Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa
File:                     35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa (raw, json)
Hash identifier:          9w7DJI2087eO7dWI9uf1fMr4BbEP3cNh8VK4M4SqpyM=
Subject key identifier:   4C:2E:2C:20:A3:EC:3B:CA:D8:56:E1:2C:82:3A:F4:F6:9C:D0:F5:9E
Certificate issuer:       /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial:       010D0C9F4328584EC330DBF849E4A9D21D218C80
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa
Signing time:             Fri 07 Aug 2026 22:49:35 +0000
ROA not before:           Fri 07 Aug 2026 22:49:35 +0000
ROA not after:            Thu 05 Nov 2026 23:49:35 +0000
asID:                     40933
IP address blocks:        64.187.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:30:db:f8:49:e4:a9:d2:1d:21:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
        Validity
            Not Before: Aug  7 22:49:35 2026 GMT
            Not After : Nov  5 23:49:35 2026 GMT
        Subject: CN=0e9944e3-a369-4820-bf7d-56a0880f1a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:2c:68:d7:e8:15:d8:3f:4f:f9:3d:05:7d:
                    41:ec:15:e1:d8:10:b1:5b:83:fd:8a:70:60:d0:e3:
                    76:51:73:b0:1c:ab:d3:bf:5b:fd:54:ae:07:35:66:
                    45:a4:36:21:4d:11:9c:38:55:a5:ec:50:1a:7c:21:
                    b4:c4:62:e0:72:bb:b0:a9:e8:05:78:8f:f7:33:dc:
                    de:23:40:78:09:bc:e4:a7:83:95:0f:28:62:d5:fd:
                    e8:38:eb:fc:b0:1c:2f:0a:68:99:ae:30:4a:a3:63:
                    ff:7b:02:eb:1a:cf:04:ce:6f:1d:f9:2b:6c:e2:c0:
                    48:ec:40:7e:55:52:1c:39:82:b3:c0:7f:7f:cc:fc:
                    f9:7c:a8:20:14:36:36:8d:f5:c0:f6:00:a0:de:7c:
                    2f:87:a9:19:b7:d9:e4:f0:9a:c6:95:10:7c:88:b2:
                    19:8d:0c:4d:e1:3b:f9:fd:60:4f:b3:d3:d6:58:1c:
                    53:25:50:34:b0:ea:a2:eb:9c:2d:b8:aa:85:dc:33:
                    80:74:09:f5:62:4b:63:e0:dc:d0:f8:1b:4e:14:09:
                    f6:9b:e4:0d:0e:b0:a1:b6:42:3c:87:05:d2:6d:aa:
                    57:cb:f9:89:e8:47:65:1c:7c:01:28:7c:3f:94:55:
                    9c:ae:0f:fc:ba:83:c3:78:31:78:fe:7b:4b:0c:26:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2E:2C:20:A3:EC:3B:CA:D8:56:E1:2C:82:3A:F4:F6:9C:D0:F5:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl

            X509v3 Authority Key Identifier:
                keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:39:3a:19:32:a1:f5:9b:63:02:3e:80:ff:dc:76:65:7d:
         d3:a7:94:83:bf:1c:eb:44:1a:61:2e:1f:96:3d:56:51:24:68:
         30:84:fb:7c:1c:35:69:26:aa:ca:bf:db:4e:9f:bd:e3:db:8a:
         33:60:15:93:71:48:b8:f3:6f:14:17:00:f4:f9:39:32:e1:a9:
         4b:01:37:2c:bd:8e:be:32:3d:e4:6c:31:89:f4:2b:15:da:6a:
         34:04:61:ec:a5:f9:96:ea:42:a9:06:fa:8d:84:75:06:f2:96:
         90:fb:9a:07:ac:00:14:7d:a2:77:d2:e4:2d:2d:4f:20:8f:ca:
         0c:c0:9e:6e:f0:41:17:a6:d0:cf:7c:5d:e0:a9:de:0a:f1:42:
         85:b6:e5:b7:a1:5f:03:9a:3e:9c:62:bc:9d:92:b1:dc:8c:b7:
         e4:78:7f:08:c0:bb:ef:61:9c:f7:81:0a:c1:d1:2b:80:7d:ed:
         8e:bc:67:f5:fa:c7:06:43:fa:7c:c6:e4:1d:93:52:d9:97:c1:
         8e:a2:c2:94:cd:20:e5:a9:f5:45:cc:a8:da:8c:bb:fd:d2:e7:
         9d:86:23:fd:1a:69:30:e5:e2:ad:60:7f:db:21:5a:da:e2:be:
         1b:99:9a:f8:81:30:7c:44:4c:3c:95:db:b9:d9:fb:85:4a:ff:
         75:1b:8c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:20 2026 by rpki-client