Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/35013b0e-b5c2-3488-9c84-d9993038fd98.roa
File:                     35013b0e-b5c2-3488-9c84-d9993038fd98.roa (raw, json)
Hash identifier:          lUaPdimPBBSyp+8Au190VV8IxIhENFw3COi/XnqlJqA=
Subject key identifier:   08:70:2B:E7:4A:BA:06:39:C9:BB:49:35:37:BA:D8:B4:24:CB:73:21
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584D09D761C280C666C83A5B4880
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/35013b0e-b5c2-3488-9c84-d9993038fd98.roa
Signing time:             Mon 02 Mar 2026 20:37:49 +0000
ROA not before:           Mon 02 Mar 2026 20:37:49 +0000
ROA not after:            Sun 31 May 2026 19:37:49 +0000
asID:                     3738
IP address blocks:        192.250.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:d7:61:c2:80:c6:66:c8:3a:5b:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Mar  2 20:37:49 2026 GMT
            Not After : May 31 19:37:49 2026 GMT
        Subject: CN=4ed8151b-c308-42e9-9332-f6671918d250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4c:97:ce:18:33:00:f9:36:8d:ee:a1:ce:c8:
                    b9:30:91:61:85:74:06:76:60:b5:e6:ff:c2:74:39:
                    d5:88:a2:79:4c:e9:7e:ea:10:70:14:75:c4:6d:30:
                    6c:fe:cf:83:92:4e:d7:3d:d7:14:6d:f6:33:0d:10:
                    02:ab:7d:17:ab:72:28:bc:94:45:d5:99:d2:b5:4f:
                    44:68:fb:ec:44:f5:57:46:2d:7e:cf:a4:e4:aa:62:
                    cd:db:73:f6:8c:6b:6a:2c:29:c9:61:fa:e5:29:be:
                    eb:48:3d:a5:7f:f5:09:ca:9b:cc:f0:92:ac:50:4f:
                    e4:17:39:65:87:ba:9a:4d:43:cf:95:43:9f:e2:49:
                    85:ee:09:0d:99:36:9c:9c:03:1b:a0:d2:0d:f0:2d:
                    04:b3:24:9d:b0:c4:11:c8:4e:e7:2f:76:8e:06:c0:
                    78:59:5d:55:d2:fb:d8:5a:3d:bf:c3:54:aa:67:8b:
                    90:08:82:32:b3:61:f7:59:08:cd:05:ed:79:13:49:
                    be:1b:fe:8f:1c:e6:8a:82:66:d2:d9:9c:3a:ee:8c:
                    d2:be:b9:e9:fe:2f:01:8f:ab:26:f7:7a:56:11:20:
                    3f:7e:e3:67:6d:83:3b:18:42:86:9a:3f:e7:05:1c:
                    62:bf:30:fe:b1:71:d8:00:74:8a:c8:9e:07:a3:18:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:70:2B:E7:4A:BA:06:39:C9:BB:49:35:37:BA:D8:B4:24:CB:73:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/35013b0e-b5c2-3488-9c84-d9993038fd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:ac:47:df:3e:ba:4f:d4:b9:01:35:4f:ce:04:ad:1d:2f:
         27:48:9a:4f:4f:ee:91:10:75:89:33:20:c8:c4:3a:a6:1a:05:
         ad:56:12:3e:ed:ef:e3:80:b5:55:68:e1:58:52:20:ed:c6:06:
         25:5e:cb:49:ee:2b:55:38:ed:94:d5:3d:07:5f:5c:ce:3c:ba:
         a3:46:c8:94:9b:bc:87:2e:8a:02:d0:ce:f6:34:6f:86:b3:92:
         f4:52:86:c9:c1:4e:cd:8e:bd:6d:4d:42:3d:e8:13:f1:18:3c:
         0a:af:90:b7:be:fc:fb:a2:fa:15:a8:cb:90:68:7b:76:39:78:
         8b:69:91:94:e7:71:9a:62:0e:27:11:c4:25:2c:8f:03:c1:3e:
         01:e4:1c:16:7b:56:97:27:20:25:4e:38:96:b0:21:9c:85:63:
         b4:cb:05:f6:cd:02:4f:b1:17:64:93:be:14:70:53:27:6a:d9:
         87:bf:8e:e1:9e:74:11:59:e0:51:de:6a:89:f5:23:fb:ee:ca:
         8d:a7:3d:26:86:f1:8f:3a:8f:7a:67:a0:0c:e5:d9:f1:2d:f6:
         05:37:9d:cc:64:ef:50:7b:16:8d:14:89:7d:ad:d6:5f:8e:16:
         14:c4:ee:ed:ab:25:93:89:fe:23:f2:10:e8:70:ea:5e:a9:36:
         e5:da:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 10:02:04 2026 by rpki-client