Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/e50a456c-4b00-3b8d-9781-59776254aef0.roa
File:                     e50a456c-4b00-3b8d-9781-59776254aef0.roa (raw, json)
Hash identifier:          roCDyBSrzZ0X3edr1fRTjl+EMJrOJSzKlJqmDrO7CDg=
Subject key identifier:   B2:4A:6E:9D:E5:55:DA:11:C4:77:39:95:44:80:94:D3:6A:7B:9F:DE
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584EA788C6C45E55F13F9C2D8C80
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/e50a456c-4b00-3b8d-9781-59776254aef0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11096
IP address blocks:        35.128.208.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c6:c4:5e:55:f1:3f:9c:2d:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5fc4f23b-03dc-4a55-8e5e-a669a2ca110a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:17:dc:19:e4:19:01:c0:61:34:98:e3:d2:
                    af:2f:5e:d1:07:14:08:65:b6:c0:bf:64:ec:ee:11:
                    47:61:46:5b:30:ee:21:41:94:9e:30:d3:bc:7a:11:
                    0e:74:c7:65:6d:6c:3a:e6:42:b8:e9:16:7c:13:a9:
                    17:86:0b:b7:f6:5c:1e:4a:1c:2e:5b:a2:74:d5:00:
                    af:20:f8:02:ec:dd:bb:f9:a6:2c:9c:e2:4f:3e:64:
                    48:1a:2f:c7:8f:a4:6d:5c:78:44:22:83:2f:a8:28:
                    c3:bf:2f:e4:81:36:30:b8:a0:6d:51:26:2a:bb:84:
                    97:46:82:14:27:a4:83:83:4d:4a:bf:6a:e7:ea:c1:
                    c1:d3:b3:8a:38:b5:ad:e8:41:a6:ef:3e:19:a4:76:
                    07:53:62:54:63:05:3b:47:dc:85:d8:a2:6b:18:0d:
                    33:98:3b:5a:c5:17:69:b5:54:92:2d:33:49:e3:4c:
                    19:9f:9d:71:f1:06:f9:76:c6:e7:50:85:e8:51:ea:
                    2e:0f:9f:64:ff:32:1a:08:3d:2f:2d:32:d1:ee:aa:
                    1b:b0:73:c6:65:cb:3d:90:9d:98:79:53:dc:a5:cf:
                    f7:77:f2:c2:1a:04:54:41:24:ca:c9:8e:a6:c0:a7:
                    d8:61:17:5d:d5:05:a4:39:2e:77:89:e2:d5:5d:82:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4A:6E:9D:E5:55:DA:11:C4:77:39:95:44:80:94:D3:6A:7B:9F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/e50a456c-4b00-3b8d-9781-59776254aef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.128.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:83:cf:3a:2a:9a:0b:c1:8f:4c:30:aa:ab:0a:1d:4b:14:
         9c:53:7d:f8:6c:73:13:45:0a:19:37:ea:15:13:28:ff:70:af:
         8a:52:af:f6:59:bf:35:54:20:6b:b2:8d:e0:0f:41:30:fd:25:
         c2:dc:0e:00:ee:33:02:ca:21:0c:9d:02:c5:b6:9f:f0:36:d2:
         ab:cc:d1:e5:b9:b7:bb:93:fe:98:33:06:c3:a9:95:3e:5c:4d:
         fc:10:2b:6c:aa:47:2f:f9:97:1c:bb:5a:48:cb:67:76:6c:90:
         46:97:f4:cd:bf:e8:ea:b0:e5:dc:12:2e:f9:2a:9a:a0:26:34:
         93:a0:d8:e5:09:05:f1:65:32:90:a0:b0:76:83:86:d5:43:f4:
         fe:22:57:f6:00:a8:37:8d:cd:0d:93:c5:59:b8:41:2d:ab:32:
         3f:bc:be:ed:20:1e:57:8c:2c:80:cb:f2:7f:0e:ee:ff:7d:b0:
         d1:14:03:22:be:58:b4:12:37:36:18:f1:f4:73:a7:a8:68:47:
         49:aa:b4:6f:e1:61:a3:4d:d8:ae:7f:ed:24:b9:ba:9b:d1:e5:
         ea:52:21:5e:e8:63:1d:a4:55:a3:e9:9e:73:52:07:5d:1c:c3:
         2c:5c:69:4f:73:f1:93:d6:6b:b3:87:d7:42:a4:4c:d0:12:ca:
         e2:9e:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 11:08:04 2026 by rpki-client