Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d26a7198-7649-3b28-b243-156f46fb5d3f.roa
File:                     d26a7198-7649-3b28-b243-156f46fb5d3f.roa (raw, json)
Hash identifier:          4ZPnCh6l2LxZ8DTRaIS7zoo8DUSpeZNk5QZmyNNypdM=
Subject key identifier:   BC:8C:E8:9A:6E:44:2A:55:D1:13:10:70:72:A9:00:A1:76:23:B7:39
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584EDC924E1E3B738CA5F9464C80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d26a7198-7649-3b28-b243-156f46fb5d3f.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        174.35.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:4e:1e:3b:73:8c:a5:f9:46:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=5a503bdd-4898-4fc4-bfc7-645576d164d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:d9:12:cd:14:ac:9b:49:38:7d:5d:f6:88:
                    74:c8:2a:67:0c:e7:a9:57:84:ab:ed:2f:75:3e:b1:
                    bf:8f:cf:23:84:10:7d:12:b7:85:c6:bb:34:d4:a0:
                    ee:a2:4b:8d:60:9c:16:66:ef:69:42:0d:0c:00:8c:
                    08:43:37:3c:92:1e:18:ef:cd:bf:af:4e:97:b9:39:
                    30:61:f5:7d:7c:4d:73:94:c8:a4:9e:1e:63:d5:5b:
                    07:6e:97:f5:57:b9:3f:30:a2:7d:4a:e6:33:ac:e2:
                    da:e3:6d:1f:8b:a4:2d:ea:80:11:0e:94:58:ca:b6:
                    9c:8f:6d:75:f2:cb:46:ed:3f:d6:ab:6b:0b:ea:c8:
                    bd:82:b0:7d:bd:bb:04:88:e7:eb:80:e5:24:46:36:
                    13:c8:75:13:b0:65:fd:84:54:51:55:af:a1:7a:86:
                    94:aa:69:75:2a:f9:89:d4:12:95:f0:12:62:75:da:
                    56:89:a4:99:7c:a1:2d:8f:02:36:64:31:5e:fe:20:
                    ab:9e:8d:7c:fa:cf:00:56:20:d0:3c:12:75:89:b5:
                    7f:02:2d:c6:96:5e:e8:4a:a6:49:88:37:01:9e:b1:
                    3c:8d:b0:9e:84:88:9c:23:4b:96:3d:13:3f:d2:2d:
                    0c:26:c0:f7:84:75:25:a5:7b:58:55:5b:d4:48:83:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:E8:9A:6E:44:2A:55:D1:13:10:70:72:A9:00:A1:76:23:B7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d26a7198-7649-3b28-b243-156f46fb5d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:ba:29:f4:4b:03:58:b9:35:7b:f0:71:46:36:87:65:ba:
         8d:e7:9f:06:66:6e:d3:52:40:f2:bd:aa:fb:53:e3:63:de:f0:
         de:14:a9:cf:60:b5:1e:3b:9f:4b:5f:a9:83:d0:6f:b2:56:95:
         11:7e:57:0c:3f:a0:5d:8c:73:c7:ba:f7:a7:80:75:0a:44:d6:
         7c:5f:1d:9a:9e:c7:7b:16:ff:35:f8:21:c8:04:2c:47:43:8e:
         19:b5:93:dd:58:bd:28:a1:47:81:c7:ae:c5:a4:5f:47:8c:30:
         00:b6:eb:bd:f6:8e:ca:0f:da:ea:60:5a:62:e0:33:f3:0d:17:
         a1:51:e6:86:25:b7:ee:92:6c:26:2f:5a:e0:4f:1f:4b:fd:a2:
         bd:1c:b8:5a:3a:c0:18:b6:97:10:30:b6:e1:0f:1b:6f:19:b6:
         2a:85:bc:42:7a:75:5f:d3:82:71:bf:f6:33:99:25:b7:8b:a4:
         df:c8:f8:cc:59:f7:d7:33:7f:4c:6f:d6:9e:a3:23:f1:4e:e3:
         d5:93:99:64:b1:dc:5b:76:04:8e:c6:d2:28:fb:f2:23:1f:fb:
         2c:ab:4d:97:10:4e:7b:dd:06:2b:f5:23:8a:1b:69:7a:56:a6:
         33:0f:d1:c6:30:bd:f4:54:d5:7b:58:60:59:df:fd:81:4f:60:
         9a:ad:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:04:28 2026 by rpki-client