Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
File:                     bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa (raw, json)
Hash identifier:          37+huRam82Pyx07NIEwbXth2S/Mmiqv1ePuvgAtEhi4=
Subject key identifier:   2B:95:1F:8F:F2:DE:90:52:68:08:3E:F1:8B:18:66:3A:16:B6:72:03
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B33F1A5D26E069989BEBB3280
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     237
IP address blocks:        35.38.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a5:d2:6e:06:99:89:be:bb:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=ca84cc9c-0f8e-43af-91a5-ade26edb667b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fc:b2:9d:3f:96:ba:7f:39:e2:7e:18:02:3c:
                    e7:8a:5e:4f:be:77:82:98:02:73:17:48:8d:15:42:
                    3c:5e:fb:9d:7b:aa:1f:19:6a:2e:30:f2:cd:c7:d6:
                    11:8f:e7:16:13:4e:66:56:f7:76:79:e7:1a:94:a1:
                    c2:17:2c:b4:30:01:1d:6c:15:8c:97:21:bb:90:3a:
                    83:17:90:f0:4f:d4:31:25:ba:89:d1:09:a2:85:ba:
                    2d:c1:5b:a4:e1:dc:37:9e:2e:6a:1c:29:4c:a3:23:
                    48:b3:13:e5:f8:1f:9c:e5:16:92:a5:68:df:c8:83:
                    99:47:cb:35:84:46:85:c6:5c:cb:3b:26:85:3c:b3:
                    32:76:f8:c9:9f:61:03:0d:69:72:65:22:a1:4f:be:
                    99:3f:96:d0:33:bf:d6:39:14:f7:ae:56:aa:c3:6b:
                    9d:2d:a3:eb:88:e7:1c:b0:88:3b:c2:23:b8:a4:b6:
                    4b:73:23:19:33:15:8a:98:1b:8c:de:31:c8:ac:5c:
                    d3:8f:5f:7f:71:01:85:95:56:72:ab:09:dc:61:50:
                    45:70:1e:bb:b2:f2:dd:b1:8e:46:4f:7e:b5:e0:d9:
                    9f:54:42:52:d2:59:91:38:34:c4:18:73:46:cc:be:
                    97:64:a9:d1:56:ef:2e:28:02:09:25:6c:84:7d:c0:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:95:1F:8F:F2:DE:90:52:68:08:3E:F1:8B:18:66:3A:16:B6:72:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b0:cb:40:78:e7:8a:02:56:d6:c8:22:a3:87:c8:7e:a0:c1:
         58:b0:78:69:98:99:09:f5:dd:60:6a:0f:7e:dd:1b:43:f2:ee:
         4c:7c:e0:2e:cf:2c:5d:94:72:32:85:dc:30:70:86:86:0a:10:
         ff:97:66:83:87:ef:7a:06:c9:6d:9c:de:76:ab:47:3e:d3:ac:
         28:db:3c:b0:aa:52:76:45:9a:31:cb:e4:11:a6:e7:a5:16:a6:
         84:2d:1f:9e:2f:19:c9:d7:92:a7:c8:f8:fe:a6:5f:53:41:f2:
         d4:5c:78:64:e0:ed:b4:ac:51:dc:51:17:f5:5b:e2:c5:59:a1:
         1f:ff:0b:30:f3:79:37:ed:12:2a:29:aa:19:42:71:59:fd:69:
         2d:b9:a1:53:b0:a0:a3:a1:b7:65:91:a3:21:26:41:e6:42:ae:
         f6:6f:0c:ca:b6:e8:02:6f:d6:31:aa:9d:6b:ae:11:9b:1d:df:
         95:7b:97:b9:4d:98:47:07:b7:f3:22:88:c0:40:87:a5:af:96:
         29:5d:9b:3e:21:4c:86:e8:ae:aa:84:44:88:91:e0:0e:b3:06:
         7e:35:73:a7:75:30:84:c4:d3:64:58:5b:eb:7a:32:df:6c:cd:
         d0:6e:89:49:56:27:48:c6:10:8e:65:66:97:4d:0b:5e:23:14:
         d8:6f:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:13:38 2025 by rpki-client