Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/48f4e3d4-f84a-3031-9e79-8a4611ef9d1c.roa
File:                     48f4e3d4-f84a-3031-9e79-8a4611ef9d1c.roa (raw, json)
Hash identifier:          YB7uwLVB2bq1eAW3sQ2q/aMXY8TjSiA6hSl4T8gDzwc=
Subject key identifier:   C7:F3:E7:79:9A:39:ED:8E:15:63:F4:FA:A9:09:42:69:DB:10:64:B1
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA795DFB82DA5F26A071DB1C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/48f4e3d4-f84a-3031-9e79-8a4611ef9d1c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        204.85.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:df:b8:2d:a5:f2:6a:07:1d:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=058fdb4a-ca5a-49f6-a766-2c5f2011004c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:21:11:4d:5a:d2:65:e7:52:76:b9:fe:7f:
                    d6:bc:62:7d:d6:12:61:c1:6a:68:5f:69:38:79:cb:
                    69:e4:a9:17:b6:4c:25:54:c2:9f:6f:7d:c1:d7:1b:
                    d2:98:7a:4a:a3:4a:d2:d7:c7:80:f3:1d:b8:f1:87:
                    d4:9c:77:c0:bf:8e:9a:89:c7:0a:e4:8f:96:d7:23:
                    f8:fe:65:66:92:18:9b:40:d7:dc:ed:d7:3c:26:9e:
                    c5:d5:dd:b3:2f:9b:eb:11:47:9a:ee:d7:4e:0c:ae:
                    82:71:1e:f0:e4:0b:6f:49:a0:d5:34:cb:30:e1:55:
                    34:f6:25:92:4c:83:81:64:47:db:a2:60:bd:53:cd:
                    63:76:c1:7c:86:92:b7:58:08:29:ae:0d:5e:1e:e2:
                    44:fe:41:4f:3f:22:02:f3:36:f4:00:5a:c8:ad:06:
                    65:0a:16:eb:fa:c3:c8:c4:a4:f9:1d:f9:53:0a:9a:
                    ad:91:ee:a1:43:76:ba:69:ea:28:f6:95:cf:6d:1d:
                    7a:11:21:dc:19:41:ba:6d:9f:8f:18:7c:7e:a0:60:
                    0c:01:36:27:43:1f:1d:22:93:11:4e:08:ef:aa:d6:
                    6c:8f:ca:01:c1:26:b7:d1:83:19:83:35:3d:57:9e:
                    50:d6:7f:c8:2c:32:7c:c6:b9:54:1f:10:52:e7:6d:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:E7:79:9A:39:ED:8E:15:63:F4:FA:A9:09:42:69:DB:10:64:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/48f4e3d4-f84a-3031-9e79-8a4611ef9d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:b7:46:4a:85:12:42:ec:f6:ba:46:f5:a7:cd:81:64:1e:
         c6:ee:9b:77:0e:fc:e3:2f:88:c7:6a:89:26:12:45:51:b0:bf:
         50:9d:fb:9b:31:ac:d4:05:75:b2:99:7f:43:4e:dc:03:66:88:
         93:15:ae:56:4c:27:39:f5:9f:cd:37:d2:91:9c:a1:be:9f:0a:
         91:11:16:33:0e:87:97:6e:4c:da:cd:31:e8:03:1d:ad:90:83:
         fd:0d:8a:b2:dd:3f:88:1c:4f:58:9b:5e:a3:a1:43:a7:e6:6b:
         8c:77:14:00:aa:d0:87:61:14:d9:1e:22:57:f4:cf:79:cf:2c:
         cd:d3:a9:14:65:54:59:3e:21:13:86:0d:a0:cf:7d:f8:2b:1c:
         c5:1f:14:ec:fd:6b:4d:4a:ee:d0:e5:65:22:38:e8:59:31:15:
         13:43:88:c1:bb:d2:5c:cb:e3:1f:87:67:a3:37:bc:c8:c5:41:
         ee:4f:83:f7:02:a2:58:10:c4:ee:0e:fa:fd:45:ab:da:8a:b3:
         53:25:f9:7f:cb:60:15:77:d5:c5:1d:05:39:16:11:95:6f:14:
         b9:2b:b1:15:84:06:88:10:d1:09:63:d9:94:2c:59:56:a6:0d:
         08:4f:18:bf:39:56:0b:72:2b:fd:9a:66:d7:19:43:b8:01:90:
         65:59:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:15 2026 by rpki-client