Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa
File:                     b533aff3-439d-33b5-bcd9-30c7b5833b92.roa (raw, json)
Hash identifier:          y9gSDRvV/bNd4xzXFbF2wzwEAKZ7hltbHI3CT8/qFa4=
Subject key identifier:   25:C5:78:25:70:89:4E:21:05:CC:85:6D:EC:EA:F4:71:2A:E8:90:58
Certificate issuer:       /CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c
Certificate serial:       010D0C9F4328584CC6120A020E54AA56E14D4100
Authority key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     3402
IP address blocks:        64.239.32.0/22 maxlen: 24
                          64.239.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:0a:02:0e:54:aa:56:e1:4d:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=808a168e-5368-41b6-ae70-de83af509d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:aa:bd:75:39:12:d2:d9:1b:f7:5a:8a:7e:
                    51:52:68:aa:70:47:c5:8a:b1:35:b1:6a:3a:96:d8:
                    e1:69:e7:94:c7:17:18:93:8e:ce:22:6d:2c:65:5b:
                    8b:69:ef:35:5c:2a:a3:40:55:0c:10:88:01:c1:62:
                    32:bd:47:3d:35:5f:ce:44:aa:45:f2:52:19:d5:1d:
                    06:ef:f5:a7:24:5a:74:bf:29:9b:f5:f3:c5:0c:68:
                    ff:36:14:13:d4:f8:41:79:90:fc:44:6f:87:62:07:
                    fb:31:1e:9b:bd:ae:cd:c2:7e:89:c4:b9:56:ee:27:
                    8d:b4:3f:b8:3c:16:9c:ee:d6:d4:5f:24:87:42:88:
                    24:9c:31:06:6a:0f:5e:4c:ab:26:5b:29:17:7e:69:
                    72:da:3c:88:10:38:3e:99:09:d1:9a:c5:11:21:3d:
                    4a:d4:ea:d3:8c:73:ef:4c:5c:bf:41:88:fc:ec:67:
                    70:74:d0:e9:d3:e0:2a:5c:17:ba:bd:9c:8f:82:6a:
                    5a:a0:a2:54:ea:f7:26:44:59:85:fc:a4:74:e0:d0:
                    77:85:22:30:f5:34:4a:e9:74:ec:40:bb:df:5f:8b:
                    9b:42:0b:c2:b7:78:e9:52:14:9e:67:e4:24:1e:0b:
                    18:c1:3c:a8:39:d6:3f:f7:cf:f2:e7:c8:e9:38:6c:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C5:78:25:70:89:4E:21:05:CC:85:6D:EC:EA:F4:71:2A:E8:90:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.32.0/22
                  64.239.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:66:30:7c:bd:71:17:79:b2:b6:ff:07:4a:9f:86:40:b9:68:
         b9:0b:1a:cc:29:f9:53:71:40:3b:31:cd:37:df:4b:c5:2a:9a:
         15:49:3f:0d:aa:50:09:13:bc:be:56:3f:f4:89:78:7e:51:fd:
         5d:55:4b:2a:d1:b4:db:c7:a8:6f:18:a3:db:84:d7:f5:ab:95:
         fc:d7:e2:47:4d:8d:f3:6a:eb:27:6e:40:b3:fe:db:48:26:6c:
         c7:f0:22:01:da:09:e9:2e:2d:64:c9:69:ae:03:77:5b:aa:6e:
         9e:8a:a6:09:6f:34:c2:db:f5:5b:c4:c5:6f:43:89:cb:16:d9:
         e7:df:69:9c:63:de:31:70:b4:6a:0e:e6:55:61:61:be:68:30:
         08:a3:57:ce:8e:40:b7:41:16:c2:65:fd:00:45:5f:90:0f:cc:
         33:69:62:34:09:39:c7:96:0e:ed:24:1c:83:65:6f:b5:6f:a0:
         fe:64:31:d9:ee:7e:65:53:3f:db:8b:a6:f9:d8:5a:78:ac:25:
         13:22:c3:fe:97:41:ac:ad:31:1c:56:43:c2:77:8e:9c:2c:57:
         b1:d8:8c:69:8b:0f:38:ef:e8:f6:54:b2:49:eb:63:52:d8:56:
         0f:ba:f5:13:01:3a:31:67:f8:c8:dc:bf:13:5e:8e:2c:bd:76:
         5e:e7:12:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:46 2026 by rpki-client