Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
File:                     8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa (raw, json)
Hash identifier:          ekj6Azf0FRnWU/Lu6e7nWtzSZeb0XzcVfAP7/UYp/P8=
Subject key identifier:   A1:39:CE:D7:7B:FF:5B:06:5C:01:07:C6:51:59:79:B6:57:D4:03:B3
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584E07008CD49FF7695337A875C0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     2914
IP address blocks:        174.35.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:8c:d4:9f:f7:69:53:37:a8:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=9b7caa81-c384-41bd-81c0-bb92067b39ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:b7:85:a0:68:76:27:fc:63:67:d5:2e:29:
                    25:8a:82:3a:63:4c:b0:42:70:4a:c1:84:90:be:75:
                    ed:4b:c6:03:ac:71:6d:f1:14:fd:44:d7:93:b6:db:
                    9e:28:f9:c0:d6:a0:26:15:4b:fb:c6:96:1c:11:eb:
                    21:04:36:1c:7f:2f:45:78:39:d8:d2:75:f9:59:7f:
                    7a:83:2a:59:52:e9:f9:cf:d0:28:46:d6:59:01:0a:
                    11:e6:05:49:8f:ed:b5:1e:1f:a3:79:c6:27:0a:48:
                    e9:98:96:7a:ee:b0:fc:9e:ea:c2:27:02:25:03:b5:
                    f2:6f:00:d9:72:9f:86:e5:cc:bc:54:dd:36:c4:77:
                    24:b3:5d:b6:5a:76:f5:60:47:5c:7f:22:36:c6:6f:
                    2f:0f:9d:f2:3d:61:9e:0d:43:c2:68:96:e6:73:c6:
                    b2:9b:56:20:2c:03:8c:08:3c:27:c5:78:d8:22:78:
                    0c:dd:55:b2:77:a8:10:0d:59:d5:a7:70:e4:dc:7f:
                    df:95:38:47:55:1e:95:29:76:b6:e9:4b:d8:23:6b:
                    b9:97:d4:ff:3d:5e:e3:03:73:5f:af:46:6f:8a:f0:
                    cf:2a:38:f7:40:80:62:ea:6e:08:0f:48:03:3f:04:
                    7e:03:1b:0f:97:29:c2:c6:41:a9:e4:c6:52:2e:57:
                    3d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:39:CE:D7:7B:FF:5B:06:5C:01:07:C6:51:59:79:B6:57:D4:03:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:32:b0:2b:c4:c9:ee:3d:51:e1:85:a4:89:c8:36:dd:6c:b5:
         45:9a:54:49:d0:a0:17:2c:4c:3b:46:38:d8:bd:78:a4:81:da:
         7d:6c:ef:78:6a:38:0a:63:e0:79:71:6b:3d:27:e1:f0:6a:99:
         0b:67:37:b0:54:85:49:1f:48:d1:0a:60:80:01:f8:38:10:f9:
         a4:53:c8:68:79:eb:b9:fd:14:d4:e8:35:fb:e8:c5:89:57:7e:
         8b:09:53:c3:ba:55:1a:e8:79:b3:35:a7:4d:ce:74:3b:31:5d:
         12:b6:30:d5:cb:2c:35:6d:fa:4b:d6:a6:aa:a4:d6:82:87:6e:
         4f:0d:4c:75:33:55:de:0e:c3:9b:de:fd:97:7f:5f:6e:d9:7a:
         81:d8:3a:a9:12:61:67:11:7f:8c:b8:17:e4:6b:bd:a5:b2:40:
         15:b9:76:de:16:8e:0b:7b:13:48:a1:92:68:a4:dd:08:9d:a9:
         3c:db:1f:42:bf:23:2b:88:a9:38:9d:b4:3f:ab:5a:c3:cb:e5:
         70:47:68:54:e7:8e:3f:45:1a:8f:69:a6:fc:76:ed:97:1d:e4:
         eb:4b:74:1e:04:3e:8d:e1:e7:ae:27:1e:c0:db:8a:5d:91:0f:
         50:df:f8:78:d5:8e:b9:4a:c7:c4:13:7c:fe:60:57:b7:3e:21:
         92:b9:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:28:36 2026 by rpki-client