Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/45476f25-dfe4-38a1-b55f-6a539e604840.roa
File:                     45476f25-dfe4-38a1-b55f-6a539e604840.roa (raw, json)
Hash identifier:          uZYaIDEmo7ERjTIIBYq85n/vVjk1KoQ6+Qrxr3I2MTE=
Subject key identifier:   67:12:18:11:51:9B:98:3C:34:7C:8B:8C:D4:C2:A3:D4:7B:94:85:A0
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584CBAE738F11DB9DB17C21C5D80
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/45476f25-dfe4-38a1-b55f-6a539e604840.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     10835
IP address blocks:        64.35.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:38:f1:1d:b9:db:17:c2:1c:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=87222c0e-55aa-4698-91f5-828e41a2a268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:30:1f:f2:70:6f:a9:c8:d7:b5:ea:ee:4b:a1:
                    36:15:02:18:d8:11:74:10:cc:b9:a8:34:e1:d5:9d:
                    50:d5:88:8a:09:b0:c7:86:0d:e5:24:5e:3a:0d:22:
                    39:5e:54:ba:bf:c7:58:12:15:87:56:fd:3d:a0:5a:
                    48:94:d9:a1:60:7d:75:ce:da:2d:9a:37:9a:6a:b6:
                    4a:25:a6:a7:79:2e:1d:28:6a:b2:64:df:43:f1:5f:
                    7a:82:09:ff:c9:e3:c9:a4:97:23:32:a8:bf:5d:14:
                    37:c3:b5:4e:49:22:09:c1:9b:3f:d9:4c:0a:76:56:
                    8e:18:cf:c6:92:10:f5:9f:b9:e0:27:34:d1:49:b5:
                    4c:7e:18:b3:f5:71:3f:eb:eb:09:55:69:18:e2:12:
                    86:1e:42:ed:25:5b:03:06:d5:be:05:65:a1:e2:77:
                    63:18:7d:ab:54:d4:38:2c:88:11:ea:89:b4:52:32:
                    ec:b0:4a:2b:03:90:ac:d7:d8:ab:90:14:9f:be:83:
                    53:a1:48:95:f0:3d:95:30:f0:94:27:d7:16:bb:f6:
                    ce:02:bc:d8:b7:e0:44:23:f2:a4:06:fd:4c:c3:0f:
                    2e:b9:72:b8:5a:58:00:12:f1:3f:21:ec:04:b8:c4:
                    5e:22:96:5e:44:f1:9c:5b:21:ae:1c:16:a8:2d:19:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:18:11:51:9B:98:3C:34:7C:8B:8C:D4:C2:A3:D4:7B:94:85:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/45476f25-dfe4-38a1-b55f-6a539e604840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:bd:02:e3:51:3e:95:d9:cd:84:6e:45:c1:20:63:54:e8:
         91:5b:6a:3d:69:d1:66:ca:16:8f:a9:50:43:e0:9e:78:c6:6c:
         bf:bd:cd:01:0c:8e:b1:98:21:87:a1:84:2e:eb:0c:94:9b:0f:
         7c:6f:78:4e:86:36:3d:25:f3:80:a8:be:1f:7d:af:c4:2a:3f:
         69:d0:0b:2a:97:39:ab:a6:fe:07:1d:59:11:6e:4b:8c:49:07:
         ed:37:56:bf:e4:d1:54:cb:49:da:9c:96:a0:ea:1a:a0:83:46:
         5f:3b:cd:52:26:c8:4c:2d:c0:36:6f:4d:2a:a4:b1:7f:41:46:
         d4:e6:b7:95:5f:a2:ec:e9:32:de:38:13:a8:4f:9d:d5:8c:99:
         23:08:76:c3:1b:6d:7a:c1:3a:3a:4e:49:3e:b8:0e:82:db:8b:
         cf:bf:0e:40:ab:99:56:28:2e:bb:b2:61:ec:fb:94:84:ef:9b:
         98:ea:58:d7:83:99:60:c1:70:7f:65:a1:f0:65:2b:a1:d5:18:
         9b:89:ff:fd:b3:db:fe:18:eb:eb:08:9b:51:0d:1f:77:b6:1a:
         b8:ef:65:df:34:ba:2b:c4:56:67:d3:c9:45:87:60:cb:68:97:
         74:4b:dd:63:21:e4:00:94:25:8d:00:67:94:fa:dc:29:23:c8:
         bd:c8:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:18 2026 by rpki-client