Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa
File:                     87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa (raw, json)
Hash identifier:          aFNWvA2O4iL55nJTh/xsJiGzSPl8BZvHkMbsoIqeuB0=
Subject key identifier:   DC:F3:FC:C3:C6:C4:85:79:0B:62:F0:F5:67:E7:E8:C2:76:DE:E6:FE
Certificate issuer:       /CN=b4bbcf4c-f013-41ff-946d-1e06d3c40679
Certificate serial:       010D0C9F4328584ED3B87DA7B6DCDF2200D94F00
Authority key identifier: AB:31:B1:76:A7:FA:35:57:43:3D:EB:4A:4F:DD:9A:F7:FB:4E:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa
Signing time:             Thu 13 Aug 2026 20:55:48 +0000
ROA not before:           Thu 13 Aug 2026 20:55:48 +0000
ROA not after:            Wed 11 Nov 2026 21:55:48 +0000
asID:                     210107
IP address blocks:        161.199.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/b4bbcf4c-f013-41ff-946d-1e06d3c40679.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/b4bbcf4c-f013-41ff-946d-1e06d3c40679.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d3:b8:7d:a7:b6:dc:df:22:00:d9:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bbcf4c-f013-41ff-946d-1e06d3c40679
        Validity
            Not Before: Aug 13 20:55:48 2026 GMT
            Not After : Nov 11 21:55:48 2026 GMT
        Subject: CN=3259d85d-1880-4d0c-966d-3bbcd4985ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:2a:dd:1b:25:a1:0d:9a:30:69:26:e9:ef:
                    06:bc:82:c3:55:d2:79:e5:78:9c:f5:6e:33:dc:71:
                    2c:a9:54:25:5f:6f:1b:73:0c:fa:a4:10:d2:ca:b8:
                    2d:42:1d:09:26:00:0f:11:0d:5d:64:51:e6:86:fc:
                    dd:4e:f8:b6:7b:26:f3:6d:98:89:d1:68:5b:e3:7e:
                    3f:90:b0:55:d6:67:61:4a:d0:91:5b:95:cf:7b:5d:
                    5d:a3:f8:25:0c:76:17:9f:5a:4a:b8:e9:bb:f8:97:
                    92:d5:92:0f:6d:1c:90:98:25:81:85:a5:64:7d:81:
                    b7:d7:ce:16:cf:c7:67:48:3b:09:f5:85:7d:49:8c:
                    ac:6e:7d:ba:2d:1f:31:ea:31:5a:a8:68:7b:0f:26:
                    c1:d0:ac:54:74:c4:ec:88:5a:e9:9c:e3:01:e5:a4:
                    c9:f7:d4:0a:24:34:7a:10:c9:32:de:3e:ed:d7:23:
                    45:76:83:a3:d5:28:2b:a9:dc:9c:84:de:78:3a:0a:
                    47:7b:af:b5:eb:39:46:f0:ec:41:92:e7:0f:a1:d8:
                    a0:9b:d7:61:6c:f5:ba:9e:9d:61:34:60:b7:f1:24:
                    fc:39:69:1e:33:e4:7c:c0:d9:89:a0:47:33:5e:6d:
                    f6:40:da:8d:56:ef:f6:c7:ed:73:5d:9c:ac:99:20:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:FC:C3:C6:C4:85:79:0B:62:F0:F5:67:E7:E8:C2:76:DE:E6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/87f64f83-ef0a-3a6d-9158-762d0570b9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679/b4bbcf4c-f013-41ff-946d-1e06d3c40679.crl

            X509v3 Authority Key Identifier:
                keyid:AB:31:B1:76:A7:FA:35:57:43:3D:EB:4A:4F:DD:9A:F7:FB:4E:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b4bbcf4c-f013-41ff-946d-1e06d3c40679.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:dd:1e:8a:0b:b0:95:48:a4:8e:5b:b3:84:2e:8f:a2:dc:
         38:d1:72:e3:94:5b:c9:1a:e0:0a:bd:12:ec:0b:ac:a8:39:47:
         ad:97:5a:2c:7f:d7:31:9f:46:5a:a2:c0:fa:ba:21:ac:88:2f:
         3e:28:e6:34:17:ef:45:b8:24:25:97:a8:48:29:db:10:ae:3a:
         c0:36:f7:0e:74:04:52:3a:8a:8b:a4:0f:1c:53:2c:0c:21:61:
         36:1a:e8:78:6a:50:22:c2:93:f6:f7:5d:f8:32:8d:8a:f1:68:
         45:90:3a:be:41:5c:28:e9:97:c3:a2:a1:a5:1b:c9:84:16:01:
         41:74:1e:ac:ee:9a:df:69:46:a3:9e:d8:4e:a1:0f:46:16:25:
         7d:5d:6e:1c:7e:a6:6a:c3:96:fa:9a:fc:09:d4:07:ad:bf:4b:
         5c:6b:dc:74:61:7d:08:72:b7:a1:69:5f:ba:7a:80:e4:64:eb:
         e2:5c:ff:5b:e1:d8:5b:00:c1:16:3a:bf:6c:05:59:67:d7:20:
         fc:e3:ff:e8:48:38:4b:15:a1:80:9f:be:3e:ea:29:ea:51:d9:
         8f:4d:0b:b4:ae:b4:13:4b:44:40:84:f1:86:ae:5b:75:7a:a7:
         db:e8:66:e4:c9:dd:29:58:30:86:c6:34:b3:bf:38:c3:5e:1d:
         92:93:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:48:28 2026 by rpki-client