Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa
File:                     c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json)
Hash identifier:          rcB6yd8UYm/3KC8gBq9iubExMCZXaBSspuRzqIJvUhE=
Subject key identifier:   9A:46:5C:A4:F8:FC:0F:31:1B:83:0F:35:FE:10:C8:06:74:84:60:39
Certificate issuer:       /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
Certificate serial:       010D0C9F4328584F7A4D9766251D801D27484200
Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     64236
IP address blocks:        199.193.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:97:66:25:1d:80:1d:27:48:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=5cefe28b-2f43-4a31-a26e-f5ed999396e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:bc:81:17:e2:9d:7a:b1:26:8c:25:3c:a9:
                    b1:a3:4a:44:59:55:92:c6:52:fb:68:9a:cf:87:05:
                    1a:d0:e8:54:8a:f6:cd:9f:78:b9:90:48:87:51:91:
                    13:64:f7:f4:cd:c2:74:c0:8f:41:3e:0c:b5:62:55:
                    c7:16:54:59:ad:b1:81:e4:0f:04:ae:a6:39:0e:58:
                    6a:b7:b0:f6:52:8e:b8:cd:3c:9a:04:50:11:97:32:
                    31:f4:96:5e:92:24:93:1b:d3:4b:88:aa:be:bc:80:
                    6f:1e:53:f2:4c:f9:f3:d0:31:4c:7f:7c:4b:3d:a0:
                    65:f4:c9:d6:98:33:e5:e5:2b:b2:65:80:e6:0b:f1:
                    42:e0:bf:cb:d6:c3:f8:b0:c9:9e:1b:8b:32:93:ad:
                    27:43:65:26:ba:1f:53:b1:cd:88:31:3a:83:7c:17:
                    05:c7:7f:35:ec:18:b9:ce:17:d6:9b:0a:b1:cb:31:
                    cf:0d:f1:8a:4d:84:7d:1f:1c:1e:d5:93:3d:54:99:
                    75:55:fe:7f:5c:95:39:24:05:6a:79:17:d5:c0:33:
                    b5:db:b8:28:d9:1d:5c:0b:98:d5:3f:0b:f6:d7:d4:
                    7d:aa:cb:e6:a5:66:05:2b:e7:c0:b0:90:95:08:8d:
                    69:cf:2e:ce:5c:8d:78:73:98:c9:18:38:9e:0e:b4:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:5C:A4:F8:FC:0F:31:1B:83:0F:35:FE:10:C8:06:74:84:60:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl

            X509v3 Authority Key Identifier:
                keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:42:7f:4e:5f:d2:ce:af:54:09:2b:da:5b:d3:3a:f4:22:
         7f:62:ef:f9:72:05:44:ee:d7:26:9c:b5:a7:90:10:80:83:dc:
         15:ec:8f:84:fd:79:f3:63:26:dc:28:1a:61:b1:a8:2a:56:51:
         bd:fd:b2:10:64:90:47:84:27:d5:2e:68:ab:3d:9b:0f:55:87:
         10:47:54:6a:a0:fd:70:f5:db:e4:51:94:92:ef:bd:e3:52:16:
         2e:29:3a:7f:a7:09:16:28:5d:a4:d0:08:7b:5a:a0:59:3c:6e:
         4a:60:5d:76:8b:92:3f:f5:41:30:3d:93:ac:db:9e:7e:73:18:
         10:3c:62:1e:fa:01:30:3e:1a:75:3c:0e:9d:ac:ab:ba:7d:91:
         98:29:c6:27:d6:26:95:6b:67:c1:55:53:ec:1d:de:9e:2b:38:
         45:28:9b:88:84:46:50:aa:22:9a:06:07:71:3b:bc:02:13:4b:
         25:2c:f7:dd:b2:11:b6:2d:7a:f7:08:a7:48:ec:ba:11:af:14:
         91:32:ab:66:00:d1:f5:29:d4:66:28:8d:db:a6:79:50:18:2a:
         48:0d:30:a0:94:74:6b:bb:8e:96:ad:dd:19:1b:95:4b:c2:32:
         69:32:1f:73:e6:48:a7:e5:35:ab:b2:b8:fd:0c:08:f2:87:8d:
         5d:b4:ef:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:31:49 2026 by rpki-client