Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa
File:                     f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa (raw, json)
Hash identifier:          YEuc3EOyJkwYJnIIuYGGPZWsL01wqLlNz9u0zh1SOsY=
Subject key identifier:   CE:D3:63:93:FB:2F:91:B6:7E:D8:28:06:8B:2D:51:1E:92:BC:3B:AA
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584EA7882B0220B6157604C9CB00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     237
IP address blocks:        35.46.0.0/18 maxlen: 18
                          35.46.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:2b:02:20:b6:15:76:04:c9:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ebcb0172-fc81-4a01-8e60-68d07c97c5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:ce:c1:15:91:2b:88:91:d5:3b:f4:ad:e2:
                    c3:eb:d5:5f:1a:50:0e:8c:45:5f:c0:84:37:07:e6:
                    47:98:b7:ac:2f:04:c6:bc:7a:7b:47:40:9e:c8:f5:
                    1b:a3:57:13:e1:ee:26:5d:4f:c9:0a:38:ec:bb:67:
                    49:1d:ed:47:ed:34:58:17:1f:63:f3:5c:b6:18:08:
                    97:a8:5f:8b:41:ef:cd:b4:0f:2e:25:fe:fa:b6:49:
                    ed:9d:06:d2:d7:14:98:9a:72:2e:76:56:22:41:63:
                    6c:fd:1e:58:08:bb:a0:14:dd:a3:88:5d:4e:19:61:
                    c3:d0:2d:af:75:cf:c5:a9:6e:8a:83:59:68:66:1f:
                    73:6a:a1:12:9e:d3:c3:1d:7e:a8:6e:cf:6f:09:cb:
                    a7:5a:f5:7d:f4:79:a7:1b:4f:41:c6:36:c8:04:18:
                    0e:40:9b:2c:49:e6:f4:27:04:08:3f:95:f7:b6:43:
                    96:98:20:63:6f:3a:e0:62:8b:de:99:e7:b1:e8:16:
                    e7:45:50:8c:b8:16:17:d7:65:39:07:44:64:26:44:
                    4c:af:ce:e2:92:1f:3f:f7:06:72:69:6d:08:4e:45:
                    ce:3f:13:65:11:f7:21:fb:bb:67:d6:1b:ab:9a:a3:
                    81:f0:2d:95:28:c8:f2:a6:f0:a4:80:13:4e:31:d2:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D3:63:93:FB:2F:91:B6:7E:D8:28:06:8B:2D:51:1E:92:BC:3B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.46.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:15:4c:1d:98:c9:3d:4b:cb:fb:de:e0:7d:35:8c:cc:be:fe:
         67:c3:81:03:f1:7e:02:cc:64:06:3c:b5:7f:ea:6b:5a:d3:55:
         2b:96:ed:0b:35:35:27:e7:56:30:f5:a6:af:27:ca:d2:c7:af:
         93:c9:3f:b9:14:41:fc:b2:1a:9c:87:13:a0:2a:0f:fd:99:76:
         c7:7f:29:3e:96:6b:b1:b3:2e:fb:fb:96:a8:fa:d8:0c:d0:57:
         cf:93:fd:4f:07:ce:4c:6d:b4:18:1e:57:f4:74:8b:ca:15:86:
         61:d9:67:78:52:a4:9b:53:c1:6a:9c:42:cd:e6:54:f6:1a:93:
         12:90:18:85:89:83:a0:c2:63:31:df:3c:09:3c:c0:00:7d:e7:
         30:27:9d:04:f7:fe:f8:63:fe:85:50:54:4c:fd:bd:80:4c:24:
         d1:de:12:fa:1c:6f:2d:0b:54:56:74:0d:64:0e:71:07:88:ae:
         ae:a1:28:3e:fb:0d:b1:0a:51:a3:f1:3a:2f:6a:46:3d:3f:ba:
         5b:c1:ea:62:3d:3a:9c:df:9f:78:4f:08:44:18:9c:0b:47:c9:
         e5:05:60:4e:69:f7:a5:63:f9:a0:ab:f2:0e:d5:c2:6b:a7:36:
         1b:6c:04:19:ba:c6:9c:c0:ad:8a:74:ab:63:26:ac:4b:ec:d0:
         93:35:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:36 2026 by rpki-client