe:ba:c5:77:9a:a4:3e:b8:4e:f4:b1:09:2a:
                    31:bf:1e:f6:bb:81:c0:62:1d:4f:f7:b7:b3:48:89:
                    aa:30:65:58:2b:ae:5c:2f:15:27:61:0a:51:ad:26:
                    c3:d1:6c:de:4e:af:cf:a9:08:4d:77:1d:5f:bd:b5:
                    b6:0c:2a:ec:ba:02:04:0d:18:dd:22:cd:a5:b5:61:
                    17:28:8e:be:e9:48:89:e0:b0:bc:ae:73:f8:cb:e4:
                    a1:a7:b5:d6:14:3d:d9:b3:d1:00:da:8a:f1:54:e7:
                    9d:79:aa:19:4e:f5:15:87:39:aa:16:8b:85:52:8e:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3F:67:73:A1:56:69:72:21:66:6F:8C:94:2B:7C:F6:6C:AD:1D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/9365665f-7456-339d-a013-b0f07c8c29c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:3f:56:39:7e:97:57:3e:37:6c:d0:24:e1:a6:49:ca:26:
         f7:00:87:34:61:44:1c:a1:36:6b:2b:36:57:f8:d3:40:6a:bd:
         da:5f:b3:76:aa:a8:9e:48:7e:2b:cf:5a:be:82:90:68:b5:18:
         71:fe:6c:37:1a:f7:1c:02:75:c5:2d:63:2c:b1:35:9d:d3:b3:
         8f:31:32:cf:4c:b0:50:a6:46:49:03:29:2f:8c:09:a4:e1:bb:
         c2:1e:17:d9:ae:d2:74:dc:2d:db:3f:c8:9d:91:cf:ea:c8:25:
         41:23:68:d6:08:77:4f:73:31:e0:a0:13:0f:f1:98:a5:fe:1c:
         ec:58:8e:43:00:ce:86:1f:c3:07:ee:7b:1e:69:25:2f:16:cc:
         f2:e4:1e:2a:01:0c:43:dc:9d:ae:c0:f0:60:26:cd:ba:b5:85:
         54:52:7d:0d:82:16:c1:17:05:5b:cc:50:84:b4:fe:6e:5f:1d:
         b5:33:c8:a9:82:d5:3a:ab:f2:47:4c:f4:78:c2:c9:5a:7a:ab:
         4f:9a:80:99:aa:05:06:69:ca:1b:fa:51:63:6f:5b:ec:35:12:
         b0:1d:6b:87:71:40:28:b7:f6:80:16:b7:1b:ac:36:0b:40:3a:
         2e:29:53:11:d3:32:4f:02:51:e2:e4:6a:9e:b1:b4:dd:5c:c3:
         63:9e:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:02 2025 by rpki-client