Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa
File:                     0280d272-3010-32e2-a9c6-9a6552888640.roa (raw, json)
Hash identifier:          uuSwEjktoXOmkw6QvHu0KWTMOKV0nCvd9tqVaiF72GE=
Subject key identifier:   30:B5:EC:91:4A:D6:FF:1B:01:25:81:E5:EE:E6:AF:F7:24:E6:8C:A9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB8BF61C682317CCE26100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.239.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:8b:f6:1c:68:23:17:cc:e2:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=a0740f95-620c-491c-93d4-36e84daf0ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:a4:e5:75:1a:b3:c7:4f:d9:4f:5f:40:ed:
                    1d:60:58:5a:58:a2:35:fb:07:9c:a3:98:c8:4d:58:
                    da:e8:3b:31:b6:17:ed:35:66:5b:bb:2d:6e:82:ba:
                    db:b4:a0:4b:b4:43:54:67:94:54:f0:22:5b:1b:d7:
                    4c:1d:e7:58:d9:4e:5c:09:d9:7b:27:74:f1:37:a7:
                    f9:b5:0c:04:5a:10:a6:af:f7:9d:6e:22:bf:96:7d:
                    82:7b:76:2f:8e:82:52:11:cb:70:48:c1:88:40:7f:
                    2d:0d:c4:a8:0a:9c:c4:07:ce:85:7f:29:34:ca:f6:
                    13:af:1f:8d:bf:2d:39:98:2e:11:a4:d2:62:1c:ef:
                    e4:43:9e:f0:2e:ee:5c:a8:69:72:4a:77:c0:46:2b:
                    68:14:f4:a3:b9:b5:7f:ca:aa:e9:c8:2d:ba:32:5e:
                    56:76:51:49:47:98:bf:ee:d6:39:ee:f4:1f:e4:94:
                    82:5d:b9:ef:f7:58:a4:49:59:90:b5:ba:a7:55:f8:
                    f3:c5:e5:b1:13:c1:d9:cf:c2:b0:2c:da:02:29:3b:
                    49:24:7c:c0:9d:60:8d:d3:e4:8d:1c:ea:f5:47:19:
                    b4:53:cd:a0:63:60:80:b2:34:93:4f:4f:32:2b:ea:
                    52:7c:4b:fd:ba:f4:cb:40:9b:c9:c1:8e:46:2e:3f:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B5:EC:91:4A:D6:FF:1B:01:25:81:E5:EE:E6:AF:F7:24:E6:8C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:52:9a:2b:89:7b:6a:36:8d:9b:51:6d:51:12:a9:7f:07:
         8e:8a:73:04:2b:b0:03:13:3f:a0:33:98:ac:d9:92:4e:f1:4f:
         a2:2b:68:47:3e:9a:0b:06:42:d4:c5:9e:13:6c:3e:35:01:88:
         f8:37:88:b3:99:ba:7b:32:9c:2f:93:e9:14:50:f1:70:6a:72:
         dc:7e:57:0a:83:cf:af:05:9d:44:ee:fa:62:d6:e4:50:2b:76:
         f2:c5:a2:a3:72:1f:10:9c:46:69:e9:f0:14:0c:ae:fc:a3:f6:
         68:73:51:93:16:47:d9:97:90:c2:65:59:f8:b9:71:b2:95:d7:
         03:06:fc:60:97:a5:10:7f:64:eb:45:09:c3:15:01:59:a4:dc:
         3e:ec:c5:52:1b:df:8c:19:04:31:e0:eb:63:7a:01:6c:d1:8a:
         d1:57:2f:c7:8d:86:01:b7:ad:e3:c6:36:59:2d:4f:2b:01:f4:
         06:01:5d:6f:8b:75:9c:fd:7c:ca:61:22:54:97:f4:9a:2b:23:
         5b:b8:3c:63:3a:84:8e:4b:56:db:ff:51:2d:9b:2a:f1:ef:77:
         93:87:f5:71:b6:6b:6b:bd:ab:f5:0b:3d:e8:42:1d:16:2f:e4:
         d5:ca:d1:c0:45:d9:a5:bb:bb:cf:14:a0:95:a7:79:c3:e1:ab:
         5c:7d:59:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24v2HGgjF8ziYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
YTA3NDBmOTUtNjIwYy00OTFjLTkzZDQtMzZlODRkYWYwZGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbOk5XUas8dP2U9fQO0dYFhaWKI1+weco5jI
TVja6DsxthftNWZbuy1ugrrbtKBLtENUZ5RU8CJbG9dMHedY2U5cCdl7J3TxN6f5
tQwEWhCmr/edbiK/ln2Ce3YvjoJSEctwSMGIQH8tDcSoCpzEB86Ffyk0yvYTrx+N
vy05mC4RpNJiHO/kQ57wLu5cqGlySnfARitoFPSjubV/yqrpyC26Ml5WdlFJR5i/
7tY57vQf5JSCXbnv91ikSVmQtbqnVfjzxeWxE8HZz8KwLNoCKTtJJHzAnWCN0+SN
HOr1Rxm0U82gY2CAsjSTT08yK+pSfEv9uvTLQJvJwY5GLj/nOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDC17JFK1v8bASWB5e7mr/ck5oypMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDI4MGQyNzItMzAxMC0z
MmUyLWE5YzYtOWE2NTUyODg4NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITuUporiXtqNo2bUW1REql/B46KcwQrsAMTP6AzmKzZkk7xT6IraEc+
mgsGQtTFnhNsPjUBiPg3iLOZunsynC+T6RRQ8XBqctx+VwqDz68FnUTu+mLW5FAr
dvLFoqNyHxCcRmnp8BQMrvyj9mhzUZMWR9mXkMJlWfi5cbKV1wMG/GCXpRB/ZOtF
CcMVAVmk3D7sxVIb34wZBDHg62N6AWzRitFXL8eNhgG3rePGNlktTysB9AYBXW+L
dZz9fMphIlSX9JorI1u4PGM6hI5LVtv/US2bKvHvd5OH9XG2a2u9q/ULPehCHRYv
5NXK0cBF2aW7u88UoJWnecPhq1x9WXQ=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:31:11 2025 by rpki-client