Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0eb310c5-5c4b-33aa-b6ae-13351c85b76f.roa
File:                     0eb310c5-5c4b-33aa-b6ae-13351c85b76f.roa (raw, json)
Hash identifier:          UoLLobuPY0WpZFG9t/7oLBSwTO69nk7bJl9v8damNtI=
Subject key identifier:   BF:32:32:7F:04:35:96:8F:D2:D5:1A:C3:15:94:A1:17:B4:7C:80:5B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF2352C2F4B0474E0867C900
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0eb310c5-5c4b-33aa-b6ae-13351c85b76f.roa
Signing time:             Fri 31 Jul 2026 18:26:09 +0000
ROA not before:           Fri 31 Jul 2026 18:26:09 +0000
ROA not after:            Thu 29 Oct 2026 18:26:09 +0000
asID:                     81
IP address blocks:        204.85.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:52:c2:f4:b0:47:4e:08:67:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:09 2026 GMT
            Not After : Oct 29 18:26:09 2026 GMT
        Subject: CN=0462af47-26f3-4987-bd58-c6e59a425867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:12:33:d5:f3:f6:c4:4c:5a:08:bb:b1:5d:
                    58:21:dc:13:be:38:45:5b:6f:17:52:6e:fe:b2:e1:
                    33:f7:98:da:82:74:01:04:aa:2a:5f:29:eb:f7:92:
                    8f:53:99:11:c7:11:f7:10:51:95:6e:1e:33:3e:05:
                    f9:0a:03:54:96:4e:77:6b:e4:f5:d0:77:9c:85:8e:
                    a6:2b:2e:29:11:35:84:cd:dd:cb:fa:98:d0:05:61:
                    05:f7:4b:e7:d4:c5:33:a0:93:fb:8d:f4:54:0d:3c:
                    77:66:f4:f3:44:d5:9b:6f:ac:5e:a6:81:2b:4a:62:
                    19:97:f1:0e:71:68:c4:ee:b7:37:da:87:87:61:da:
                    22:3f:8b:b8:de:03:7c:81:30:9d:d9:d6:5e:fe:4f:
                    23:00:96:28:a8:99:9b:c8:b8:c2:e0:d8:96:be:26:
                    83:a2:a7:ba:a8:f5:a0:89:bd:6a:3c:d0:26:e9:93:
                    86:5f:56:ee:16:59:3f:ec:c9:4c:ac:ef:b3:b1:10:
                    1e:aa:db:7b:94:0a:c6:9e:ce:9e:45:71:28:42:87:
                    5e:ca:87:6d:16:b1:7d:48:d1:5e:55:3e:25:8e:a3:
                    9a:36:1e:f1:fe:3b:99:2c:b4:d7:26:1a:a2:46:77:
                    fd:00:86:5f:74:dd:cc:c8:f8:a3:d2:c9:58:99:0a:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:32:7F:04:35:96:8F:D2:D5:1A:C3:15:94:A1:17:B4:7C:80:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0eb310c5-5c4b-33aa-b6ae-13351c85b76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:ee:1a:8f:96:b4:9a:4f:4d:e3:a4:df:28:7c:69:3a:b1:
         e6:bd:2c:32:15:90:56:5c:f2:51:a8:f5:18:36:71:1b:e7:fd:
         c3:42:bf:18:61:b7:f2:13:98:3c:2e:01:3f:c9:99:fd:ef:55:
         f4:17:47:6e:2b:47:38:f5:1e:1d:15:d6:e0:f6:5d:1a:eb:c8:
         3e:c2:0f:70:7f:b3:6b:94:53:1a:66:c6:13:fd:c6:60:21:01:
         20:03:3e:99:ec:5d:d1:e5:5c:e1:84:8a:3b:0a:48:f2:6c:6e:
         2b:d0:e5:02:13:59:46:60:df:00:81:35:4e:90:0f:27:1e:2c:
         95:be:3b:e0:cd:44:4b:f9:8d:57:86:7c:21:4c:b5:41:70:9f:
         cc:60:15:a7:94:70:d0:af:bf:ea:dd:e3:b1:dd:09:3f:30:15:
         c5:37:f4:a3:82:d6:8f:79:b3:68:41:0b:c8:e3:da:4d:61:c9:
         dc:0f:4c:ed:09:78:ae:ae:d9:00:dc:13:5a:37:89:09:7f:f5:
         73:40:dd:02:a0:82:03:1c:e7:a5:d8:11:05:dd:21:2e:74:96:
         4f:89:61:9d:99:e1:35:d7:dd:6c:90:36:2a:5e:3c:06:c1:8c:
         5c:48:ea:a7:68:ba:63:43:89:07:9e:3d:e9:33:7e:76:d2:55:
         c3:04:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:00:49 2026 by rpki-client