Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa
File:                     844b98f5-e6cd-370e-ac40-d2d72926edf0.roa (raw, json)
Hash identifier:          9w0Q/btP8sKoNOabhLlFxpDa3+DgG7+bivkxCy6kx2Y=
Subject key identifier:   07:A8:4B:DF:13:94:32:91:7A:76:66:4B:1F:6B:BA:01:AB:63:22:E9
Certificate issuer:       /CN=219560ff-1a32-4424-9e54-f95df54ecc84
Certificate serial:       010D0C9F4328584E614562DCF708589DF913DAC0
Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     5739
IP address blocks:        192.35.220.0/24 maxlen: 24
                          192.35.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:62:dc:f7:08:58:9d:f9:13:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=f5b12035-f144-4dee-b6f9-2138c5a33ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:c8:0a:25:c4:82:09:47:10:19:43:b7:f0:
                    bf:b7:e6:62:d5:42:8e:c4:ca:14:12:7e:8c:d3:a2:
                    60:f0:1a:dc:ae:c6:73:d1:3d:2f:da:f0:c4:84:12:
                    b8:21:cf:1f:8c:40:1d:84:f0:d2:39:07:e5:53:2e:
                    31:1f:e0:4a:68:fa:0c:c2:86:7e:3a:2b:37:d4:97:
                    f3:0c:4f:58:62:ab:b5:db:e0:89:19:11:33:67:91:
                    26:6e:63:bb:a6:84:c3:cb:0c:72:82:2c:73:0f:75:
                    98:9d:ff:78:81:b5:05:e4:e7:7f:b4:45:05:d1:80:
                    1b:b4:e3:ff:f1:2a:3a:43:16:f9:fb:79:e3:47:37:
                    e5:94:e2:62:d2:64:b5:4f:08:6e:d7:ff:d0:12:0f:
                    54:0f:91:4b:c9:7d:12:66:c8:74:9f:ea:48:b9:43:
                    f2:6a:00:d5:d5:f5:e7:d4:dd:79:e0:b3:1f:4d:1e:
                    1f:3e:c6:a0:f2:5a:9a:10:77:43:05:99:4d:63:54:
                    c7:a4:73:48:c5:a6:d0:32:f8:b3:d6:51:6b:11:aa:
                    0c:0a:8c:96:f5:41:6f:b4:ef:59:48:cc:99:03:35:
                    65:88:7c:a4:34:40:cd:67:f2:59:55:3f:e2:dc:3d:
                    9f:f1:40:28:d7:14:24:15:fd:73:05:dc:66:e3:7b:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:4B:DF:13:94:32:91:7A:76:66:4B:1F:6B:BA:01:AB:63:22:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl

            X509v3 Authority Key Identifier:
                keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.220.0/24
                  192.35.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:f8:40:e5:18:90:b5:50:6d:80:04:eb:d4:0e:fd:14:7c:
         f9:e8:79:21:c6:1f:d0:7c:5a:b8:14:fe:70:52:36:4b:03:ca:
         3e:fd:f1:99:e0:7f:bf:70:bb:a6:b1:08:97:32:cc:37:be:13:
         29:c9:85:5e:34:3b:c4:88:d5:64:ba:d3:30:b5:46:35:a1:e8:
         f2:f6:2a:03:e0:76:04:41:3f:96:29:04:44:de:ca:03:94:a9:
         9b:b2:64:19:9b:6c:c0:46:86:54:3b:99:42:97:c7:d0:d4:19:
         bb:b7:10:dc:6c:8a:02:17:fd:2c:84:03:b4:bf:e0:c6:9f:f0:
         ac:9e:94:df:fd:01:88:b9:67:55:6f:78:1b:67:ec:b9:01:63:
         c6:72:18:59:79:cf:c9:a0:10:ff:6e:24:ad:ab:40:d4:dd:67:
         aa:30:93:f9:26:fb:50:e1:4e:9b:b7:55:c4:de:bb:26:d0:15:
         91:0c:56:12:37:39:fd:c3:b0:0b:7a:7b:7d:1b:f8:31:5e:75:
         0e:d9:74:95:13:5b:54:7b:22:61:e2:d3:a4:98:c0:e5:34:47:
         e6:7b:7a:d9:81:ed:39:42:8a:77:be:9a:e4:95:53:64:cd:8d:
         de:c1:8b:cb:f2:ca:1a:ad:cf:e8:d5:83:1e:41:29:5e:fd:19:
         e4:9e:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:33:05 2026 by rpki-client