Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ccbe50ff-779c-3040-bbb2-c9c10d6d4758.roa
File:                     ccbe50ff-779c-3040-bbb2-c9c10d6d4758.roa (raw, json)
Hash identifier:          4yR5N7jFj3MuvdGasU2g3GSM0DY2ITNBjDc1ekboHsw=
Subject key identifier:   6C:BB:2D:C5:A6:38:39:44:D7:42:AA:B9:91:BC:3B:13:04:1A:2E:39
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584EDC91E29DE7E7D1CC8AF913C0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ccbe50ff-779c-3040-bbb2-c9c10d6d4758.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        174.35.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e2:9d:e7:e7:d1:cc:8a:f9:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=1e859740-3b12-4fe4-95d8-2c08fabea8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:c6:e3:37:4b:26:ad:37:6b:77:f6:b1:57:
                    70:cb:74:a1:85:90:49:3e:59:c0:34:26:d7:de:53:
                    8a:36:00:ce:10:68:bd:0c:55:14:b8:93:99:57:9c:
                    cf:c5:a4:b2:c8:8c:3a:23:49:a1:be:e2:dd:e0:ab:
                    79:bc:61:e6:8c:ef:f8:97:11:3b:dd:e4:ce:cc:bd:
                    70:c3:08:98:73:37:64:2e:ad:de:ea:ba:97:d2:d5:
                    c2:70:f3:88:0c:13:a3:61:0d:d3:33:5f:82:f9:0c:
                    42:9f:0a:c5:40:44:d3:c5:b7:2a:08:e4:6b:79:77:
                    0d:43:71:75:1e:fd:4a:c4:18:6d:66:36:28:36:e7:
                    5d:2c:c5:e8:24:a7:ac:15:e2:b1:88:4b:86:13:1e:
                    22:fc:af:c9:aa:ef:0a:02:1b:80:3d:32:a7:fa:3c:
                    ee:a7:c9:0c:78:a5:84:8b:ce:ec:bd:bf:09:a8:8f:
                    1a:42:3d:ad:9d:e8:ef:d7:e4:80:81:d7:c4:22:09:
                    8a:87:92:d9:ab:3d:59:47:44:56:11:ad:92:93:24:
                    24:3c:62:8c:5f:1e:76:ab:7a:59:ca:9d:56:ee:33:
                    97:b4:e7:45:bf:eb:f2:ee:b0:17:d5:f4:ff:7e:af:
                    32:aa:f4:ea:3a:f9:f2:60:97:ba:57:30:7d:c4:83:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BB:2D:C5:A6:38:39:44:D7:42:AA:B9:91:BC:3B:13:04:1A:2E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ccbe50ff-779c-3040-bbb2-c9c10d6d4758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:63:90:8f:6f:31:04:13:fb:16:c7:2b:2d:de:77:bf:29:db:
         47:8e:6c:d9:bb:1c:f7:a2:d4:a7:74:d3:2c:0b:57:ea:14:be:
         2e:ae:2d:a8:e1:55:b6:4f:56:c4:9a:d3:13:a5:ee:32:e9:f4:
         6d:6c:6e:16:f5:d4:f5:40:52:5a:2c:48:45:17:0f:3e:90:51:
         d5:42:10:ba:b1:84:3d:0e:73:fc:16:1e:72:ff:9e:fb:83:ff:
         35:2a:c8:31:6f:4e:a0:29:6d:22:12:1a:09:a2:da:29:a0:3b:
         c3:e3:bb:26:0d:e0:0c:0a:d7:8a:d0:63:78:44:14:d8:a2:37:
         d2:b9:0a:1b:25:bb:74:18:fd:1a:63:fd:21:f9:af:b4:e8:e5:
         44:46:c3:fa:12:22:16:70:9b:7b:38:89:da:1f:24:b5:77:a2:
         70:54:d4:67:93:eb:9a:1c:c4:80:d2:3a:52:8c:2b:6e:75:6c:
         2e:72:8d:30:9d:0e:31:61:36:f2:dd:a8:b6:74:47:06:88:f7:
         c8:c3:3c:2b:c3:94:fb:f6:48:bb:38:f8:4b:07:f9:97:0d:c4:
         46:39:75:97:73:c2:a8:a3:1a:6f:f9:23:d1:88:d8:3e:a8:82:
         16:7a:b8:5f:43:4e:1b:c0:1e:59:9a:9e:38:fb:a8:26:13:a0:
         74:12:3c:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckeKd5+fRzIr5E8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MWU4NTk3NDAtM2IxMi00ZmU0LTk1ZDgtMmMwOGZhYmVhOGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CTG4zdLJq03a3f2sVdwy3ShhZBJPlnANCbX
3lOKNgDOEGi9DFUUuJOZV5zPxaSyyIw6I0mhvuLd4Kt5vGHmjO/4lxE73eTOzL1w
wwiYczdkLq3e6rqX0tXCcPOIDBOjYQ3TM1+C+QxCnwrFQETTxbcqCORreXcNQ3F1
Hv1KxBhtZjYoNuddLMXoJKesFeKxiEuGEx4i/K/Jqu8KAhuAPTKn+jzup8kMeKWE
i87svb8JqI8aQj2tnejv1+SAgdfEIgmKh5LZqz1ZR0RWEa2SkyQkPGKMXx52q3pZ
yp1W7jOXtOdFv+vy7rAX1fT/fq8yqvTqOvnyYJe6VzB9xIPo8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGy7LcWmODlE10KquZG8OxMEGi45MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvY2NiZTUwZmYtNzc5Yy0z
MDQwLWJiYjItYzljMTBkNmQ0NzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriNeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFjkI9vMQQT+xbHKy3ed78p20eObNm7HPei1Kd00ywLV+oUvi6uLajh
VbZPVsSa0xOl7jLp9G1sbhb11PVAUlosSEUXDz6QUdVCELqxhD0Oc/wWHnL/nvuD
/zUqyDFvTqApbSISGgmi2imgO8PjuyYN4AwK14rQY3hEFNiiN9K5Chslu3QY/Rpj
/SH5r7To5URGw/oSIhZwm3s4idofJLV3onBU1GeT65ocxIDSOlKMK251bC5yjTCd
DjFhNvLdqLZ0RwaI98jDPCvDlPv2SLs4+EsH+ZcNxEY5dZdzwqijGm/5I9GI2D6o
ghZ6uF9DThvAHlmanjj7qCYToHQSPCo=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:12:39 2026 by rpki-client