Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
File:                     e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa (raw, json)
Hash identifier:          t8UsA6hppeuYVRX7tB2ZJOl9B1VXbCeISZfP3VI5Hi8=
Subject key identifier:   71:E4:C2:47:CF:8C:7D:B8:D0:2C:E5:57:3B:C4:5C:44:5C:3A:1F:1C
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584F497406F5201597163E4E8360
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        174.35.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:06:f5:20:15:97:16:3e:4e:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c1ed07c7-ddd9-4d3a-ba4a-0933312ad3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:46:27:19:74:f7:e1:8c:d5:39:b8:54:a3:
                    de:4c:3e:04:23:22:65:fe:da:0a:f7:0e:2f:81:c9:
                    2e:a8:08:e0:fe:9b:78:c6:a6:91:1f:e2:32:1e:65:
                    f7:24:5b:be:cb:31:73:b0:e6:da:43:e2:d3:c4:0d:
                    d8:a6:47:5e:43:77:27:bd:e6:1c:6a:a6:65:24:62:
                    03:0e:06:54:df:ee:de:68:04:92:3c:22:b2:b2:3b:
                    70:f1:b7:c2:1e:68:6a:54:2b:ce:72:43:32:1a:4b:
                    ae:34:02:b1:5f:4f:e1:6d:d2:62:5d:23:76:29:c6:
                    1d:04:cc:6d:8e:df:87:49:e2:37:d5:43:20:fb:c9:
                    4d:e2:ac:00:81:94:90:ad:e8:97:91:71:20:01:8d:
                    2a:7f:6d:bf:d7:bc:ef:96:f3:4f:f4:fe:09:43:11:
                    f8:7f:74:13:3f:5b:45:80:a2:64:5c:30:d1:1e:c1:
                    2b:52:33:b8:f9:a2:b8:98:63:66:2f:da:09:f2:58:
                    61:ba:4a:c9:a2:25:a4:7c:77:96:57:4c:57:4d:0c:
                    b0:c2:cc:e9:eb:90:c1:bf:65:f7:cd:7f:e9:33:cd:
                    87:85:af:6b:7d:c9:85:c3:90:66:e8:70:cf:72:56:
                    55:28:67:c2:fe:5f:65:ed:de:40:b5:db:40:75:b7:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:C2:47:CF:8C:7D:B8:D0:2C:E5:57:3B:C4:5C:44:5C:3A:1F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:c8:0d:e6:06:62:5c:27:74:6a:80:09:aa:54:42:60:9d:
         2e:c7:df:a3:a7:80:2d:5a:ad:45:90:80:d9:e6:9e:85:d4:d4:
         50:52:f3:36:97:63:ac:69:59:94:f3:eb:17:a1:bf:91:35:c0:
         d1:77:97:4c:70:9c:89:72:51:ad:db:0d:a3:24:79:8c:d8:2e:
         29:86:d6:4a:da:e3:87:ce:02:ac:22:c8:b6:45:59:7a:67:59:
         99:6a:86:56:ca:8d:e8:a7:c0:e6:51:e8:f1:90:78:13:29:62:
         f5:fc:8c:1e:30:4a:bd:60:2b:aa:c1:bc:0b:5f:8d:29:7c:7e:
         b8:1e:f4:a3:01:b7:a0:2b:09:38:c1:f2:14:0e:6d:dc:84:df:
         8c:1d:2e:a4:d4:20:24:cb:ab:8c:4d:ae:d1:58:c7:58:61:0a:
         9e:3e:bf:c5:e9:c5:65:ea:13:bd:d9:93:a4:d9:0d:bc:d1:1f:
         ec:f5:4f:8d:8f:3c:01:99:94:03:a3:d6:15:a7:d8:42:17:d7:
         75:38:4b:20:73:9e:57:3a:0f:74:f5:61:c5:f3:20:2b:a3:16:
         7e:05:9a:cb:a8:a1:95:c4:d6:51:dc:da:5c:7e:40:3d:4d:da:
         8d:61:b3:8b:60:f4:3c:0e:8d:88:0a:7d:b8:53:3e:5b:d8:57:
         d3:0f:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:38:52 2026 by rpki-client