Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa
File:                     35db1a21-9d13-36a4-92ff-c93c50255a11.roa (raw, json)
Hash identifier:          Ajb1KGFA5SVSjpWxxpLgnO9IyDFYU4d/tFPmCy1PFbE=
Subject key identifier:   50:E9:98:A5:00:65:A6:34:29:42:BE:88:B5:E5:F5:D9:D6:10:A6:A9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D60E501972AACA2FB9ED6C860
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        198.40.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:01:97:2a:ac:a2:fb:9e:d6:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=086413a7-a8a6-4ce8-8b0d-3f5c43d117ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:cb:f4:53:7b:94:04:94:f4:b7:b7:30:d4:
                    b2:4c:b8:d6:c6:af:51:42:d1:9d:1b:f3:c2:66:e0:
                    8b:3c:34:50:3d:28:1e:90:04:e9:80:29:28:a6:0e:
                    1a:23:95:26:b9:30:cf:db:71:2b:d3:04:3b:6f:9c:
                    c1:7f:77:fd:2f:ad:a4:9e:7e:98:39:1b:ab:41:8b:
                    36:bf:19:8c:0a:cd:8b:90:72:c8:2e:d5:dc:73:ce:
                    8b:e0:8d:26:be:0f:c3:36:08:71:94:2b:01:00:30:
                    c9:29:0f:fd:4c:48:7b:34:3c:f1:c1:5e:3b:f3:ce:
                    18:f9:f5:ca:49:a0:85:f3:75:60:41:9d:e0:6f:88:
                    67:5f:e0:73:24:d3:68:b8:2e:d1:1b:6d:ad:7d:61:
                    41:b1:8e:b6:e8:7a:81:db:d2:1d:81:34:9b:85:2a:
                    96:87:44:09:8c:05:0d:ad:2c:7f:57:88:dc:bb:56:
                    b3:c5:e5:ba:6f:f5:3e:47:7b:d2:52:d1:97:7e:58:
                    d7:fc:41:0c:41:19:6f:0c:f5:a0:8b:7d:3c:44:96:
                    9e:e7:96:cf:d1:4a:01:74:24:14:81:9d:1c:ed:eb:
                    66:68:93:40:ad:2c:80:65:06:23:d4:b3:9c:39:c8:
                    78:69:2f:55:5e:3c:36:d3:9b:39:39:d3:35:d8:83:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:98:A5:00:65:A6:34:29:42:BE:88:B5:E5:F5:D9:D6:10:A6:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:91:df:79:60:1d:c9:d2:e7:25:43:1d:59:58:95:44:f5:9c:
         73:4d:4f:2b:74:bc:cf:3a:ff:a2:5b:8b:05:43:96:00:b3:e2:
         4e:2e:bf:30:26:d7:81:76:35:2d:e2:28:d7:de:ce:6e:b9:6b:
         7e:3c:1d:d3:cf:54:b8:01:36:e4:44:69:7a:38:6a:c9:a0:e7:
         31:eb:1b:f0:f7:2f:87:95:09:f6:cb:fb:f9:33:ec:dd:94:65:
         68:2b:42:57:51:a0:8d:a0:31:11:18:be:28:78:d5:fd:68:67:
         65:1e:d4:5d:90:ab:63:06:e6:f8:b7:04:94:10:d0:11:bf:a5:
         2e:80:6b:da:87:fa:24:3c:81:df:5f:f2:58:64:88:2b:0c:c0:
         c3:20:2d:54:2c:80:4a:ef:6f:2c:3e:03:cb:9f:9e:d5:7a:dc:
         4e:e8:8d:85:78:e5:7d:e4:0b:6d:23:30:ac:14:23:fd:f1:15:
         df:ca:85:b5:51:9d:3a:97:8b:5d:42:77:c5:b4:ab:d6:63:fd:
         eb:15:dc:fa:a0:0e:10:48:fd:16:ca:55:37:ed:67:7c:f8:00:
         ae:c3:51:66:b6:3f:16:07:23:7d:65:fa:a5:be:4f:85:f2:50:
         66:45:bc:80:52:c7:73:3b:5b:6e:11:a4:45:9d:5f:a8:99:ab:
         40:52:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:18 2026 by rpki-client