Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
File:                     e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa (raw, json)
Hash identifier:          jUYL/SDmOo2X0rXHvfZPCjAn40vrq7323NeIHiAYzrA=
Subject key identifier:   FF:04:C9:4A:09:42:94:0A:6D:54:0B:9D:58:AF:E9:BA:52:E1:91:30
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584E0435EE74A23267F7283D8B40
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     54994
IP address blocks:        174.35.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:ee:74:a2:32:67:f7:28:3d:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=01d66a4a-f82a-4381-8b32-8ebcc5de0173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:95:d6:87:f0:9c:06:e5:5d:6d:71:7d:40:
                    3e:ae:e4:81:13:c5:93:51:88:62:c8:9f:4f:3c:90:
                    e3:e8:a7:73:c5:b2:1e:af:3e:7f:bb:a2:87:8e:ff:
                    d8:2c:11:47:26:af:39:27:92:9c:4c:bf:44:8a:53:
                    e2:5c:79:19:5b:4d:f1:fc:e9:96:71:5c:e2:ce:04:
                    74:b9:5a:2e:ad:a6:de:16:20:c9:de:70:79:31:22:
                    67:66:75:0e:ce:3c:20:89:67:c9:c8:da:9b:c4:1f:
                    83:81:c4:b8:34:60:0a:25:db:11:15:4d:1d:91:5a:
                    84:c0:9e:3c:25:8b:89:8b:03:c4:9a:83:8b:73:fb:
                    bc:4c:11:80:42:df:1b:2c:0d:8b:0d:8f:e8:40:95:
                    fd:80:64:6e:a6:bf:5e:be:8d:6d:a4:9b:10:81:d3:
                    96:c1:78:e2:04:71:f3:8c:ec:8b:d4:28:0e:e6:e6:
                    c0:a0:f3:2f:a3:55:86:6e:23:8f:b1:49:bb:90:f8:
                    a7:e0:c9:b8:45:e8:bd:0e:0c:98:6c:6d:3d:69:df:
                    ce:cf:b0:d7:50:2f:3a:2b:38:8e:e1:e9:06:14:af:
                    4e:8f:7e:10:df:89:cf:e4:6a:42:9e:c5:97:08:ed:
                    47:d7:f9:29:ca:b9:5c:b9:d6:fb:72:ec:f7:d8:65:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:04:C9:4A:09:42:94:0A:6D:54:0B:9D:58:AF:E9:BA:52:E1:91:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:76:19:ba:3b:2d:d0:ea:f5:2e:f4:9a:53:c4:d4:9d:c0:
         c2:36:4b:e2:7d:10:24:9c:8e:29:7d:b5:98:72:e2:6d:1e:e1:
         0f:60:38:06:5f:d9:af:c8:21:f8:82:c6:95:08:50:c5:6d:f3:
         b1:a8:b0:3f:1a:c4:06:a1:76:92:b6:01:4b:ad:56:26:dc:b3:
         e5:a1:50:c4:21:c0:aa:9f:8d:f1:63:43:b6:29:ad:02:95:7d:
         82:e2:8d:ae:09:e5:6d:97:85:3f:76:47:a3:7f:27:00:9b:bc:
         5b:ea:15:6f:e0:e4:07:73:41:36:c5:99:a2:ae:de:a6:55:c0:
         84:ca:22:20:39:6b:a8:61:38:cc:67:2e:89:6e:56:39:66:d6:
         fa:60:d3:7c:a2:1a:54:7a:d0:6e:2d:e6:a1:d5:16:21:85:4a:
         f1:f3:3d:90:d7:19:bd:e6:61:93:81:b1:35:19:a7:f7:7c:cb:
         b3:eb:03:fc:09:a3:94:b0:0d:cb:99:e5:9c:5c:8d:98:dc:57:
         a0:53:81:52:0b:a4:e4:b7:49:df:0f:51:15:cc:b2:b2:d8:87:
         58:46:c6:ac:31:f7:b7:26:ba:ff:d1:aa:bb:3b:79:e8:ea:c0:
         a7:1c:bd:03:82:ca:13:fc:cb:3e:21:b2:76:a1:ba:cd:38:07:
         44:7d:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:27:30 2026 by rpki-client