Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
File:                     8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa (raw, json)
Hash identifier:          o08plEHO0AoxA0lDwoZ/qz0Tw8GG2ldf4/Ao4Qp5Ypg=
Subject key identifier:   55:0C:28:1D:38:D9:76:42:01:6A:FE:25:56:12:CB:CE:D2:A4:2F:11
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584C470BB9FF684FD033E7D50870
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
Signing time:             Tue 23 Dec 2025 02:00:31 +0000
ROA not before:           Tue 23 Dec 2025 02:00:31 +0000
ROA not after:            Mon 23 Mar 2026 01:00:31 +0000
asID:                     2914
IP address blocks:        174.35.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:0b:b9:ff:68:4f:d0:33:e7:d5:08:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Dec 23 02:00:31 2025 GMT
            Not After : Mar 23 01:00:31 2026 GMT
        Subject: CN=28be5d06-9820-4609-b7f8-3100f01c84b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:6f:86:61:2b:54:20:06:cf:0c:b0:02:3c:
                    c8:57:14:3c:62:3a:4c:a8:79:13:59:34:eb:66:aa:
                    34:93:ee:48:39:0f:8d:83:a7:53:19:42:90:b9:eb:
                    e3:34:9d:f8:e0:05:fa:3a:8d:5e:1d:8f:9a:a8:97:
                    a9:45:b9:c5:f5:90:7d:db:8e:53:0a:e8:60:a7:d8:
                    c3:c2:10:91:43:43:0c:94:fe:58:6e:35:66:f3:b2:
                    c1:06:5b:41:5d:4b:ed:ba:79:94:76:c8:15:90:19:
                    e1:ae:19:db:72:5d:1a:3d:a0:44:07:a5:18:0f:c5:
                    1b:31:e5:72:f2:3f:bd:fc:db:fd:d2:26:08:90:d1:
                    f1:c4:00:cf:cf:51:c1:87:cb:7a:65:e0:ab:c6:43:
                    11:58:0c:3a:88:b3:ac:c0:29:4c:07:c1:4e:6d:6c:
                    7b:ad:73:16:ca:bc:f3:76:5c:47:3b:c6:27:e9:80:
                    2a:7b:5b:47:30:5f:95:91:5d:3b:6c:68:0c:f7:43:
                    1f:eb:4f:2b:43:f7:f3:1b:27:6d:6a:e1:d3:61:f1:
                    84:92:cf:27:52:41:39:8f:40:e4:e1:8d:b3:e4:d4:
                    99:3e:17:49:a1:1d:1a:9a:2d:ad:e2:92:de:bd:b7:
                    6d:66:61:4b:4d:fc:5d:7a:6b:66:3f:2b:09:1a:f5:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0C:28:1D:38:D9:76:42:01:6A:FE:25:56:12:CB:CE:D2:A4:2F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:79:8d:6f:b4:a2:ef:dc:48:c6:77:41:2e:75:d6:a3:e6:e4:
         f0:bf:07:09:06:ed:03:61:43:c4:3d:3e:49:57:e8:c1:e4:64:
         52:07:1a:1d:2e:6f:bd:3e:f6:43:f4:c1:98:42:65:5b:e1:e9:
         37:64:0e:fe:dc:93:eb:91:39:ce:67:fa:db:46:86:b9:7f:4c:
         6e:b1:de:9a:f7:2e:83:0a:f3:67:89:e3:bb:12:91:f2:e2:f5:
         82:31:6b:64:34:f9:80:d9:7f:39:1f:c0:99:81:6f:5a:cb:5e:
         11:0d:94:16:f4:9d:66:7e:23:de:1f:5f:fd:6a:f4:09:db:ea:
         41:18:17:5e:b6:da:81:0a:dc:2d:07:3a:e5:69:01:0b:b9:f5:
         a9:10:2e:8f:99:bd:e9:d9:31:d2:d1:52:38:14:0c:a5:7a:ec:
         32:05:3b:db:e9:22:e4:0f:2a:88:e6:fd:dd:a0:37:b2:c2:39:
         5f:1f:01:93:19:f7:e7:1d:a9:c2:65:a1:a5:99:a2:6f:52:4d:
         6a:1c:79:f9:3b:4d:41:af:43:4f:dc:32:4a:ca:ac:12:81:35:
         d5:10:44:ab:50:5e:51:3b:72:32:7e:66:55:f6:d0:6b:62:d4:
         44:76:80:72:87:36:c2:b4:d5:d2:f3:cb:f5:aa:17:ff:ed:b4:
         86:c9:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:12:59 2026 by rpki-client