Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/a01180af-7c27-39aa-8f8a-f7848f5b3260.roa
File:                     a01180af-7c27-39aa-8f8a-f7848f5b3260.roa (raw, json)
Hash identifier:          yt+ien8ofl09R8dG4CvtvYa1TrykO5Zaaw8YmFuxmsc=
Subject key identifier:   E1:42:83:4F:55:9E:6B:EB:8A:0E:2E:B5:27:76:19:58:AC:8A:90:FE
Certificate issuer:       /CN=35b5598c-6468-4a07-ba62-b390f60d1dde
Certificate serial:       010D0C9F4328584F4090B43D0B5F3EB71E5C2900
Authority key identifier: DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/a01180af-7c27-39aa-8f8a-f7848f5b3260.roa
Signing time:             Mon 21 Sep 2026 20:38:45 +0000
ROA not before:           Mon 21 Sep 2026 20:38:45 +0000
ROA not after:            Sun 20 Dec 2026 21:38:45 +0000
asID:                     29917
IP address blocks:        199.192.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:90:b4:3d:0b:5f:3e:b7:1e:5c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b5598c-6468-4a07-ba62-b390f60d1dde
        Validity
            Not Before: Sep 21 20:38:45 2026 GMT
            Not After : Dec 20 21:38:45 2026 GMT
        Subject: CN=fef5a80b-0597-449f-850d-2d695e1db7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:44:f8:73:ff:b2:bb:66:cc:0f:73:61:41:
                    d6:4c:e5:6a:a3:86:e7:ab:15:b9:d6:e6:36:0e:f2:
                    d0:e0:5a:51:0b:8d:54:c5:f2:7a:86:ea:80:62:d4:
                    40:2f:f5:06:20:1f:fb:d0:d2:1b:75:db:35:ae:46:
                    6b:1f:0d:f7:0b:56:63:ae:a7:5f:5a:10:4b:0c:2c:
                    73:97:ee:6f:9c:fa:74:fd:88:db:f7:fe:d8:b0:9a:
                    b3:cc:ef:ba:cc:d5:69:b6:8f:a4:9f:b3:ea:0f:35:
                    80:4b:6e:ee:b2:6c:51:45:4c:90:d5:e4:ea:a5:78:
                    23:39:d8:db:a1:e4:b2:c7:37:af:95:88:78:79:3e:
                    06:74:4b:8e:6e:6f:23:d9:73:25:6d:61:6d:4b:fe:
                    62:97:f2:72:a8:44:83:0b:f8:dc:c2:06:6a:3b:39:
                    23:b0:89:15:ec:92:f9:f7:df:b1:db:35:2a:13:99:
                    dd:a8:51:bb:ad:46:b2:66:83:d4:2b:52:0e:cd:9d:
                    a3:8e:23:d2:91:c5:63:02:5e:e4:99:9c:be:0c:a2:
                    c2:a9:ea:95:ab:ac:4c:67:9e:1a:81:bf:43:86:ab:
                    3d:ed:94:80:cf:76:05:a4:b2:7d:b6:8b:7f:32:62:
                    30:37:16:0a:4d:ee:b8:b8:66:c5:df:62:c8:f4:b1:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:42:83:4F:55:9E:6B:EB:8A:0E:2E:B5:27:76:19:58:AC:8A:90:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/a01180af-7c27-39aa-8f8a-f7848f5b3260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl

            X509v3 Authority Key Identifier:
                keyid:DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:50:47:9c:8c:27:db:3d:19:4d:d5:75:67:d4:4f:40:46:4d:
         e6:7f:1d:b5:49:3f:eb:7e:22:32:6c:68:c5:bb:a0:9d:cd:fb:
         0e:ce:2c:bd:1e:1c:fa:8f:91:19:f5:3c:1f:94:61:fd:d8:9f:
         53:83:8c:68:32:ec:fb:70:fc:7e:71:75:53:5f:d6:e8:b0:34:
         7e:28:0a:76:c0:46:c4:1d:db:1c:33:40:9c:d6:03:9f:ea:5f:
         16:da:f7:04:c4:1c:2a:c0:16:d1:b4:fd:2f:1e:e8:76:57:a4:
         59:db:de:d8:1e:ce:1b:87:5b:4b:36:9e:6f:27:a7:37:1d:27:
         57:f0:b6:c3:89:60:a2:8e:f9:19:48:8b:93:c2:98:09:25:6d:
         a0:de:e9:22:c2:70:81:fa:4b:5d:8d:68:b1:d1:39:51:80:54:
         ae:86:db:f6:77:1a:6b:4f:b0:d0:9a:cd:58:8d:da:79:8a:9e:
         c8:9f:8d:e5:17:de:c0:27:3d:2f:6b:47:54:5b:74:94:76:00:
         cc:e3:5e:88:ab:05:e3:32:e5:31:ff:69:38:10:68:e3:b0:bf:
         0a:e1:aa:6a:4b:67:4a:72:bc:1a:a5:67:51:70:3c:59:79:2e:
         9a:77:de:a8:ae:2c:39:b2:f0:e3:94:a6:37:87:52:74:45:5b:
         2a:06:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:31:51 2026 by rpki-client