Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d26a7198-7649-3b28-b243-156f46fb5d3f.roa
File:                     d26a7198-7649-3b28-b243-156f46fb5d3f.roa (raw, json)
Hash identifier:          vWKr5Swcrut97itr9EVJWtLY3vegYTxS7/i/YsNuiKA=
Subject key identifier:   6F:8D:7E:3E:1D:79:67:5E:DF:3D:17:DF:DC:F5:D4:1E:25:E6:12:34
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B99D7FD55CE254CCB23114E80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d26a7198-7649-3b28-b243-156f46fb5d3f.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54994
IP address blocks:        174.35.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:fd:55:ce:25:4c:cb:23:11:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=5a464ac5-327b-430b-8fb0-c5087d32b1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:e6:e7:6c:8c:4a:96:aa:25:f5:3c:a4:15:
                    6a:ae:68:c1:11:a9:04:bd:e0:00:4d:d4:89:1b:5a:
                    37:ec:79:a0:a0:7d:71:b7:6b:97:e5:f2:3c:fa:f4:
                    e4:27:6b:e2:a4:18:4f:b3:d8:4b:95:32:84:8d:f6:
                    fb:30:77:1e:c1:1b:5d:8f:07:7a:24:ca:7a:3e:4f:
                    55:58:e6:a7:e7:9f:9e:e6:62:24:c1:af:e3:01:75:
                    69:94:73:b3:5c:94:fa:05:29:73:03:a7:d8:f8:04:
                    8f:8a:52:87:a6:ca:df:bd:fe:a2:d4:8b:dc:46:39:
                    f7:da:56:cd:98:06:dd:e8:cc:23:be:0e:8a:9b:91:
                    1b:33:10:9a:33:d2:2a:84:90:31:d2:b8:e1:d0:55:
                    9d:c3:d3:54:96:07:53:9f:6a:c6:7c:1a:48:5e:d4:
                    b9:a9:c2:dd:7f:61:78:d3:2e:e5:7c:72:34:ca:68:
                    da:ae:89:b6:9d:ca:ee:ce:66:92:72:41:ab:53:63:
                    76:8f:e9:ba:f7:c8:ff:d9:62:83:5b:c1:bf:de:67:
                    60:5d:0d:25:f6:0e:da:f7:e1:f3:a6:f6:a5:db:e9:
                    ab:6e:09:63:5f:55:19:5c:44:74:ed:43:80:fd:c6:
                    9d:7f:23:73:27:9d:69:d5:57:79:1b:8f:0f:43:2c:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:7E:3E:1D:79:67:5E:DF:3D:17:DF:DC:F5:D4:1E:25:E6:12:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d26a7198-7649-3b28-b243-156f46fb5d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:da:d1:4b:9d:c5:5e:ed:54:f9:30:bd:98:eb:59:93:2c:c3:
         27:db:9a:a9:24:d3:1c:d6:fe:cd:41:83:13:2b:ba:2e:9c:cd:
         cf:ad:4d:cd:b5:07:dc:55:b1:d3:40:63:a5:54:5e:77:46:ef:
         5b:cf:56:81:48:91:1e:81:ac:3a:5a:05:af:e4:c8:43:7c:90:
         f8:1a:7a:28:4b:a5:61:04:17:03:83:49:ec:65:6f:85:9a:3d:
         78:b4:25:e9:12:33:5a:ab:b0:b9:b5:56:13:40:1c:07:e4:04:
         1a:f6:e0:8d:7e:3b:c0:5e:a0:b3:e5:06:bf:94:c9:bd:99:e0:
         00:79:58:1a:20:5b:17:6f:2e:e0:bc:90:ea:1d:08:c9:bf:34:
         75:91:17:fe:5a:39:b9:fe:56:64:ab:f2:94:a9:91:15:80:15:
         ea:24:03:8b:ad:27:d8:df:da:36:17:90:89:53:2d:db:c1:4b:
         66:8d:b2:1c:a6:8f:5a:be:0b:76:23:07:82:74:3d:ea:46:2f:
         8f:7e:62:68:11:cd:dc:ec:63:0a:7a:fe:14:56:12:3f:1f:b3:
         74:95:be:03:34:7f:4f:cf:24:7a:58:1a:88:a0:2b:dd:ef:3d:
         0c:a1:bb:c3:63:dc:1d:32:39:60:ca:53:15:9c:db:08:5a:26:
         ec:8f:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:32:33 2025 by rpki-client