Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
File:                     e6965540-cbd0-3930-b638-a04886e69eac.roa (raw, json)
Hash identifier:          PW9BT//WYhi6VWyKc5QQYCTUy7GbgMflIwHyKRlFVDc=
Subject key identifier:   25:B9:71:2C:BB:B7:CC:8F:23:AE:9B:8F:54:6A:91:FF:39:E6:C4:FB
Certificate issuer:       /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
Certificate serial:       010D0C9F4328584F119CF888682D7C7C1BB2C180
Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     4983
IP address blocks:        192.55.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f8:88:68:2d:7c:7c:1b:b2:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2a5aaff4-f376-4f91-9a9e-3df7db20161c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:fc:8a:17:fc:2c:76:3f:d0:b7:1d:0a:72:
                    07:da:f4:7b:90:cf:23:69:90:07:98:b5:23:58:79:
                    69:25:34:1c:88:11:fc:fc:6c:f1:eb:df:f4:79:2b:
                    5f:4d:6e:aa:a2:f1:e1:31:20:0f:b3:85:d2:c5:da:
                    65:46:4d:2b:33:6c:52:e4:98:29:cc:31:37:53:bc:
                    c3:59:7c:22:2a:a8:34:3b:33:f2:ca:a1:38:ea:f3:
                    d1:cc:79:75:a7:6c:db:ea:a1:be:4d:e6:2a:39:a7:
                    5c:4a:5f:bd:d5:28:0f:dd:41:06:22:2f:af:a5:e4:
                    5a:c6:40:63:65:b7:55:16:5d:91:2f:8c:85:cd:9e:
                    0d:de:66:b7:aa:b0:b4:50:9b:90:76:32:1f:22:ad:
                    84:34:a8:51:7f:9d:a3:19:a4:31:9e:b8:57:58:69:
                    6e:8f:dd:56:96:2f:59:49:27:ef:dc:99:ec:53:a9:
                    96:6c:78:c0:1e:6a:40:fc:6e:c3:f9:c9:af:ed:e1:
                    25:61:1a:e1:b2:68:41:55:69:4d:0d:55:cd:3e:47:
                    9b:69:94:de:18:98:b8:87:f5:f7:c4:c3:dc:a0:19:
                    9a:e0:10:6e:5b:8a:db:42:5f:48:7a:82:e0:54:4a:
                    1d:28:63:97:ab:2f:87:06:d6:65:ab:7d:91:12:cf:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B9:71:2C:BB:B7:CC:8F:23:AE:9B:8F:54:6A:91:FF:39:E6:C4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl

            X509v3 Authority Key Identifier:
                keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7f:4d:fd:c8:70:07:cd:9d:3c:76:78:9f:a6:27:ff:36:d3:
         82:43:79:2e:d1:28:73:f4:58:f1:50:92:cc:d8:9a:67:a9:e5:
         35:78:05:d8:c1:78:6c:b2:f8:87:f4:43:9e:47:ea:10:08:dc:
         61:51:9f:ba:a5:d3:e9:b1:0c:24:07:c5:6d:47:c5:00:d5:66:
         77:8b:4e:48:bd:61:8b:9f:42:4c:5f:ca:5b:b6:c5:ae:df:a6:
         e5:46:36:11:5d:d9:f1:a3:af:66:36:2a:2c:80:61:92:27:04:
         6b:f3:16:c3:41:b1:81:ee:cb:14:7b:1a:b6:f4:48:24:6b:72:
         97:79:b3:2e:e6:26:bf:08:0a:37:0c:95:72:82:11:74:c1:ca:
         5b:82:34:82:1b:82:62:f0:46:27:10:bc:67:c7:5f:22:b2:aa:
         90:c4:46:a5:25:3b:08:00:02:84:8f:22:0a:57:3a:c5:93:33:
         05:08:50:4a:86:0c:11:c1:04:a2:03:a1:c1:f8:f4:88:67:d3:
         a2:e8:f2:fb:cb:38:97:2d:2b:cf:6d:5b:17:e4:3d:56:4a:0e:
         9d:d5:24:0a:84:9c:b7:bc:c7:a6:39:98:56:e4:bf:32:8b:2d:
         6e:3e:79:1d:07:d2:01:23:27:42:ed:bd:77:2c:54:39:a8:fc:
         ea:c8:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:00 2026 by rpki-client