Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa
File:                     d4234588-1140-311f-b4ce-5a6285415779.roa (raw, json)
Hash identifier:          8kSh/+QZSURpYNFk028sSQ3Y+jbKmfkc/0A+Q1G8KcI=
Subject key identifier:   B5:F4:AB:0C:BD:C2:9E:3F:3B:0C:6F:09:10:CC:99:0F:0E:1E:B4:0E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EFCACEBA782D1C35F280224B0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     22691
IP address blocks:        204.141.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:eb:a7:82:d1:c3:5f:28:02:24:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=20c9733d-cbf4-478a-b56c-fbfc591668f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:fc:25:5c:c3:78:13:29:d8:3e:c0:38:5d:
                    75:5b:f2:cd:99:db:68:ca:d9:f4:2c:fb:60:af:a9:
                    99:6e:d4:a2:5f:5b:80:f4:d3:ee:13:df:02:ef:ce:
                    90:68:56:88:23:0c:c4:fa:e1:f5:f7:ac:03:44:d9:
                    93:53:00:33:eb:d8:c7:6e:b6:b0:86:89:18:ee:36:
                    b2:da:18:c1:6d:99:a8:88:78:6f:6d:23:0e:94:23:
                    a8:3d:c2:4b:a7:09:53:0f:d9:c1:08:ea:e3:8a:64:
                    19:80:85:0b:e3:b5:c1:33:9b:55:0d:24:f4:2b:13:
                    e5:19:0a:cc:9f:1a:a4:f4:6d:3b:6c:7a:37:f5:12:
                    ef:90:a4:f6:96:19:9d:f0:4f:05:45:4b:1c:12:c4:
                    39:1c:4d:38:6c:08:b1:51:1b:9b:ac:ae:c4:e6:09:
                    f0:9d:36:c0:c9:39:a0:58:82:79:2e:e3:d3:45:bc:
                    38:d6:d5:05:5c:89:fb:04:d4:0e:fc:1f:bc:98:5e:
                    a5:f0:63:7e:c1:c1:d1:33:62:89:7c:db:5c:64:fa:
                    dc:c0:3c:5b:b6:45:4c:3f:f9:97:85:d6:44:96:f0:
                    55:3b:62:b1:df:0a:f3:8a:39:ac:64:d7:4b:e4:26:
                    6b:80:b0:ef:1c:2d:91:b0:68:65:e1:5d:76:3f:42:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:AB:0C:BD:C2:9E:3F:3B:0C:6F:09:10:CC:99:0F:0E:1E:B4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:e0:f2:85:75:68:30:40:2a:bc:90:4b:3d:40:09:20:0f:
         1d:6e:fa:49:df:4d:e9:ef:eb:0a:e7:36:cb:72:11:12:dc:5a:
         be:d4:ed:60:1c:ca:72:a7:93:84:80:8c:2d:fb:3f:52:a1:df:
         46:95:db:7e:76:c6:58:d7:b2:69:11:49:11:9f:df:9b:64:08:
         76:58:af:4c:1a:29:8d:1b:31:8d:71:b0:7d:b4:4e:1b:a7:57:
         1e:6b:c9:03:ac:c8:28:f9:7a:b3:d5:ac:dc:f8:3e:34:b5:ff:
         37:37:66:0c:7a:42:b4:5e:ad:a0:61:80:5a:c0:3d:be:d1:dc:
         e6:34:88:32:d9:c8:fe:e7:f8:52:a6:1d:11:bf:3f:2f:70:74:
         9c:c5:c1:bb:1f:e8:fb:74:ac:bb:e3:42:a1:b1:f7:af:00:02:
         95:5e:cb:dc:8b:39:08:26:48:6b:49:b8:2e:1a:31:c1:2e:d8:
         91:5a:26:49:5e:ad:ff:ce:76:74:8f:c9:52:4c:84:b4:64:2a:
         cf:64:d6:e3:c7:ba:63:ee:94:65:a8:81:97:cc:12:23:cb:e0:
         63:54:e5:64:9c:42:06:d6:c2:2a:c3:c3:43:d4:ca:e6:7a:16:
         f6:25:81:ee:44:2b:d7:4e:c6:eb:f3:fe:86:09:f7:ec:3b:31:
         4a:84:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:51:57 2026 by rpki-client