Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
File:                     b0293e2a-b333-3875-817a-b2830f596b7b.roa (raw, json)
Hash identifier:          Gqi8u+6ZLWQNMrC0d/8h14ziHh3E+7Oe/UNSqrPr7AM=
Subject key identifier:   6C:18:87:1C:BC:EB:4E:FE:AE:F0:D6:5B:6B:BE:C1:F8:1B:BA:E3:F4
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584CF85237A1F81E8CC88935C740
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     48737
IP address blocks:        174.35.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:37:a1:f8:1e:8c:c8:89:35:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=3c173e4e-31f0-483a-8eb3-133569ac1a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:14:75:6a:ec:af:95:8d:9d:ee:72:28:cf:
                    64:0b:ee:94:29:3e:9a:10:bb:3a:bf:04:96:05:b8:
                    80:af:48:6d:68:55:12:db:9f:78:82:ac:3a:ba:fb:
                    63:a8:a4:33:8b:da:20:6c:f0:6d:3e:a2:31:9c:2a:
                    44:56:35:e9:be:a0:51:c8:4d:0a:9c:33:86:d6:ea:
                    af:38:8a:78:cf:22:29:96:41:0c:7d:d1:fb:59:74:
                    ca:7b:ee:f6:66:6a:1e:9f:48:5e:2b:23:93:a7:b0:
                    d1:22:00:b4:23:23:da:c0:ae:b1:49:bb:5d:85:98:
                    f4:15:21:17:57:52:40:37:af:ba:b5:f8:22:be:7e:
                    ba:ba:e7:2d:d8:43:52:a9:9e:e8:7e:a3:81:35:7a:
                    88:c9:80:c9:68:2b:4f:5c:31:3a:10:d9:43:74:de:
                    c2:4a:65:8c:1a:39:da:a9:0c:1f:c6:c4:fb:68:b4:
                    8f:4a:99:58:32:85:0e:ab:7b:97:3c:06:f8:a7:22:
                    5f:a1:7f:75:7e:7e:39:d2:24:67:ed:2f:97:dc:00:
                    41:e3:3b:47:01:38:60:e7:8f:a0:cc:2f:d8:57:16:
                    8c:a4:cf:ec:7c:3c:70:0b:32:c3:df:e8:c0:76:cb:
                    f4:bd:ca:fe:e9:9c:8f:e2:97:31:af:b3:85:84:ae:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:87:1C:BC:EB:4E:FE:AE:F0:D6:5B:6B:BE:C1:F8:1B:BA:E3:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:4d:3e:da:8c:cb:76:14:5b:d0:8f:df:9e:c8:53:fa:c2:
         bc:de:fe:42:45:a9:87:3a:99:e8:65:c3:d1:76:6d:87:ed:d6:
         94:5e:ac:28:74:81:ee:5c:c9:76:21:cd:e6:f7:bd:43:89:92:
         17:da:c9:e9:56:c1:90:60:9a:85:1b:a8:ad:1e:40:fe:40:3f:
         fc:56:38:bd:a5:f0:b6:d0:9d:d7:39:ba:12:e5:1d:67:f5:9f:
         08:53:c2:04:f6:0a:63:77:b6:ae:77:ee:3b:c8:44:0b:24:a1:
         39:8d:74:7e:af:0c:b0:7f:48:37:62:78:10:5f:96:cf:04:6d:
         00:05:74:b8:73:b3:6f:30:c8:27:55:e7:11:8d:87:0e:49:12:
         9b:29:8a:bd:98:6f:4b:ec:66:66:47:92:4f:95:29:a6:82:58:
         d4:ea:43:c2:da:dc:47:3a:60:32:02:4c:fe:a7:de:c4:a0:d6:
         f5:c9:4e:a8:a2:e8:d3:06:57:32:45:19:ee:da:82:57:d1:b3:
         f6:4d:dd:61:38:5d:15:7a:71:a6:9e:54:ec:05:2a:0a:0d:c1:
         0c:6c:4e:5c:94:74:fe:8d:00:74:92:f0:e0:c7:21:63:7f:68:
         5c:68:d6:a9:82:78:01:d4:d7:51:1f:e6:14:5c:10:6b:1d:c7:
         98:de:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:17 2026 by rpki-client