Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a10ea70-16ad-346d-853c-ed009a63aef4.roa
File:                     3a10ea70-16ad-346d-853c-ed009a63aef4.roa (raw, json)
Hash identifier:          0uvfYeLIyVIo3hHBy2y+wDA3fYkoZlpYvIV7+Cj3DO4=
Subject key identifier:   F5:73:11:FD:76:98:2C:A9:A3:E0:9B:A0:8E:8C:FC:1E:B4:85:F6:DA
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B59FB411D11E1E24999A95F20
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a10ea70-16ad-346d-853c-ed009a63aef4.roa
Signing time:             Mon 29 Sep 2025 04:00:53 +0000
ROA not before:           Mon 29 Sep 2025 04:00:53 +0000
ROA not after:            Sun 28 Dec 2025 05:00:53 +0000
asID:                     54994
IP address blocks:        174.35.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:fb:41:1d:11:e1:e2:49:99:a9:5f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 29 04:00:53 2025 GMT
            Not After : Dec 28 05:00:53 2025 GMT
        Subject: CN=d9c76324-ae10-49e8-ab2c-9b7958a85eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:1d:9e:a4:08:8f:c0:a0:0d:00:56:61:94:
                    22:15:db:dc:b0:ba:45:33:ea:3d:1a:37:4b:0c:24:
                    bb:dc:f3:cb:15:5d:7b:bc:86:46:af:53:65:ed:49:
                    0d:75:15:6f:1f:69:05:cd:30:56:e2:53:65:3b:19:
                    ca:0c:c6:2b:9d:db:cd:bd:d3:5b:42:a1:ea:35:c0:
                    bf:70:a0:7d:88:6f:cf:42:00:a7:01:92:43:46:f9:
                    b3:60:f5:0e:47:06:c3:a7:5c:92:f3:52:cc:1b:a2:
                    e0:fa:30:ae:0d:33:5f:cd:f9:19:13:96:4f:9c:2f:
                    f0:9b:60:2c:06:28:c4:19:a6:b8:f6:69:f9:84:d0:
                    5b:61:0f:5e:45:83:21:f2:bc:c9:e6:e9:cc:33:7f:
                    31:c4:66:f2:a7:81:39:ef:65:d7:ee:c7:c4:10:18:
                    ff:d1:d6:7a:df:2f:8c:d5:f5:01:c2:b4:41:1b:c9:
                    33:6d:ba:a7:09:fd:64:54:68:79:e4:87:66:57:1e:
                    52:85:34:59:bf:e2:c2:e6:f4:97:53:70:e4:f4:0c:
                    62:ba:ef:93:d6:14:d2:9f:35:81:e7:3f:08:03:a4:
                    1c:3e:9d:f9:a3:96:e3:0f:9d:07:41:01:ef:ec:14:
                    35:d4:fa:b7:99:e9:59:b3:30:ea:6d:fc:9c:73:40:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:11:FD:76:98:2C:A9:A3:E0:9B:A0:8E:8C:FC:1E:B4:85:F6:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a10ea70-16ad-346d-853c-ed009a63aef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:ec:ab:85:49:04:49:88:09:c0:c8:cf:34:b8:e5:dd:25:
         5e:df:47:c2:1c:3d:1a:71:e3:92:cb:a4:0d:28:98:66:75:77:
         73:43:ff:e5:ce:7e:f3:34:b1:d3:39:5a:5c:76:03:d7:7d:1c:
         b7:d6:40:b8:44:d0:9c:76:95:e6:ac:94:11:02:bb:c7:82:03:
         71:cf:29:2d:39:fe:91:9f:58:a9:98:2f:8e:c2:30:f9:be:5e:
         8e:08:24:83:b7:03:43:08:8c:43:59:24:42:90:ec:62:e1:31:
         ea:7f:7c:fd:f1:69:24:05:14:ca:92:7b:50:fd:ce:dc:31:6d:
         a0:a0:e8:2f:c7:0a:ac:bb:9f:ae:25:01:7f:87:db:68:1f:41:
         46:68:56:8a:16:a8:85:32:f5:55:79:72:c7:e3:b3:be:c4:a6:
         6e:03:9e:a6:c2:2b:23:b6:54:c9:b8:45:09:97:a7:7a:d9:48:
         58:42:6d:a0:bc:ba:3c:6c:c9:7d:1f:33:e2:75:19:3f:1d:bc:
         cb:e8:63:20:25:3b:a9:0f:49:09:18:15:4f:fa:0e:dc:e8:fc:
         c6:e0:01:b9:ca:ef:78:e8:44:d6:cd:07:96:5e:dc:0a:e6:a8:
         81:d7:d7:24:bf:31:f4:78:e3:c7:8c:b8:a3:e7:78:52:4b:6b:
         07:1c:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 01:53:02 2025 by rpki-client