Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
File:                     b0293e2a-b333-3875-817a-b2830f596b7b.roa (raw, json)
Hash identifier:          P8JRBBi7L+T/ARrTF/GSGziDJJcZ1NLMLZ6BfsrDUOo=
Subject key identifier:   F3:85:70:09:70:05:82:48:8B:71:B0:20:A3:35:68:17:14:53:D6:E5
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584F4973AF5A68F858341D41CBC0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     48737
IP address blocks:        174.35.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:af:5a:68:f8:58:34:1d:41:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0e9ac143-e105-4476-94ce-f695038411ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:05:51:91:a1:0f:03:85:ef:7b:4c:60:72:
                    b4:18:3e:75:20:4e:a3:4f:ce:71:8e:53:76:79:1a:
                    6e:9b:45:10:6a:31:3a:47:f3:d2:e5:86:d0:ed:46:
                    c4:2d:4e:69:ff:ca:ce:a5:a9:0d:29:46:5f:bd:d0:
                    05:f2:28:29:52:7d:79:e3:fd:ee:ac:4b:04:ae:75:
                    33:a9:07:be:d5:ee:cd:67:13:81:96:b7:a3:b0:c6:
                    b0:d3:4a:c6:71:df:7c:2e:b7:de:32:7d:46:b5:4d:
                    09:1d:98:6f:b0:3e:9e:4f:e5:58:58:cf:43:fc:f4:
                    0e:3a:a0:d6:f3:05:f2:e2:bf:75:6d:3b:bc:a7:91:
                    ba:64:e2:1d:03:e3:24:35:58:a2:40:72:02:09:9f:
                    20:59:1e:ed:67:59:2a:b9:dd:01:db:52:66:71:d2:
                    1a:12:db:ed:3b:74:70:e8:0f:de:8d:9b:0b:77:16:
                    c6:99:15:05:5b:60:eb:4c:fb:2b:a4:ab:77:c6:d2:
                    d6:79:01:dd:2e:bf:f3:93:b5:16:23:5b:77:f4:10:
                    be:5a:ab:3b:cb:9f:ed:b5:f8:32:d6:4f:f1:e8:d7:
                    01:9a:a6:33:ee:99:75:73:6f:bb:9f:f1:6f:d9:1d:
                    bd:0a:ae:dc:6d:29:92:32:82:1a:c0:ba:03:bc:c1:
                    9f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:85:70:09:70:05:82:48:8B:71:B0:20:A3:35:68:17:14:53:D6:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:ce:1b:f6:62:d4:b6:e8:a6:b1:23:f6:3b:62:0f:f2:4f:
         5b:43:38:e7:6f:22:98:0b:6c:09:99:1b:ee:2b:cc:6f:2f:b3:
         46:d3:09:cc:9c:c4:c2:eb:e5:68:d0:0c:68:ea:07:ba:e4:de:
         ed:dc:42:63:9b:41:33:f0:43:4c:5a:e1:9a:bb:03:88:48:cf:
         fd:97:3d:71:41:22:d4:f9:85:e3:61:85:6f:ee:59:b2:fa:4f:
         f1:3c:fc:ab:d6:a1:98:8b:4c:11:e7:c3:22:e9:40:ef:94:1f:
         ee:db:2d:ca:1d:bc:32:b6:b2:cc:5d:58:af:c6:8a:57:a6:0e:
         fc:4b:7f:1e:16:50:c7:71:93:10:23:55:54:3e:54:f7:bf:eb:
         59:b4:2b:89:74:2f:6c:91:f9:df:05:20:f9:23:e0:fb:af:6c:
         67:f4:fa:c7:98:db:b6:66:8c:b8:60:bb:c9:74:b8:fe:ac:65:
         cc:8f:c0:12:f3:60:83:c5:a8:13:d0:b8:b3:b7:59:5f:7c:67:
         c7:2f:ad:7e:08:45:80:2d:fc:b3:25:c8:55:df:3f:32:4d:57:
         a5:cd:02:9c:a7:83:fa:87:92:72:8f:43:21:5c:14:e5:b0:e0:
         8c:01:b9:97:65:f8:ac:aa:5c:64:a7:10:14:92:ce:1b:6a:48:
         bb:ba:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:46:38 2026 by rpki-client