Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa
File:                     4420efee-d6ff-34dc-a90c-8a60f36af65e.roa (raw, json)
Hash identifier:          TZ+tclglQYyvBCk1xZK5p8TXKN87nlXEZNzltawHjhE=
Subject key identifier:   ED:67:EC:01:A5:7C:04:DE:B6:A1:D0:75:79:80:F7:CA:29:D0:9D:BB
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584F2ABD150A9F24BC85F9BF2B80
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     36231
IP address blocks:        172.111.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:15:0a:9f:24:bc:85:f9:bf:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=93435f67-d961-4f88-925f-f13fce63fe27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:f3:fc:6a:9b:a6:e3:64:30:4e:25:23:bf:
                    c6:57:66:a8:c7:c7:58:8b:56:29:7a:b8:84:92:c9:
                    2b:94:d0:3d:95:35:ab:7e:b6:c0:93:14:f6:8b:93:
                    99:8f:58:41:50:0a:be:2e:b6:c3:30:9b:19:1d:b1:
                    f5:ed:71:44:d6:d8:c8:1b:53:f6:16:c8:98:4e:ed:
                    61:9b:a5:32:79:bb:63:9c:29:7a:22:a0:4a:57:76:
                    c3:82:bb:49:97:83:a7:2f:21:5e:55:de:e4:79:24:
                    09:b1:91:73:15:74:37:60:ab:f6:bf:13:0a:55:db:
                    37:7e:6f:e7:1c:76:8c:5d:92:47:a0:e5:86:e5:22:
                    e7:a4:f8:8b:cb:2a:25:5a:cf:c3:72:88:11:da:b0:
                    32:45:a8:1d:89:71:7f:5c:39:00:01:f1:fb:09:de:
                    e3:9e:74:29:f0:36:fd:64:0e:2e:c0:4b:e5:dd:64:
                    12:1e:15:51:8a:69:c1:42:ec:d3:64:6c:36:d4:62:
                    d7:34:2d:3f:03:b0:c5:0a:80:c6:31:21:37:ab:00:
                    6e:a5:05:24:e8:83:60:e0:21:52:8b:de:e7:c8:40:
                    23:e0:0f:f5:39:3b:1a:7e:f4:b4:0f:4c:36:76:03:
                    3e:17:ef:0e:e1:3a:d9:cf:d9:89:ca:d9:e4:4c:9b:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:EC:01:A5:7C:04:DE:B6:A1:D0:75:79:80:F7:CA:29:D0:9D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8f:6d:48:fe:08:f1:9c:5a:33:30:65:20:cf:d4:78:20:f8:
         6b:27:c2:06:d2:af:47:56:fc:e6:d1:9f:98:9b:cf:60:0a:86:
         8d:96:91:c4:67:16:c0:dd:df:44:5c:a9:cd:a8:bf:22:33:67:
         79:15:02:cd:aa:8c:7e:4a:c3:04:9f:b0:04:df:19:80:9d:96:
         8e:53:81:dc:7f:e1:05:aa:b1:e4:b9:6a:79:ae:db:cf:b7:a4:
         36:8b:c0:b9:d8:f6:60:17:8c:8a:07:38:85:fe:40:f4:69:18:
         2c:45:7c:07:cf:e0:37:81:78:c5:cb:13:1c:49:38:1c:13:47:
         f7:81:61:03:d2:7f:09:ad:40:a7:2c:ba:1c:22:4d:0a:6c:63:
         83:61:26:eb:d8:ed:7c:c1:91:b8:21:e9:a1:63:d4:c9:98:b4:
         fe:73:8f:c8:45:bc:00:b8:5f:7d:5c:94:26:d0:38:09:38:f1:
         f8:f1:83:69:7a:23:c0:b9:d4:58:59:b6:b3:50:44:b8:f9:fa:
         5c:1e:10:d4:29:7e:5c:e0:94:21:34:dd:57:1c:7b:fc:01:8c:
         b9:52:ed:48:46:b0:b5:c8:be:22:3d:fa:43:ea:de:d4:11:fd:
         07:f8:ee:49:f4:22:ac:2d:3b:6b:0b:ed:e6:5d:2f:ed:d1:17:
         34:fc:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:51:51 2026 by rpki-client