Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa
File:                     e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa (raw, json)
Hash identifier:          zGdXNDqtCdM4QsjdgkuB0L/UQImOYV1jXhScZwTyoVs=
Subject key identifier:   BB:C6:BC:32:73:CB:A7:15:F1:09:CA:2B:BC:E7:4B:41:03:EF:A8:3B
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584D316F7536601F9F55BB53FF80
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     400110
IP address blocks:        184.169.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:75:36:60:1f:9f:55:bb:53:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=3afe1698-169b-4c77-a57b-5e7e1ffb6ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:09:40:4e:df:03:2d:fb:42:34:34:ef:67:
                    4a:65:3e:27:35:6b:ee:9a:7f:d8:d9:e8:0c:71:ec:
                    dd:94:b0:be:84:81:e6:c8:c2:ad:68:67:90:2b:9f:
                    66:87:f0:80:be:b0:7c:6c:9e:d4:d4:c4:5c:89:b6:
                    31:c1:9d:d5:0c:b9:20:f8:8b:91:91:e7:0a:c1:24:
                    91:e1:fe:e7:67:67:4c:33:bf:fe:56:c9:8d:cb:d4:
                    3c:10:80:61:20:90:29:67:95:d5:24:d2:19:c4:1a:
                    99:a2:a8:27:d8:79:c9:af:72:38:0e:77:80:ed:47:
                    6f:f9:c0:25:5c:69:22:3c:5f:5f:f9:38:c2:4f:45:
                    ca:a0:e4:0e:fd:67:e6:d6:ca:15:c3:ad:bc:21:b7:
                    92:d4:c0:71:94:2b:f2:3c:18:80:27:1a:db:88:72:
                    f4:f9:4e:7d:04:9e:e3:90:8e:c2:bb:ca:da:ba:83:
                    90:a9:c9:38:a7:5c:db:6c:11:25:2c:ec:8d:4f:cc:
                    d0:86:30:78:0c:76:bd:40:9e:0f:14:f5:7f:ac:60:
                    d7:83:5b:7b:ee:9b:14:1d:f0:83:71:89:1a:8d:e0:
                    f5:fe:73:68:fa:9e:f3:48:70:ea:29:e9:b5:8d:0b:
                    53:c5:d5:8d:3b:a9:57:5b:36:b8:97:ff:70:a9:eb:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:BC:32:73:CB:A7:15:F1:09:CA:2B:BC:E7:4B:41:03:EF:A8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/e030ee12-7073-3a39-97c0-4a96f19e2bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f8:5f:88:c2:34:f1:fe:f9:5f:ac:02:43:95:14:34:bc:eb:
         da:7a:af:98:ad:c0:77:83:9a:53:30:1f:68:71:25:0a:dd:46:
         ea:a5:1b:b6:71:40:58:ff:88:de:8d:72:f0:3f:ef:79:14:97:
         e8:37:9e:02:cc:2a:a6:6d:e6:a7:d0:08:94:5f:41:01:7a:0a:
         b9:29:a6:79:98:6e:d7:62:48:71:80:89:c0:a7:44:25:d8:c6:
         91:78:63:85:ec:a9:86:02:2b:69:a1:f5:31:ae:5c:60:dd:0b:
         9a:65:b1:84:c1:89:c7:ac:b6:36:52:1c:67:b7:89:82:33:8d:
         b1:0f:12:37:56:a0:74:9a:d2:57:77:1f:82:f4:c6:9b:70:b1:
         10:94:c3:4f:2e:6c:b1:ae:3e:30:f7:d1:97:3f:d1:fc:27:38:
         a4:b3:62:d1:7d:08:fc:74:43:6c:1c:b6:72:39:88:8a:9f:28:
         02:5a:cd:ec:84:2f:23:f4:72:3e:38:55:44:1d:b5:d5:4f:2d:
         30:e0:ac:3e:ed:af:a9:b5:93:6c:a5:ba:20:9b:b6:a7:22:44:
         e7:9c:69:88:f8:39:4e:cb:c0:61:f4:8e:2f:e7:a0:b1:8b:5b:
         02:a6:92:da:55:12:a4:17:35:26:e7:f4:c3:e1:78:b2:96:b0:
         44:00:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:07 2026 by rpki-client