Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa
File:                     5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa (raw, json)
Hash identifier:          xvrUkdSzh1cNZ5l+k4zNxM7w1vA6KEvH/Rxeb3OSpLE=
Subject key identifier:   2C:2F:87:44:6C:14:27:AD:C6:8F:7E:87:34:CF:4C:28:FA:AC:65:36
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584E07008C390B39449E72F6A540
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     54994
IP address blocks:        174.35.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:8c:39:0b:39:44:9e:72:f6:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=29a2b203-ac5f-4d3a-8497-39cfc5b06b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:8a:ff:a1:32:58:ae:f1:23:9c:43:42:be:
                    83:8c:33:31:72:a6:e0:ab:89:d4:4a:7d:c3:69:18:
                    f6:ea:fd:e0:05:38:33:19:d2:ce:56:ff:38:3c:ec:
                    d5:84:2f:dc:3a:3d:47:eb:35:f8:a1:50:dd:30:0d:
                    17:8a:00:49:45:0a:77:fd:af:dd:16:99:7e:be:cd:
                    e3:6f:da:88:da:ef:73:ba:ce:75:34:71:99:68:cc:
                    71:06:b8:dd:b7:58:07:5a:e4:a8:bc:d0:d8:23:e7:
                    86:e7:50:71:e6:a1:46:a5:13:d1:c2:d1:72:36:83:
                    a0:f3:18:bc:b9:7c:1a:81:e3:15:71:73:b9:ce:a7:
                    1b:e1:ca:56:80:ad:d4:01:f6:ad:ea:53:62:bc:90:
                    38:9c:0d:21:d7:ef:82:b1:04:80:99:ee:62:b4:63:
                    02:29:47:b9:e8:f3:82:1e:08:7a:d5:41:11:11:8a:
                    1a:a7:36:fc:08:bd:be:c5:80:a2:32:c6:07:d3:11:
                    06:f1:f6:04:a0:aa:a4:92:b5:e4:4b:fb:7b:19:3c:
                    3b:70:c0:6f:09:2e:da:4f:4e:c9:64:2d:ed:bc:24:
                    3c:8a:c5:d1:8f:6d:11:00:d7:94:ad:20:bf:00:de:
                    64:c1:82:dc:f2:cd:9d:8e:c3:e5:ae:25:43:ad:38:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2F:87:44:6C:14:27:AD:C6:8F:7E:87:34:CF:4C:28:FA:AC:65:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:18:2a:0e:1f:b0:76:fb:eb:71:cb:98:98:0e:6e:6d:f4:
         f2:b2:df:f2:a7:f2:cd:26:9b:13:52:cc:d0:b3:5b:5f:40:1c:
         ee:3c:c2:59:85:b3:21:09:f4:a1:0d:ad:34:2d:9d:ca:05:7c:
         0b:1e:61:15:4a:bd:3b:c0:ab:30:48:9e:ed:60:dc:28:63:52:
         cc:cd:2f:60:a6:89:c1:b8:fb:4b:a0:09:84:14:2b:a9:ff:cf:
         49:8b:84:87:ac:02:93:2f:90:26:eb:23:a5:e9:7f:60:82:5d:
         33:30:77:3b:15:02:7d:90:b9:d2:9b:88:b8:88:e3:88:75:f4:
         10:d4:f7:49:d7:36:59:9b:7f:eb:4a:78:e7:a7:69:4a:18:65:
         a8:7a:8b:7c:a9:5c:a0:55:7a:a8:40:9b:ec:32:72:b1:bd:5b:
         b8:87:d8:4b:6f:a4:26:74:3e:65:dd:c3:63:ca:94:48:35:c4:
         73:fd:20:02:f5:8e:0c:dc:c6:35:1e:d4:94:34:36:b1:7a:e3:
         32:24:ee:23:3b:d9:21:db:f3:10:33:87:ff:26:59:c7:31:9b:
         e7:15:e5:c4:a1:42:97:2b:93:79:82:b0:80:1b:eb:64:4f:c6:
         22:af:b5:a7:61:30:45:f2:c5:0d:4b:7e:b7:ab:40:18:d1:a9:
         d7:8c:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:28:35 2026 by rpki-client