Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa
File:                     a1b5ebce-fc37-3f3f-af93-219b7b805362.roa (raw, json)
Hash identifier:          9sI8koPVSuKOzDR0FlxddRZBpxcXOOafp+HeM6FzR2I=
Subject key identifier:   15:6E:B4:65:5E:B6:C5:6F:F3:B9:F0:0F:25:1F:95:04:9D:8F:82:56
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584EDC91E77A95298C66B81F6440
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        174.35.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e7:7a:95:29:8c:66:b8:1f:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=6a7ac04e-1ec7-4785-9874-7964c09516df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d1:72:0f:68:47:e2:a4:51:2c:81:57:9c:5f:
                    a8:0b:33:69:0c:a5:e3:db:50:d4:82:8c:64:1a:e0:
                    21:b8:2d:c5:77:a4:0d:0c:ad:9e:64:ca:d2:e3:d6:
                    ff:d9:3f:42:2a:c2:b9:60:47:65:5b:cb:31:b0:a5:
                    81:85:10:7b:55:cd:bf:aa:e3:ca:d7:80:ff:94:3d:
                    03:f3:6b:33:04:b5:a5:c0:f0:f0:9e:91:cc:d6:4c:
                    b4:7f:c8:d4:c4:b2:b0:78:e1:8e:88:16:47:8a:92:
                    e7:72:ee:ce:f2:0a:46:c0:35:c4:4d:95:34:5f:5d:
                    64:e9:39:c9:65:27:e0:25:57:6a:04:6e:8c:00:07:
                    24:b7:49:31:fb:dc:08:e7:8a:f4:7a:f3:5a:1a:de:
                    92:cf:81:bd:bb:d4:c4:15:83:cc:5f:9a:85:31:05:
                    3a:f7:f7:3b:ba:3f:48:96:70:4a:86:ff:0d:26:dc:
                    b7:e7:21:86:99:83:18:20:69:0a:41:e6:5c:3d:b8:
                    1a:2d:6a:6c:ef:41:30:eb:b3:08:a0:d2:30:6b:b8:
                    62:ea:04:46:c0:ac:4a:96:0e:47:de:64:f3:0f:d5:
                    a6:79:26:15:4d:ae:da:1d:d5:73:56:92:82:ea:12:
                    9b:d4:46:6f:d9:40:99:50:c5:3b:c4:da:4b:ca:76:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6E:B4:65:5E:B6:C5:6F:F3:B9:F0:0F:25:1F:95:04:9D:8F:82:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:37:27:2d:bf:c8:64:0a:12:d5:13:e6:cf:07:4a:32:2a:bc:
         78:e7:28:ea:37:fd:b5:8a:3f:24:11:d0:ef:b0:f0:67:05:b6:
         ec:b1:a6:90:a2:96:bf:66:ab:35:73:4f:0d:25:95:a0:0a:02:
         ba:b3:0c:f6:02:35:da:68:d4:24:9f:ff:9d:ba:ea:f3:29:7a:
         9a:98:d6:c0:93:35:75:57:cd:71:7e:67:d1:b6:14:c3:60:73:
         fa:65:cf:f7:8d:93:88:a9:da:83:33:55:e1:20:83:04:00:77:
         7b:b9:a2:16:58:9e:d0:7c:71:88:65:0e:c5:a1:54:48:ce:2b:
         a4:90:a4:39:93:d6:29:7e:87:25:b9:3c:f0:46:36:29:7f:61:
         a8:ac:d2:78:01:1d:ff:3f:ad:2c:a4:b3:6f:3b:3b:aa:6d:52:
         b3:c4:c0:67:9e:ad:64:67:dc:6b:ae:28:51:84:04:38:ba:b2:
         b9:75:b9:94:c1:d2:30:d5:47:e0:f9:a6:61:47:38:e4:4e:bb:
         39:99:37:5a:df:3c:f0:87:c8:f2:b0:09:8b:96:ba:7c:19:3f:
         5e:1d:1f:c5:b1:e9:27:2c:f3:59:db:50:46:d7:ef:cd:c4:9c:
         50:7c:56:28:49:32:bd:ba:f1:25:c0:f8:e7:90:11:be:06:a2:
         e6:2b:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:30:12 2026 by rpki-client