Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
File:                     89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa (raw, json)
Hash identifier:          7b7Ah5emNwODoeXDnhg4GoChUOkPQuMqXrgL6qPTQwI=
Subject key identifier:   C2:B1:26:05:C1:DC:AC:90:53:B0:4E:82:87:84:72:7C:28:DE:33:B0
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584ED001F326F163FD61977C4EB0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     237
IP address blocks:        35.24.0.0/17 maxlen: 17
                          35.24.128.0/18 maxlen: 18
                          35.24.192.0/19 maxlen: 19
                          35.24.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f3:26:f1:63:fd:61:97:7c:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=459b1e4a-2fb4-4ced-8a9f-0c4d4ea1cc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:7b:70:fe:07:b2:64:1d:0b:85:09:f5:bc:
                    19:44:c1:a2:74:bf:1c:19:69:dc:ed:3b:3a:60:f6:
                    eb:e0:e6:96:01:09:04:31:c1:2c:80:f3:95:d5:f1:
                    6a:fe:c3:1f:e2:57:28:45:1b:e5:b9:ef:34:a5:0b:
                    50:c2:11:d0:b9:7a:21:09:63:c8:df:12:35:6e:51:
                    10:c3:4c:cb:f4:b4:56:5e:c7:8e:05:e2:48:22:a5:
                    ff:e3:69:ba:9e:c2:f4:fa:d8:59:10:6a:2d:82:bf:
                    9e:03:09:77:38:7d:bf:a3:21:2f:0c:72:e5:b9:0d:
                    ff:05:58:be:a1:5f:28:9f:0d:38:25:a8:00:d5:1b:
                    9e:5e:77:98:d4:e7:6e:63:a1:97:e0:db:14:82:88:
                    5d:42:94:6d:5e:f5:62:77:f7:73:e3:02:00:f4:7a:
                    06:9c:1b:1c:ec:25:94:ec:21:5d:d0:ad:a1:da:d5:
                    65:3a:67:65:20:33:60:51:9b:f5:d8:57:3b:8d:1b:
                    35:41:5a:98:a1:f8:19:6f:f4:46:38:a9:f1:aa:98:
                    40:ab:34:b1:88:bf:10:e5:b1:98:a6:5d:37:65:0f:
                    3e:7f:a8:08:49:da:9a:b6:8c:62:4c:c4:80:1b:6b:
                    51:c5:4f:55:da:6f:24:0d:d7:58:28:91:d7:ce:73:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:26:05:C1:DC:AC:90:53:B0:4E:82:87:84:72:7C:28:DE:33:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:46:ce:e2:bc:a6:c4:11:57:65:0b:cb:63:1e:e3:4f:f6:77:
         b8:d9:94:87:b3:01:bd:0b:6f:6f:49:bf:a4:29:37:d4:20:9b:
         cd:a1:53:8c:0c:d8:59:d3:ba:02:17:82:fa:9d:e1:c8:b0:75:
         13:ac:f2:8d:b8:20:85:15:6a:c5:58:e8:18:a6:34:c2:f4:bf:
         54:b4:b4:98:20:8e:d5:6e:28:05:57:46:21:ab:6d:06:96:7e:
         6d:44:ab:88:f0:57:44:ce:7a:71:3f:e0:7b:af:91:a8:23:40:
         a0:5c:e4:2e:07:79:f9:3d:25:40:59:87:30:02:04:38:09:a1:
         0b:0c:10:c9:dc:ba:73:c3:7c:24:6a:41:07:7f:34:2a:46:73:
         fa:3a:c5:2e:86:dd:fc:f9:4c:5d:5b:cd:da:d7:d1:75:b1:d0:
         38:3e:3b:c8:e0:af:15:59:ac:2d:52:6c:b1:c9:04:65:a8:67:
         97:2d:6b:50:8d:46:85:7c:47:01:43:b3:bf:14:a8:c3:b6:6a:
         19:f2:be:50:8b:cc:f1:9e:2d:f0:19:90:b3:d5:cb:d6:11:dc:
         84:70:8a:73:92:ea:de:22:c4:60:35:5e:e9:2b:0b:1e:f1:67:
         a1:3e:5c:53:73:4a:ae:95:33:37:a5:4d:af:96:32:46:69:ae:
         84:7d:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:51:42 2026 by rpki-client