Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa
File:                     1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa (raw, json)
Hash identifier:          tZUw2QtPGPQohgC9NOLPcN3hoPOuZH5Aj6zAairB2rE=
Subject key identifier:   DC:62:D5:16:67:9E:28:26:3D:5D:80:7E:C1:E8:72:69:6B:4C:02:42
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F4328584F58CD51BF54D38DC608D70F80
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     55244
IP address blocks:        209.35.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:51:bf:54:d3:8d:c6:08:d7:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=ff07f9a0-f331-4a3d-b252-774728948acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:8a:48:47:19:42:a2:43:94:03:a5:a4:38:
                    5d:b2:da:97:f7:6d:e6:e5:fd:22:34:5d:ea:a6:84:
                    01:f1:78:9a:ac:50:5e:44:7e:f7:dd:92:e1:45:e0:
                    2c:47:86:79:78:7a:4b:18:66:c0:cc:dc:b2:01:9e:
                    de:7a:d5:6d:d5:53:55:9a:21:e8:b9:7c:36:27:eb:
                    12:2a:2a:e7:ee:1b:5c:2c:86:c7:cf:35:bd:cc:ec:
                    57:8d:fd:09:5f:d8:cd:5f:b9:d3:ba:8c:18:39:4e:
                    76:13:87:bc:3e:75:75:f6:1d:5e:7c:ed:9a:f1:9b:
                    6f:2d:58:ae:ec:1d:98:b1:05:b2:88:b4:25:c5:5c:
                    f7:3c:ae:91:b8:11:1a:65:ed:23:69:00:ca:8b:f5:
                    52:2d:18:0b:b7:0a:bd:d6:23:56:c6:f5:1a:86:82:
                    dd:27:be:84:c7:e5:29:04:73:f1:7e:65:88:7f:0b:
                    ce:9d:9b:90:a3:09:ed:99:d0:69:07:1c:73:99:61:
                    54:79:91:89:00:14:ec:bf:21:06:39:58:35:3e:c0:
                    bf:ef:5d:b6:de:3e:c4:5d:5e:45:8b:a2:a4:65:0c:
                    1a:c7:06:a5:5d:62:7d:16:12:fd:1f:60:35:8b:5d:
                    e3:ae:4b:20:1a:39:23:85:e3:9e:c3:b1:13:4d:8f:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:62:D5:16:67:9E:28:26:3D:5D:80:7E:C1:E8:72:69:6B:4C:02:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:76:25:86:cb:27:d8:d8:67:6a:7b:76:4e:ea:92:3c:dc:56:
         58:96:c4:ee:29:65:26:1c:c6:48:26:7b:39:a0:52:b2:7e:85:
         c9:24:9b:56:68:fe:46:3d:d2:be:40:b3:48:77:17:f8:77:80:
         e1:c9:8f:8a:66:0f:ba:cb:71:a1:cd:36:65:27:74:3d:c7:e3:
         ed:4d:c2:2c:9a:70:59:c5:ea:79:38:4d:d7:5b:65:1d:a7:95:
         2f:d0:cc:c1:4a:46:c3:9c:d9:e9:4b:07:cb:4f:b7:c1:ab:f4:
         5e:9c:e9:21:af:c5:0f:28:06:83:bb:63:2e:f8:0f:b2:8e:56:
         e9:a4:a3:0e:05:20:a1:bb:65:af:b0:82:00:35:08:e2:a0:ee:
         f6:d1:70:08:d9:82:a6:c5:83:28:a6:9d:cf:d2:16:db:e4:5c:
         9e:61:8c:0a:99:d0:a1:d0:10:11:fd:9e:7d:ed:5e:e1:6f:76:
         42:bb:43:0d:85:68:23:48:35:b9:70:09:61:c0:2f:fe:42:6f:
         e0:cb:76:9d:4b:f7:48:f8:94:72:2e:5c:78:5d:b7:95:85:7b:
         0b:cd:16:8b:66:d5:de:ab:2d:5c:df:95:37:3c:c6:47:eb:b7:
         8e:9b:14:f9:b4:46:bc:af:c8:df:55:5c:7f:01:a7:6a:92:97:
         15:ae:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:39:36 2026 by rpki-client