Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
File:                     286dff2e-c72b-39d5-9019-431053745837.roa (raw, json)
Hash identifier:          cdXHdvVerIEyWSbWfBh0NBE8OoB3BlB6toIUYI5XQxs=
Subject key identifier:   B6:17:AC:B6:9B:51:24:CA:55:EE:E9:56:EA:2F:9A:97:AE:21:36:46
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584EA0154F14B2375FD69BB90580
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     400727
IP address blocks:        209.35.100.0/22 maxlen: 22
                          209.35.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:4f:14:b2:37:5f:d6:9b:b9:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=21485c85-0b23-4710-b6d7-d51196489c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:c1:42:fe:a5:17:75:42:0d:97:7b:91:9e:
                    f7:61:99:28:f3:02:e6:b8:a7:37:c9:c9:87:79:15:
                    79:96:88:54:49:a3:ec:81:4b:54:77:8d:e5:a3:8c:
                    a1:75:0e:ad:43:97:a6:ce:1a:bb:54:6f:ba:d1:79:
                    e7:d9:be:ca:41:73:94:95:a3:02:66:6d:28:b3:c1:
                    78:e4:56:cd:0f:ed:de:e7:ab:e6:c8:8a:98:bf:8b:
                    f8:ce:48:05:af:91:dc:a9:1b:a4:5c:ef:df:5f:04:
                    a8:24:96:44:05:df:99:91:e5:f3:75:55:04:1f:ec:
                    be:bc:99:64:30:b9:3e:0e:a9:a9:d9:89:e9:fd:16:
                    f1:a6:12:8e:fd:b8:1d:93:c5:53:06:61:87:79:2c:
                    e1:0b:f4:f0:33:30:ff:d4:c9:a1:b6:ad:19:59:39:
                    57:85:38:a3:d1:48:ee:3d:b6:0d:d6:29:bc:86:7f:
                    7c:2c:a1:1f:b5:25:6d:82:0d:d6:d0:97:64:04:a6:
                    43:d3:fd:e5:cc:c5:7a:6d:24:d7:dd:91:b6:34:88:
                    93:c0:c1:0b:c0:c8:35:6a:17:0d:30:e7:77:43:63:
                    7d:01:96:1e:d2:e0:c6:62:70:2b:82:b1:90:14:cc:
                    df:18:da:52:2a:7c:d5:5d:f9:7e:9a:af:ee:5f:98:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:17:AC:B6:9B:51:24:CA:55:EE:E9:56:EA:2F:9A:97:AE:21:36:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.100.0/22
                  209.35.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d5:57:9f:2e:08:35:05:ad:91:16:2a:07:a4:45:22:c9:31:
         ce:d0:ed:ad:15:6a:18:38:b9:94:14:55:9d:28:e4:3b:fa:f1:
         3c:26:8f:9e:21:13:81:ac:1a:8e:96:31:51:c6:ff:33:1d:d5:
         5f:30:33:1b:a3:4c:2d:12:2d:9c:34:d2:a8:d2:f8:e3:65:d9:
         3a:30:dc:80:9f:93:c2:27:a6:be:c6:d0:7f:98:36:8e:31:53:
         3a:9f:4e:55:66:50:e8:82:47:29:f6:44:96:d9:ef:61:05:d7:
         48:aa:8e:df:82:aa:79:40:74:01:1b:44:8b:02:9d:c7:1c:10:
         4f:a7:9e:cd:f1:0e:a2:71:25:7d:24:fe:7b:06:07:f0:ff:32:
         60:7b:e9:44:f6:a0:42:cb:48:da:93:19:46:e5:f5:f1:17:c2:
         24:4d:40:23:87:af:71:a2:f6:59:4e:4a:69:a3:48:e4:bc:80:
         18:6f:16:bd:42:1d:83:3f:d6:43:9a:cf:f1:04:b8:a8:a7:87:
         ec:05:03:30:94:69:33:59:a9:52:42:98:64:b8:40:c3:a6:0a:
         ea:ae:70:cc:39:aa:14:4e:d1:9b:54:70:85:d4:01:ea:17:dd:
         c5:fe:b8:69:5d:ed:49:a9:45:6f:e5:ce:7a:7c:2b:2d:71:63:
         52:ad:ba:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:48 2026 by rpki-client