Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa
File:                     a1b5ebce-fc37-3f3f-af93-219b7b805362.roa (raw, json)
Hash identifier:          msh5xHsBtVha48suypMQdQMCQbgTnI5vdmXWWz3jtmI=
Subject key identifier:   53:46:5A:EC:9F:5A:74:0E:76:1B:DE:9E:41:3A:DA:D6:7C:D0:39:50
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584AB91C07647B44015A02320200
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     54994
IP address blocks:        174.35.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:07:64:7b:44:01:5a:02:32:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ee085014-b725-44c4-ab83-fafd30ac5d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:85:a0:8f:e1:58:93:d8:a2:8b:9d:f8:45:
                    0e:0b:dc:d4:0b:e5:4f:d8:4b:c3:1b:b4:16:9c:89:
                    71:77:fe:46:1c:9a:14:51:66:0b:fd:50:26:aa:3b:
                    ac:b8:1c:66:e3:2f:f7:01:97:3d:67:78:a1:22:20:
                    0e:3f:59:40:df:73:da:02:39:96:18:8d:f2:16:2a:
                    fd:df:c6:24:2a:e9:38:0c:3e:bb:1c:13:c5:a3:e5:
                    34:cc:b3:f8:3a:5c:01:53:b3:b2:c6:32:4d:94:ea:
                    d3:3e:de:bb:f9:9f:db:4e:c3:5e:d6:9e:f8:de:db:
                    5b:51:7a:53:9d:e3:36:82:d7:c0:93:01:e0:c1:c3:
                    2d:59:58:b4:f1:8d:01:1f:98:38:28:de:59:63:7a:
                    75:5e:53:a8:b8:be:eb:d7:4f:0c:a8:32:b7:4f:f9:
                    72:fe:76:53:25:0b:41:e7:f6:47:6a:71:a2:22:90:
                    1c:fd:44:a9:e7:47:2d:16:9a:ae:65:35:46:20:3b:
                    30:80:73:30:c7:8a:56:a9:0c:a9:9f:a4:3a:8c:1c:
                    59:f6:23:11:6e:79:e8:0e:4e:f9:75:c9:a7:39:b7:
                    b5:57:d6:52:f1:19:a8:26:6e:26:93:c0:cc:74:d4:
                    88:26:74:86:eb:e9:56:45:cd:21:39:30:d4:b6:26:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:5A:EC:9F:5A:74:0E:76:1B:DE:9E:41:3A:DA:D6:7C:D0:39:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e5:a4:b2:20:ca:4a:b1:52:27:51:01:87:2f:6c:65:d3:a7:
         e0:de:02:3f:b2:01:43:ab:55:54:ed:fd:80:cf:15:44:ab:31:
         9a:33:cd:28:59:19:bf:33:9a:b5:7b:0d:4c:42:4f:3b:32:c9:
         3e:e7:67:10:2e:53:2a:de:f7:0b:8e:eb:a2:b2:6f:ee:be:a1:
         7c:5b:da:9f:d2:6b:5e:32:35:be:d9:77:59:cd:bc:25:ba:44:
         47:18:72:59:df:60:2c:83:4e:2e:03:2f:46:80:46:dd:e7:69:
         88:06:14:69:20:b5:f8:c5:53:36:aa:a1:4c:b6:c3:8e:41:7b:
         0d:9c:a1:06:93:eb:5b:7d:65:6d:35:80:3a:ec:a7:9d:a2:94:
         41:2b:7f:98:63:db:91:2b:c2:3b:00:ed:b1:c2:7a:6f:c2:99:
         f6:4f:48:16:e0:d8:2c:6a:39:87:df:ea:25:e5:32:9d:55:9e:
         9f:9e:0a:ef:95:35:92:85:44:17:0d:fe:78:c7:9b:48:02:bb:
         e2:84:05:45:df:ea:fa:d9:0a:56:3a:f2:94:1b:0c:5a:3f:74:
         28:d3:60:a8:da:84:e1:23:dc:2e:d0:78:21:da:d3:00:dc:94:
         42:10:21:75:32:6c:df:69:65:17:e6:6e:c0:ed:91:87:23:f1:
         af:4e:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:20 2025 by rpki-client