Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa
File:                     ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa (raw, json)
Hash identifier:          PAxOBOqEy+STv4hsAEd45FdlB6gpR8srj39ChMnncNQ=
Subject key identifier:   64:BC:11:D6:FA:B6:60:11:E4:D2:19:99:B1:EA:1B:54:23:E4:BB:9B
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B41E7173501F0BFDB7272CC80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     54994
IP address blocks:        174.35.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:17:35:01:f0:bf:db:72:72:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=099a030f-41d9-4e36-b85e-47e130f392b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:79:5b:76:be:2b:d1:97:81:b4:48:64:57:
                    98:d1:66:c4:54:23:de:46:f5:ab:37:53:f1:f3:4b:
                    ea:7e:29:cb:fa:c4:27:99:6d:0c:00:2f:33:c0:2c:
                    d7:fb:e6:04:ef:ef:87:57:38:45:9c:82:b1:2b:46:
                    e9:e2:72:9a:83:b8:1b:40:a4:f6:8c:e9:71:fe:52:
                    93:b6:b1:84:30:ea:6b:65:bb:7a:ab:ce:0f:94:1b:
                    ac:a0:67:28:5d:8e:42:08:6e:de:d6:a1:6c:ad:7c:
                    c7:e2:8b:38:44:20:cc:54:27:fa:15:53:6f:b6:2b:
                    7a:bc:9c:e5:4f:f0:a8:c1:f1:f4:92:c3:4e:1c:c2:
                    6c:d7:b7:96:91:a2:ad:10:86:7a:5c:8e:8a:36:ce:
                    b8:d3:34:2b:4b:46:4f:98:f8:88:7f:04:ef:86:04:
                    00:fa:29:8e:21:e3:07:b7:53:f9:fe:30:fa:9f:b3:
                    d9:73:b0:fe:1d:f5:b2:af:2b:7a:c9:af:15:39:ad:
                    be:b6:76:92:dd:9d:fb:c6:06:4e:20:88:cf:95:ba:
                    53:2c:a5:86:eb:6e:a0:02:c7:8c:fd:f0:be:35:b0:
                    f9:50:ac:6a:d3:0d:b9:f4:ea:93:b6:c2:b4:3e:87:
                    3a:57:f3:72:b1:e6:67:f4:7f:38:32:43:bb:d1:40:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BC:11:D6:FA:B6:60:11:E4:D2:19:99:B1:EA:1B:54:23:E4:BB:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:3e:9d:07:c7:fe:04:55:59:b7:78:27:86:de:6c:21:49:
         7d:38:73:27:27:79:39:8a:95:5a:23:13:00:2c:80:1f:92:e2:
         f7:81:ac:0f:7c:e1:82:5c:e7:2c:55:fb:88:01:2e:cb:64:5a:
         ce:f9:db:40:0c:91:b0:48:d6:90:90:9f:c5:e7:39:e4:06:59:
         25:db:59:92:8f:30:c7:97:26:ee:ec:0b:a1:3b:b4:8a:88:aa:
         7c:1f:64:da:91:b6:bf:0b:3e:51:e3:13:10:85:70:d4:04:f1:
         bd:ff:f1:8b:61:85:23:de:5e:df:87:24:ba:3c:91:b4:31:34:
         6b:aa:8c:c7:21:65:69:9e:94:95:2c:a2:40:51:de:fd:9d:9c:
         2b:1c:60:84:4e:5c:13:99:e0:35:d6:6f:94:bd:55:80:84:6c:
         b4:13:11:9c:70:97:4a:b1:0d:72:b4:0a:6a:28:b0:19:2b:ad:
         9b:a2:32:c6:49:a9:f5:bd:28:5c:a5:39:70:78:fd:cc:1d:e2:
         01:f3:38:87:58:bc:4d:91:56:c2:10:a7:63:4f:c0:02:00:79:
         ff:a9:c3:6d:f0:2c:49:35:1d:22:51:78:38:24:23:5e:72:76:
         77:f5:64:32:05:9f:aa:4c:88:db:b5:76:52:b6:d9:a1:eb:5f:
         3d:71:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:56 2025 by rpki-client