Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
File:                     b0293e2a-b333-3875-817a-b2830f596b7b.roa (raw, json)
Hash identifier:          ltbj2rPwY91BmiXDcZwIrMWCkFg2TGYB4FMQJbp6B+Y=
Subject key identifier:   E5:A5:44:14:D1:88:95:2F:35:1B:39:A0:F2:51:04:B0:36:9C:B7:3E
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584A5765C076DAA5C22F93FE3FD8
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     48737
IP address blocks:        174.35.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c0:76:da:a5:c2:2f:93:fe:3f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=ba8dd32e-2ffb-469a-892e-b7def00136fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:df:9c:fc:f0:04:da:ea:15:c9:46:b9:45:
                    9d:9c:0b:67:e8:dc:d2:86:65:60:92:72:13:0c:b3:
                    6b:9a:12:e3:c2:01:81:57:6b:8a:f4:1a:a6:81:35:
                    31:ca:79:70:fe:ab:b4:a2:25:3f:c9:21:c7:01:6b:
                    2e:86:48:f9:52:73:58:ab:e2:74:d5:3d:cc:6e:57:
                    50:46:5f:84:36:30:15:bb:0f:7d:11:ac:7c:16:db:
                    b2:d7:68:c9:a6:96:63:5c:6a:01:20:4c:a1:31:77:
                    05:96:7c:23:c3:76:9e:f1:1e:43:5b:6c:da:c9:15:
                    d6:6d:e2:4c:55:16:33:0a:06:2c:3d:d8:84:b1:fc:
                    6a:c7:31:78:ff:d4:f8:d1:12:e6:92:28:32:ee:4e:
                    93:51:aa:ac:8e:2b:4b:7c:24:4b:1e:43:4d:5d:70:
                    17:c2:09:d2:72:7d:4c:a1:7e:33:e9:05:02:5f:11:
                    f8:e4:a6:e3:e3:a6:1b:53:d3:f7:64:1f:5b:9b:a3:
                    28:bb:29:b4:96:a9:f1:2d:95:e6:6d:18:6b:bb:d5:
                    c1:d0:6d:a9:45:fd:35:fb:a6:2a:67:53:bd:59:62:
                    8d:63:32:5b:2e:91:59:3d:ab:1b:09:22:8f:d5:fe:
                    95:e6:dc:34:a0:93:b8:d7:b3:14:55:f0:a8:34:4b:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A5:44:14:D1:88:95:2F:35:1B:39:A0:F2:51:04:B0:36:9C:B7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5a:c5:63:77:0f:39:8e:7d:85:3b:7d:78:13:f6:18:ce:29:
         25:43:48:8d:8b:12:50:ef:5a:ce:2c:2a:91:a8:cf:ca:ff:e4:
         79:58:73:b9:a7:f8:b5:b6:89:02:1a:39:5b:88:9b:ba:5b:77:
         5c:15:43:d3:99:35:f4:b7:2a:35:b1:a2:ff:72:ce:ab:02:4f:
         23:5b:87:d9:f2:76:c0:75:a6:6c:a9:54:34:fc:16:c7:52:b4:
         20:75:db:dc:80:2f:80:3f:08:00:04:03:81:56:48:ad:94:74:
         1f:9d:f3:85:ee:87:65:dd:57:76:be:be:d0:9f:1e:21:37:00:
         25:25:b4:40:6a:e2:58:b7:79:a9:7b:11:00:90:b1:af:d9:d1:
         4a:f2:20:31:9b:69:4b:98:7f:ba:d0:87:51:55:87:a8:9d:36:
         67:2d:54:15:0a:da:ac:79:43:9d:8d:77:7d:1d:a8:5a:e8:ca:
         9c:90:52:a6:0d:88:74:55:18:1e:63:67:23:0c:f4:12:63:ab:
         f6:4c:29:a9:27:73:1d:a6:58:05:bd:7a:3d:bc:b1:be:fe:5d:
         6a:e2:0f:b9:7b:d7:aa:69:96:55:e9:7b:ad:0e:cb:cd:6c:d7:
         11:39:0c:6b:cc:2f:b7:c9:af:34:c2:71:d0:ab:a5:6a:40:e8:
         2d:fe:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:12:49 2025 by rpki-client