Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa
File:                     015ba892-66b8-3dde-9289-c0d40a2a62b7.roa (raw, json)
Hash identifier:          JEgK1+LGzuBfzUl1A/4RsnbGxbk0mJ7FTM2WFJnzBgo=
Subject key identifier:   45:69:B2:9F:6B:24:E4:A3:6E:29:9E:93:6B:B0:9D:D2:16:72:04:FD
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA4451314E84182E500072100
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     33651
IP address blocks:        216.170.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:13:14:e8:41:82:e5:00:07:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=0e0c9933-d24a-4357-9a27-ddeea03dd737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:01:42:c5:b0:4d:55:05:24:80:aa:0a:e8:
                    67:15:dd:83:30:8d:ba:92:0d:67:55:df:11:52:c9:
                    4a:f4:49:84:fb:1b:b2:25:35:f4:aa:50:9f:37:bf:
                    8c:bf:a9:dd:37:38:24:32:87:24:76:6c:2f:bf:ad:
                    2a:21:b2:c9:c4:1e:3e:cb:0a:44:91:9d:0a:56:32:
                    bc:d3:f6:7b:51:d5:82:5b:fb:0e:d0:60:70:13:25:
                    07:e1:b5:a7:25:b0:6e:59:b3:b1:5e:e8:52:46:ce:
                    b9:33:08:55:03:51:d1:18:01:d7:f9:9c:7c:09:c0:
                    e3:0b:eb:da:3f:04:93:61:c1:90:48:71:58:2a:9e:
                    13:1f:ff:66:bc:82:5a:4f:f5:ac:fe:a5:1f:c8:a0:
                    9b:85:74:0c:5d:46:ca:7c:76:ea:9e:ed:95:6a:9b:
                    70:fc:24:ac:a5:c1:5b:61:26:5b:9a:db:9d:94:ab:
                    a5:5e:99:f9:6a:1f:b3:7b:9c:09:42:db:e9:ca:11:
                    1c:78:1c:97:ee:1f:e0:45:6a:72:47:ec:44:45:57:
                    c4:b4:e2:aa:60:61:22:61:f2:b1:09:26:6f:21:76:
                    ea:f6:3d:f8:04:1c:ab:aa:d1:99:dc:e4:51:bc:f1:
                    28:80:50:23:5b:4d:69:fe:3b:b2:59:35:d6:56:42:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:B2:9F:6B:24:E4:A3:6E:29:9E:93:6B:B0:9D:D2:16:72:04:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8c:1e:73:04:16:80:eb:70:51:a1:f6:63:e4:0d:0b:e1:4f:
         a0:00:0f:b5:71:10:56:0f:f3:26:b9:f7:34:fa:24:b7:b4:ad:
         7b:f8:13:21:53:93:94:d6:cc:79:ef:f4:c2:8f:a1:08:e1:2e:
         e0:18:bd:a7:a2:81:1b:8e:1f:12:cc:4f:5c:bc:30:be:fd:ab:
         8a:08:ee:31:94:3a:2b:9f:8b:97:42:6a:ec:f7:9b:d5:d8:58:
         21:ae:f2:c5:84:cd:86:09:46:68:0e:a1:52:d1:0b:ea:d8:72:
         6b:0f:86:c1:71:00:f5:d9:07:1a:74:7c:ed:f4:b6:cc:58:c9:
         c5:cd:fb:50:8c:66:ab:82:1a:83:be:bd:dd:82:87:ee:57:ce:
         23:08:e7:85:d5:ea:04:35:db:4a:2f:fe:06:96:7d:f2:07:e0:
         f6:2a:85:b6:ad:39:46:42:f7:e0:16:cc:f5:ed:84:f5:bf:69:
         40:33:06:77:15:df:b8:68:46:35:47:ab:12:68:c7:70:a4:ff:
         2f:ec:4e:b7:9d:d2:86:02:31:7c:7f:c5:b7:30:af:6b:ba:7c:
         db:ea:16:55:11:23:e2:aa:e9:80:27:17:9f:8f:a3:41:7a:d7:
         22:a7:a9:04:4c:59:4c:6e:c9:e3:0a:58:21:42:50:a9:11:8b:
         65:33:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:22:27 2026 by rpki-client