Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/104230bb-05e0-32ca-af10-d1b207505328.roa
File:                     104230bb-05e0-32ca-af10-d1b207505328.roa (raw, json)
Hash identifier:          0pENCE+rfvkNNGD18Qd/Y0jYoglFsRfBh6LdEZZKIN0=
Subject key identifier:   8B:D1:36:6B:26:FC:0D:85:73:73:35:61:FC:40:DD:3B:0F:CE:2A:01
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584E9BE50BF14EE5AA23134501C0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/104230bb-05e0-32ca-af10-d1b207505328.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     36375
IP address blocks:        35.0.0.0/16 maxlen: 16
                          35.1.0.0/16 maxlen: 16
                          35.2.0.0/16 maxlen: 16
                          35.3.0.0/16 maxlen: 16
                          35.4.0.0/16 maxlen: 16
                          35.5.0.0/16 maxlen: 16
                          35.6.0.0/16 maxlen: 16
                          35.7.0.0/18 maxlen: 18
                          35.7.128.0/18 maxlen: 18
                          192.41.232.0/23 maxlen: 23
                          198.108.8.0/21 maxlen: 21
                          198.111.181.0/25 maxlen: 25
                          207.75.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:0b:f1:4e:e5:aa:23:13:45:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=add19eea-01c4-43d1-9cb4-05ff063e1a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:4f:cd:4b:db:b6:f3:f4:85:68:aa:66:49:
                    d6:32:bd:a6:cb:23:4a:9e:36:99:cb:df:45:17:62:
                    53:df:50:51:2b:f3:53:71:04:d1:3f:17:79:df:31:
                    c3:a7:96:0a:77:51:bf:57:0c:40:cc:1d:36:44:f9:
                    2d:e4:90:c6:e0:19:c1:51:58:8e:e7:da:c4:62:ea:
                    b8:c3:e6:bc:06:63:ea:15:23:a1:2d:86:8e:64:10:
                    dc:e6:51:39:cc:98:a5:af:f5:07:3b:77:44:73:63:
                    11:d4:09:e4:73:eb:97:b0:6d:42:d3:8c:ff:26:24:
                    38:dc:64:b5:37:c5:bd:d6:80:d8:de:c1:e3:9b:cf:
                    43:43:c3:52:18:11:27:1c:9d:a1:91:87:f7:06:ed:
                    f1:83:33:f3:5f:5e:61:f4:c3:4f:48:8d:c6:83:fd:
                    1c:2d:42:a9:5f:df:cc:f5:de:95:0b:46:97:d1:d8:
                    e5:fc:de:67:6b:8f:c9:9a:67:c1:dd:e2:75:ff:e7:
                    1b:8f:2f:1c:4e:57:0c:f1:a1:1d:7b:2f:91:bd:ee:
                    f4:af:ff:d6:a2:f2:d3:79:87:b7:16:7f:fc:d0:65:
                    e2:2b:68:3f:8a:b3:86:fc:ca:ab:ba:67:a0:ae:1b:
                    91:81:ef:c9:27:f0:1e:0e:8e:2c:6f:cc:78:6b:58:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:36:6B:26:FC:0D:85:73:73:35:61:FC:40:DD:3B:0F:CE:2A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/104230bb-05e0-32ca-af10-d1b207505328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.0.0.0-35.7.63.255
                  35.7.128.0/18
                  192.41.232.0/23
                  198.108.8.0/21
                  198.111.181.0/25
                  207.75.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:b8:1b:bd:a8:5e:e6:36:99:a6:ed:b0:c7:2a:9b:8f:34:
         32:79:46:3b:0f:58:df:d0:00:d4:40:1d:9d:a5:c3:df:05:cb:
         3b:fc:8f:b8:b6:df:53:11:8d:27:f6:79:91:3a:98:e8:77:78:
         db:22:36:a1:25:21:5e:97:29:4b:84:35:47:54:2b:72:ca:e4:
         5a:45:56:50:86:38:53:ab:fa:19:e8:f9:a1:65:f0:1e:ec:fb:
         c3:b4:05:c5:75:13:a5:55:63:0a:4f:a6:d1:a4:12:0b:62:a2:
         bf:d8:73:e5:16:80:f9:66:46:71:ad:3c:3e:3c:dd:4f:2c:91:
         80:bb:50:16:a2:e6:4a:de:79:5a:0c:ff:a5:2c:f4:0b:6c:17:
         a7:80:52:ff:5a:63:ef:b5:45:21:c0:28:14:2b:15:3e:e8:e9:
         74:ee:db:70:fe:37:39:0a:d5:3a:82:e6:25:98:69:f6:11:14:
         59:da:c9:57:2d:6c:20:83:82:d9:23:1e:52:6b:6f:e9:59:c4:
         e2:37:90:c3:9e:3c:2a:64:3d:71:5a:ed:38:b5:44:58:da:c9:
         d7:7d:e8:40:03:a9:8d:da:ad:fb:7f:36:2a:3d:21:40:7a:18:
         49:ac:da:e4:a6:4b:57:e2:38:ad:73:50:57:36:15:bb:9d:e0:
         9a:ad:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:26 2026 by rpki-client