Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/098f2599-b4d5-3d6e-801e-745f9f3b5996.roa
File:                     098f2599-b4d5-3d6e-801e-745f9f3b5996.roa (raw, json)
Hash identifier:          p3ScGnJOOGHnNIrQJJDOF+HMdyIkEFlRiEE6vcCiH1M=
Subject key identifier:   50:03:33:00:EA:4A:59:45:68:6F:52:26:FE:BD:BB:C4:78:A7:CE:6F
Certificate issuer:       /CN=35c5f411-12ac-483d-b922-257c112f06c3
Certificate serial:       010D0C9F4328584F5A32DCBF80BE57E791144940
Authority key identifier: 3D:41:D9:27:87:86:A2:1D:80:20:8E:55:37:6D:42:32:99:94:8C:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/098f2599-b4d5-3d6e-801e-745f9f3b5996.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     63294
IP address blocks:        216.10.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/35c5f411-12ac-483d-b922-257c112f06c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/35c5f411-12ac-483d-b922-257c112f06c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:dc:bf:80:be:57:e7:91:14:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c5f411-12ac-483d-b922-257c112f06c3
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=2b8c985d-c364-40d6-a0cb-064de3cf33f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:be:d2:3c:ae:d8:41:ab:34:9b:9e:e6:02:
                    f6:5a:f9:41:ab:d4:8b:52:8a:4b:a7:2c:c8:9b:d2:
                    a9:51:f6:76:89:cf:ab:cc:9d:ce:02:77:b1:66:e0:
                    64:85:fa:25:91:6c:0a:9e:c0:bc:3e:67:f7:be:ce:
                    67:fc:b5:8d:da:46:fe:62:c2:7e:ec:82:be:0c:15:
                    74:d7:a7:ac:a5:cc:14:59:7c:62:04:d9:3b:5b:88:
                    08:15:4b:90:08:2f:8a:11:59:12:80:e3:a7:18:16:
                    c6:ce:c1:47:8e:d8:45:04:17:d6:ed:fb:77:cf:d2:
                    a7:98:01:57:0d:2d:32:9d:fd:e8:85:25:e7:ae:1c:
                    66:a4:ce:3a:e7:17:01:19:da:97:12:a1:f9:89:1c:
                    a2:e0:cf:8e:6a:00:fe:dd:25:e9:cd:a3:fa:d6:8b:
                    17:5a:e6:5e:bd:b3:7a:f9:a9:23:ce:69:f8:6d:68:
                    48:56:b6:9c:58:d4:0d:43:67:37:1b:b5:1f:d7:14:
                    ed:8c:19:50:3a:df:c2:57:63:e0:40:f1:63:ac:ae:
                    e9:30:93:41:9e:6e:08:07:4f:68:e8:68:2e:e8:d6:
                    35:6b:f5:b1:54:7b:20:50:ab:b0:20:4a:c9:69:4b:
                    d1:36:c5:97:f7:62:a3:76:9e:8e:d6:c0:ef:b1:8a:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:03:33:00:EA:4A:59:45:68:6F:52:26:FE:BD:BB:C4:78:A7:CE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/098f2599-b4d5-3d6e-801e-745f9f3b5996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3/35c5f411-12ac-483d-b922-257c112f06c3.crl

            X509v3 Authority Key Identifier:
                keyid:3D:41:D9:27:87:86:A2:1D:80:20:8E:55:37:6D:42:32:99:94:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35c5f411-12ac-483d-b922-257c112f06c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:0a:9e:b8:cd:55:1b:9b:19:bd:ee:0e:a7:7e:61:06:ad:
         e5:2a:7d:ca:b6:b6:d1:c5:e0:8d:79:60:1b:a4:cb:8a:d8:b7:
         35:3f:ae:63:f6:b1:0f:75:fd:9d:88:1d:11:1f:55:fc:02:f8:
         b1:e8:26:34:3f:28:be:28:f5:d9:e2:11:f7:b2:bb:94:a9:90:
         99:bf:18:53:db:bd:e9:1d:85:ec:a2:f7:71:ce:dc:3f:ff:52:
         04:75:31:6e:08:12:f4:72:d9:82:38:32:37:3c:92:31:8e:36:
         c2:b8:7e:1d:fb:94:81:53:0f:eb:43:00:0d:52:a2:78:96:ef:
         d7:c8:81:48:64:ce:c9:fc:5a:2c:cf:f8:3e:93:ff:a4:7a:15:
         17:82:9e:64:cc:c5:45:2e:58:9d:3b:79:c9:52:99:64:33:d9:
         78:59:ad:be:96:84:26:66:60:ae:3f:57:4a:61:6a:8c:5b:79:
         8e:2b:72:1b:d1:78:28:a1:0c:70:53:b0:4f:d0:14:65:ad:2d:
         17:43:b9:91:30:d8:35:fb:ec:ef:0b:3b:33:a2:01:b4:38:8b:
         70:4e:db:3d:0c:55:20:e7:d4:df:18:9b:2d:d8:aa:1e:f3:8c:
         70:bd:46:ef:f1:9a:e0:2e:ff:c6:96:dc:48:aa:5c:09:1d:0a:
         8d:e5:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:49:42 2026 by rpki-client