Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0c3205d1-012d-31d6-906f-f1c8d2aa2455.roa
File:                     0c3205d1-012d-31d6-906f-f1c8d2aa2455.roa (raw, json)
Hash identifier:          P0qg86eQJo9Bq+l+5FRLkqOjCQthxd2M8d9WCvELhaQ=
Subject key identifier:   C2:76:E3:89:09:89:04:6B:0C:33:54:6A:A7:E3:47:B4:CE:58:7A:B7
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E4D51847173B99214CB118A00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0c3205d1-012d-31d6-906f-f1c8d2aa2455.roa
Signing time:             Fri 26 Jun 2026 17:30:00 +0000
ROA not before:           Fri 26 Jun 2026 17:30:00 +0000
ROA not after:            Thu 24 Sep 2026 17:30:00 +0000
asID:                     64286
IP address blocks:        98.159.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:51:84:71:73:b9:92:14:cb:11:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 26 17:30:00 2026 GMT
            Not After : Sep 24 17:30:00 2026 GMT
        Subject: CN=4ae026c2-a9e7-4159-8da6-fee98706ba03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:76:64:41:d1:5e:05:63:08:9d:4f:a6:bc:d8:
                    c3:17:e2:96:36:3d:b8:4d:a3:c9:2a:97:5f:2d:c0:
                    f0:d4:a8:ab:0e:3d:2d:f8:0b:ee:47:37:f7:8c:25:
                    0d:53:10:fe:d4:e1:e7:ca:db:54:17:a5:b8:de:e1:
                    8e:8b:8f:8f:6c:68:f4:d7:13:b8:f4:a0:46:59:37:
                    0f:cd:bc:17:06:63:f4:86:fa:32:14:b4:c0:f3:44:
                    bf:53:5e:2b:3d:0e:b7:c1:10:0e:53:b3:de:e9:79:
                    36:b6:49:46:0d:75:91:80:3f:c6:a3:77:15:2a:8d:
                    3d:dc:79:93:85:07:bd:78:4d:93:c5:20:64:00:28:
                    1a:65:a6:d6:b0:84:06:98:be:d3:c4:28:ad:e4:a4:
                    44:7c:81:65:27:21:48:37:5b:39:12:4a:4e:f2:f0:
                    08:9a:3e:75:d2:38:b0:6f:91:45:d7:84:6d:5a:4f:
                    2d:3d:9f:40:57:1c:1d:ae:ef:26:1b:53:60:d1:2f:
                    b4:10:f4:0f:13:ff:8a:77:a2:5d:f9:f5:ee:be:65:
                    69:b8:b5:cb:4e:aa:36:53:20:63:5f:a7:85:0c:84:
                    72:4e:83:b7:75:b3:4f:51:2b:86:f2:2d:be:98:42:
                    ee:12:8d:15:9c:5c:35:37:8c:58:4e:18:e5:e9:41:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:76:E3:89:09:89:04:6B:0C:33:54:6A:A7:E3:47:B4:CE:58:7A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0c3205d1-012d-31d6-906f-f1c8d2aa2455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:33:33:d3:77:7e:bc:ab:6c:ff:15:0d:51:92:ed:8a:dd:2e:
         41:5b:3f:e2:4f:04:ff:ca:43:83:84:20:cc:37:e3:14:5a:c1:
         2e:29:c0:50:cc:4d:0f:39:cb:c8:5c:76:b2:ee:03:69:7e:26:
         74:1b:b0:03:36:65:e0:31:3a:39:57:81:b9:30:8f:15:be:12:
         88:f6:a8:44:f0:d6:c4:6e:4c:90:fa:77:72:c1:01:6e:bb:75:
         d6:11:6d:f4:19:a4:bc:46:e7:3b:42:53:69:39:ad:90:d2:3d:
         96:f2:5e:1d:1f:39:02:0d:b7:1a:ad:86:5f:d2:2d:4d:68:52:
         06:46:c0:4e:37:d5:ff:0d:c9:e6:9d:37:d0:27:29:ad:5b:ae:
         f4:13:0e:44:68:2f:dd:69:eb:f2:f8:3b:0c:80:38:fd:ff:51:
         5e:ea:a2:f6:f9:c6:20:87:d7:ca:ce:2c:75:16:36:de:ab:3b:
         d8:c1:99:0c:9a:59:bf:14:ce:43:77:74:d6:5a:5f:62:12:9b:
         5b:78:b0:3c:8e:2d:2e:d1:28:a8:c1:89:1e:ff:4f:1f:03:5c:
         40:99:6c:4d:d3:ae:23:09:61:55:6c:82:00:ac:3a:29:25:32:
         8e:8f:13:a8:4e:b5:dd:e2:79:72:05:48:fc:35:59:32:68:48:
         ed:68:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:37 2026 by rpki-client