Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa
File:                     e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa (raw, json)
Hash identifier:          7+LPWHItdCEiAxt/3+2C/8gBbb5zjDtiXCSFimliSeg=
Subject key identifier:   4E:E7:A4:15:01:0F:27:64:B0:D4:1D:16:42:F6:65:F1:CD:4E:42:56
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584EA787333D9A22560397C8B000
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395945
IP address blocks:        35.62.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:33:3d:9a:22:56:03:97:c8:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=da00588a-4d2c-4ef4-bb7d-1643fec64d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7e:f3:e2:e7:48:64:b2:30:84:da:40:3e:3f:
                    cc:89:02:1e:4a:2f:ea:a2:61:66:89:db:fc:61:c7:
                    6c:52:19:8c:cf:ca:58:fc:28:d0:26:64:3f:60:ed:
                    2d:61:27:3c:c1:49:ee:81:92:ff:c8:f0:f6:c0:bc:
                    f2:63:2a:0f:c4:f4:51:15:3a:23:5a:7c:c1:2a:1b:
                    ef:07:32:4c:bb:9f:64:18:da:0e:e5:0a:b6:36:cd:
                    f8:de:b3:4e:7b:33:d0:1c:d1:b5:b9:0c:50:e2:a7:
                    89:b8:ac:ce:4f:2c:03:3b:dc:ef:d2:6d:3f:93:99:
                    29:68:55:47:c1:96:2c:d8:83:fa:c9:98:56:10:08:
                    cb:da:c0:85:36:c6:31:cd:d4:2a:e9:d4:75:3c:56:
                    24:5c:0b:70:54:ce:43:71:a6:58:9d:f6:8f:53:70:
                    96:82:b6:47:ff:8f:6f:c7:59:98:57:34:04:37:db:
                    b0:2b:ae:cd:bf:d3:c3:8d:32:30:b6:63:db:a6:e2:
                    91:50:b3:85:36:22:49:d6:3e:e3:ed:f6:1f:12:14:
                    81:92:22:2d:ea:04:57:66:91:e2:4b:6a:7c:64:2c:
                    34:21:ca:69:97:a5:98:fd:5e:95:d4:00:42:fa:03:
                    5f:56:59:52:bd:d5:92:75:66:5a:38:c3:8c:72:31:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E7:A4:15:01:0F:27:64:B0:D4:1D:16:42:F6:65:F1:CD:4E:42:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:94:46:b2:3d:5c:e4:48:1c:39:6e:a6:58:5a:9e:80:49:b2:
         93:b9:cf:8b:8f:37:f2:2b:fd:bf:32:e9:84:4b:78:f8:94:6b:
         03:75:56:f8:48:cf:34:47:81:c3:18:35:0d:f4:c7:29:25:0a:
         d7:05:0c:7b:2b:bb:e0:d1:06:28:55:25:0e:ea:8f:91:f3:b9:
         49:e5:27:ab:61:f4:8f:ed:b8:58:17:e3:25:13:43:40:e5:e5:
         03:4e:ea:00:d2:85:da:83:6f:be:4e:2c:b8:c1:a0:f3:a5:92:
         47:df:58:8c:01:cc:62:3f:3a:27:d2:bc:4f:d5:75:51:cc:cb:
         40:9a:bd:b6:49:e3:04:01:c2:8e:a5:48:e5:ad:7a:fd:7d:ef:
         bb:f2:7d:47:9d:ea:aa:f8:63:d5:6e:09:98:8d:c7:56:17:de:
         c0:b2:18:d9:58:29:f3:18:da:f6:2d:8a:00:71:31:eb:a4:b3:
         e4:3c:6c:4c:32:30:30:a5:56:17:1f:67:e0:c3:db:37:2d:25:
         6b:c7:67:92:16:bc:b9:3b:bb:0c:be:69:c3:e8:a0:4a:39:7e:
         ba:ea:da:58:ac:ff:38:12:2b:fb:aa:45:7d:56:e6:26:10:da:
         42:b7:98:e9:ea:bf:71:13:83:c8:02:88:42:99:c5:b5:98:fd:
         56:f0:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:01:55 2026 by rpki-client