Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd26d47f-5f59-3e70-8b5f-c50784d530c6.roa
File:                     fd26d47f-5f59-3e70-8b5f-c50784d530c6.roa (raw, json)
Hash identifier:          ZG1+W8X02j4lzPCJBgTx7W1FEOG6kUK0QVMDnwNHmgY=
Subject key identifier:   55:EA:23:C5:0A:5E:A7:2E:35:A3:59:1C:A4:42:98:CC:5B:37:0C:73
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CA78CE72445F45C261D2DF780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd26d47f-5f59-3e70-8b5f-c50784d530c6.roa
Signing time:             Mon 26 Jan 2026 15:38:32 +0000
ROA not before:           Mon 26 Jan 2026 15:38:32 +0000
ROA not after:            Sun 26 Apr 2026 14:38:32 +0000
asID:                     13536
IP address blocks:        108.171.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:8c:e7:24:45:f4:5c:26:1d:2d:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 26 15:38:32 2026 GMT
            Not After : Apr 26 14:38:32 2026 GMT
        Subject: CN=20d2a750-d89d-4251-9445-f985a353c975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:94:8a:2d:a8:de:81:d2:07:d9:00:25:6d:
                    a5:bd:b8:19:c4:67:3e:49:a2:c4:9f:3b:63:18:4b:
                    2c:c8:9b:33:23:44:c6:a7:b0:15:64:89:3c:42:ab:
                    3a:e0:18:50:3d:93:8a:32:d7:85:85:49:5e:49:1c:
                    bb:a7:e5:81:8c:54:b6:d9:b4:ab:2b:f1:ed:17:52:
                    59:44:32:24:79:a0:b3:c1:df:44:ea:7f:23:80:9c:
                    0d:a2:a2:79:b0:03:2f:af:dd:52:ad:b1:ba:72:66:
                    43:4c:1b:d0:14:24:6f:81:df:9f:e6:2d:e8:b1:6c:
                    f0:21:52:45:cf:83:db:53:65:3e:34:20:77:42:6a:
                    6e:fe:53:de:67:95:8c:a8:93:e2:1b:fd:4d:ab:c1:
                    bf:57:08:15:43:f2:1b:fa:7e:a3:b1:ea:c3:4b:53:
                    1d:20:a4:31:9f:e9:d8:26:76:85:ab:10:83:3f:61:
                    aa:83:bb:56:33:8f:51:78:07:f9:f2:85:7b:2f:37:
                    99:90:b2:b6:f9:f7:c4:a1:e9:fc:8d:6f:39:04:3d:
                    07:69:83:ea:66:f9:7f:42:74:77:b5:48:b9:5d:f4:
                    3f:0d:27:03:25:a8:10:b4:40:e3:d9:cc:da:b2:fd:
                    bf:02:c1:9d:ef:6b:8b:a9:92:b3:c6:1c:d2:4a:19:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EA:23:C5:0A:5E:A7:2E:35:A3:59:1C:A4:42:98:CC:5B:37:0C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd26d47f-5f59-3e70-8b5f-c50784d530c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:f6:02:60:81:b4:d7:b1:76:f4:e9:ff:9a:99:55:3e:bc:
         24:ab:de:ea:bc:34:4e:da:32:88:e8:6c:da:66:0f:ff:9e:42:
         0c:e1:5f:31:8e:9e:29:5b:f6:c3:ff:9a:5a:82:a4:6a:38:3c:
         56:c1:43:c2:96:8a:48:d3:66:75:a1:d9:7d:38:ee:d9:18:72:
         e6:30:50:59:0d:4e:b6:dd:1c:5c:f6:b1:3f:3c:fd:3c:47:08:
         f6:7c:24:3c:89:e9:b9:06:0c:60:7b:39:dc:0e:a2:2b:62:bb:
         50:37:0f:d3:96:f8:35:e0:ae:ad:24:19:d1:d5:b2:ff:af:c6:
         b5:bf:8b:4e:1e:12:b4:cb:ce:9d:35:33:3c:32:d5:f3:37:51:
         01:48:ad:9a:ea:e8:24:b4:36:88:0e:16:2c:57:19:21:df:51:
         1d:d3:6e:27:c6:2e:d1:1d:de:c3:97:13:bd:90:2d:7d:fe:1a:
         62:a1:5a:9b:a1:3e:7b:7e:08:f4:4c:87:d1:56:ad:b1:15:73:
         db:60:f5:95:74:7e:42:79:e5:3d:45:f9:58:0d:3b:59:69:02:
         48:b0:3e:ff:10:6b:d9:7c:4b:9c:1b:6a:70:53:c1:7e:10:fd:
         d8:ae:37:1f:0b:21:df:67:9c:b6:88:2c:6f:4e:68:a1:6d:93:
         36:7b:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:35:04 2026 by rpki-client