Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa
File:                     1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa (raw, json)
Hash identifier:          N0bnhVB7mAlLIH1HyHQ62ghblq4dQeP8yebg26t6l6o=
Subject key identifier:   E7:53:75:B2:C7:F2:27:AF:19:22:31:56:DE:4C:7C:73:40:01:48:2E
Certificate issuer:       /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial:       010D0C9F4328584DBD05A206F1146C3549D57A00
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     29744
IP address blocks:        216.196.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a2:06:f1:14:6c:35:49:d5:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=def3f738-dcc4-4f7a-8a0c-fcb0bf9df0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:91:18:06:a9:29:ac:2a:25:16:b7:e5:c7:
                    3a:67:a5:18:7b:8b:96:5a:76:77:c3:35:11:f8:ec:
                    f1:50:df:71:6a:f9:e1:40:6d:c3:bc:3c:40:62:53:
                    fb:c2:f3:6f:30:f9:ba:70:81:cc:64:f0:96:9c:e5:
                    8a:84:38:ac:a2:f6:1d:09:4d:5f:25:5e:4f:08:c7:
                    fd:a9:e6:83:b6:fe:51:a2:0a:f7:bb:2b:bc:93:19:
                    34:96:22:4c:26:af:7c:09:0c:09:b1:47:40:b5:96:
                    09:85:14:16:a0:66:ad:32:82:f3:f5:26:e1:75:0d:
                    10:54:7c:ba:9c:70:8e:cd:40:bf:8c:7a:47:c6:4f:
                    2d:13:b2:28:44:29:44:1c:7e:1a:dc:87:aa:63:ee:
                    18:48:54:b8:2f:ed:0c:6e:ce:1f:20:70:51:6a:77:
                    a8:e0:50:ea:63:0d:7c:2d:a0:1c:7a:17:74:42:f7:
                    52:59:a6:67:05:04:ff:92:13:d1:2d:8a:c5:38:b6:
                    1e:8f:b4:76:ab:25:4b:ae:3b:a9:5e:b4:f0:eb:86:
                    2f:33:8c:c6:8d:5c:b0:69:cc:c7:f4:86:ca:77:c9:
                    0a:74:7a:c0:10:80:49:6b:94:df:cc:27:e5:d0:4e:
                    85:92:75:92:bb:70:2e:ec:31:0d:f1:be:43:d4:9b:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:75:B2:C7:F2:27:AF:19:22:31:56:DE:4C:7C:73:40:01:48:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl

            X509v3 Authority Key Identifier:
                keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.196.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f0:db:80:97:34:36:52:8d:49:fe:63:ec:5f:fc:5f:28:41:
         fd:e4:6f:bc:5f:82:54:21:27:db:d4:2c:65:37:36:18:9f:27:
         93:4e:34:59:17:ff:6c:b4:62:0d:8e:0a:e5:15:c7:00:57:1e:
         d6:b1:32:5d:6b:81:19:90:5c:b2:8b:64:c3:15:f2:31:a9:b6:
         21:7b:8b:ba:1e:3c:7a:66:58:f5:f8:b8:a7:07:1a:48:f6:9f:
         f7:bd:bb:dd:ce:68:25:21:63:2b:e0:79:4c:b1:ad:01:70:29:
         13:62:f8:5e:d6:f3:68:4b:38:f1:d0:92:40:fa:48:c5:94:12:
         1f:f4:b0:05:6a:d4:32:a7:da:76:f1:2e:a3:6f:6d:39:28:1e:
         1f:57:e2:23:0e:12:ae:57:df:9a:85:70:db:2d:3c:03:ef:cb:
         d2:d1:e5:1d:29:5d:c1:13:71:ec:cf:8d:d9:f3:c3:93:77:ae:
         7f:3d:c2:6b:fa:1b:b4:98:81:c1:f3:ce:ca:50:15:93:be:06:
         5d:06:3c:93:c0:97:54:ea:5f:66:86:51:bf:25:ed:b2:34:bf:
         31:07:75:e9:33:ca:54:33:b1:e2:7c:87:34:92:c4:f8:a1:ba:
         7a:be:fb:9f:88:77:11:e8:ba:1c:25:42:39:f2:67:65:e7:13:
         ec:2b:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:00:04 2026 by rpki-client