Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d53276a0-1b91-3b96-99e0-56bf1226d57c.roa
File:                     d53276a0-1b91-3b96-99e0-56bf1226d57c.roa (raw, json)
Hash identifier:          xZs0dFz+yQ52Tf0Vj9AOIWrcejE/tln4xhZ8va4ZQYY=
Subject key identifier:   A3:2C:88:37:DC:2A:F3:77:F7:11:8C:CE:67:61:3F:2A:CB:E9:45:2F
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584E0435EF5B04D3CEA37E2451C0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d53276a0-1b91-3b96-99e0-56bf1226d57c.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     54994
IP address blocks:        174.35.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:ef:5b:04:d3:ce:a3:7e:24:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=acb371f6-0db5-416b-b921-1661277686af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:1f:a3:31:ae:3d:e0:33:d8:59:47:90:54:
                    a7:0e:c5:55:2b:e3:c0:01:0f:9c:7d:a4:bb:6e:65:
                    03:5f:1a:68:53:cc:4d:e5:5d:ce:19:13:27:db:5b:
                    4e:cd:f7:0a:94:a9:9f:91:19:f0:e9:58:4a:95:1f:
                    1c:ba:a8:cb:fe:d1:a8:5b:51:ca:88:20:32:bf:4f:
                    ad:7f:37:d2:01:ea:07:95:85:42:2f:7b:43:33:d6:
                    31:e6:44:fb:aa:2a:44:f2:bd:a6:66:6f:12:39:a1:
                    f4:f6:f0:b0:f5:eb:b4:4f:b6:20:75:18:0c:58:9f:
                    77:5c:81:ee:16:08:c1:66:85:87:d4:26:81:55:60:
                    c7:d9:8a:7a:8e:d2:53:3c:8f:13:a2:29:42:92:67:
                    89:21:b5:ab:9f:c7:2e:ae:20:6a:25:1f:f1:65:6c:
                    6f:13:b0:19:71:80:01:41:0a:55:ac:3b:de:24:69:
                    3c:79:b8:96:9d:20:f7:49:1a:46:88:bc:50:b5:5a:
                    54:77:e4:79:8c:64:0a:a3:4d:d1:f1:b1:8d:ca:f1:
                    c9:49:6f:f9:6e:2c:fa:ba:2e:33:38:b8:64:8c:90:
                    a7:32:fa:92:96:07:11:29:5b:48:63:9d:f6:60:4d:
                    88:4d:34:1c:39:92:b3:1c:d7:d0:e2:29:41:bf:d6:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:88:37:DC:2A:F3:77:F7:11:8C:CE:67:61:3F:2A:CB:E9:45:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d53276a0-1b91-3b96-99e0-56bf1226d57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:5f:12:5f:c3:49:03:7b:84:1f:2b:95:97:fb:8b:b3:d9:
         f9:7e:69:f8:f4:bc:aa:17:1d:da:9a:68:c8:2f:17:d2:04:16:
         9c:12:79:12:b8:e0:d8:c7:fb:3d:0a:42:2d:59:2e:0d:b4:c6:
         38:f0:f7:d3:97:0b:8d:3e:39:3c:b6:ba:54:2d:79:71:7e:4d:
         94:29:8a:dc:67:2e:34:9c:d5:30:4b:dd:56:cf:7c:41:c0:fa:
         fc:db:c2:ad:25:7f:64:cd:ad:b5:c5:a8:4e:88:c0:fa:89:e1:
         46:e7:65:dc:e6:05:24:d4:c5:7b:50:c5:ed:a3:44:4f:ce:88:
         12:12:1f:a7:41:d7:77:2a:a1:b5:8b:37:33:c8:9b:6e:e2:64:
         00:f0:46:da:37:03:6b:20:2e:e1:f8:df:a7:f7:48:02:ba:85:
         83:1c:3e:bf:1f:09:84:fb:43:39:c0:81:6a:88:ca:a0:34:fa:
         c9:ab:14:26:27:1b:29:53:1c:5c:3a:32:38:40:6b:2b:b5:b9:
         d7:6d:c2:df:21:54:43:64:96:22:51:e2:0b:bf:be:04:54:bb:
         58:6d:fd:5c:57:ad:57:41:0f:45:af:45:a8:fe:7c:c4:c7:c9:
         32:f4:05:69:f4:c9:d2:ac:3c:fa:96:7c:8b:ae:cf:25:df:7d:
         e8:21:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:46 2026 by rpki-client