Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa
File:                     2f9412b4-0099-3656-b05a-17e3d79ee408.roa (raw, json)
Hash identifier:          ugmq05Wj80p+Q984EiCT5N9fzbT/ZMhLhEfCNNV2K2M=
Subject key identifier:   70:8E:21:42:22:8B:A1:00:70:A6:2C:1A:8C:41:34:D7:7F:CE:A2:4B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06721CA4C1AD58D6FF6827C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36522
IP address blocks:        207.35.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:1c:a4:c1:ad:58:d6:ff:68:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=4a7f3edc-fc5e-47f0-a138-15e5377b479c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:e7:be:54:57:b2:23:ae:bc:bb:ec:96:d8:
                    7d:fd:6b:5d:da:19:f2:ad:ef:20:4e:7c:1d:d8:b9:
                    ec:93:02:79:a7:d6:aa:0e:d6:7e:df:2d:9c:6d:73:
                    c8:c5:1e:86:0e:5b:5f:de:a0:84:8d:b8:c0:15:5f:
                    6d:81:d3:39:1a:94:f4:0d:9e:7d:20:67:71:be:4f:
                    3a:f4:bf:f4:d6:27:69:8a:f6:be:78:02:64:e0:aa:
                    b8:8e:36:d4:68:b2:53:1e:08:93:2f:1b:c2:cd:24:
                    9a:dd:36:36:6d:0d:db:19:90:0d:8f:43:fb:9a:59:
                    62:32:9e:d0:17:1c:5c:9e:51:6e:c5:da:ec:b9:aa:
                    24:1e:e4:ed:3b:f5:58:3d:8e:d6:f3:0e:5d:39:c6:
                    76:12:ad:03:7e:e2:5e:d4:5e:cb:e8:59:e0:55:85:
                    bb:66:3b:e8:3d:d3:08:55:b4:91:65:f1:f1:d1:96:
                    36:86:3f:93:b2:b8:3b:40:83:92:7c:d8:28:6a:6d:
                    7b:ea:48:eb:9e:4b:30:11:6e:a5:a3:e5:5e:64:13:
                    91:38:64:da:af:20:2e:51:9f:1f:82:45:e5:74:a0:
                    59:41:87:c8:03:53:b5:59:8a:fb:a8:5f:c4:11:fb:
                    c7:99:c4:d1:bf:c3:5f:ae:9f:9b:ea:b2:78:08:16:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:21:42:22:8B:A1:00:70:A6:2C:1A:8C:41:34:D7:7F:CE:A2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:7e:33:7c:4e:5c:3b:ca:eb:ff:d1:87:a5:e3:82:33:ff:
         ae:5f:24:e3:ef:bb:fb:5d:76:43:a5:13:9d:e2:41:ed:23:09:
         9f:5e:5f:05:19:6f:36:50:15:cc:12:90:f5:95:f5:2c:89:44:
         83:ba:ff:5c:89:c9:8b:a6:99:34:9a:61:22:63:9b:64:3c:e4:
         a9:c5:47:bf:d3:d6:43:2b:43:63:79:6d:e9:09:be:8d:1e:63:
         7b:4c:5a:19:97:fb:bc:4c:94:1d:2c:fc:85:8b:ec:d4:1f:f3:
         c8:b8:21:c1:b8:74:7f:69:fd:a8:0a:0c:d7:66:ed:b5:85:03:
         09:3d:ed:8c:85:de:17:f1:82:d3:15:7c:e4:12:be:13:77:9b:
         da:81:97:6c:83:14:66:bf:c8:3b:5c:10:2c:40:6d:8c:c8:38:
         4d:6e:3c:9b:a3:f0:67:e2:bc:66:7d:9a:76:fd:0b:63:39:dd:
         d6:d1:aa:15:2e:a2:9e:91:16:90:26:cf:e1:d1:11:c2:f5:8f:
         86:d4:8a:89:e4:07:d0:c4:02:c3:9f:bd:44:f0:08:97:4a:b4:
         5e:47:d9:61:e7:f6:7e:62:af:80:4e:e8:81:69:31:5c:8a:57:
         da:1e:7b:03:1c:b5:69:81:d9:9c:d3:01:6f:37:5c:ce:7a:59:
         3c:c6:ea:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:17:22 2026 by rpki-client