Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03efd2e6-2291-3f45-a29e-5fd2101d26fa.roa
File:                     03efd2e6-2291-3f45-a29e-5fd2101d26fa.roa (raw, json)
Hash identifier:          ahHLnMXxDv5HwZxT/FQDkw4yVk/semulk26dmTRYW2w=
Subject key identifier:   C6:D8:F5:A8:9A:ED:25:F6:4F:A1:EF:6D:CA:D5:60:87:A6:90:27:3B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBEEE9FAB97EA903BD8F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03efd2e6-2291-3f45-a29e-5fd2101d26fa.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.222.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ee:e9:fa:b9:7e:a9:03:bd:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=2cca0447-cb6f-4eaf-84b3-3d8c05d500da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:82:d0:a2:5e:3e:10:8a:b8:25:43:8c:08:
                    d7:e5:bf:3c:da:e3:9b:68:22:b4:fd:88:3b:d3:d6:
                    9c:56:4d:19:bc:6f:52:a6:36:40:03:ae:3d:8c:32:
                    7c:1d:b4:e2:f3:8c:53:17:2d:6b:03:9a:12:4e:29:
                    f1:56:dd:ec:d1:1f:55:18:c9:e9:29:de:1b:5f:5a:
                    5f:1b:c1:1f:bd:29:9a:ac:8c:3b:c8:a9:a4:11:6c:
                    f2:7f:9d:8d:8f:2c:a1:6c:59:03:30:8d:36:1f:de:
                    a1:f3:13:b3:76:d7:0a:79:e8:e7:38:67:ed:a8:2a:
                    40:69:19:fc:2f:7c:59:dc:6d:18:c7:9c:8e:d7:e6:
                    a7:17:63:5c:96:e4:7c:62:78:5b:70:61:02:bf:2b:
                    ff:4e:a1:5e:a6:e7:84:0a:59:1a:be:f7:65:1e:bc:
                    44:50:66:94:37:21:6c:b7:5c:88:91:6b:82:0b:77:
                    db:9e:5a:d4:7d:3f:e9:7c:bf:16:ab:38:82:0b:d6:
                    8f:45:4a:61:a2:e4:3a:9b:2e:b7:8f:5e:ea:ad:a1:
                    6e:d0:94:39:a3:da:17:26:23:c3:d7:ec:92:20:b7:
                    71:8c:60:84:1a:6c:9e:2f:aa:06:6a:e4:0d:7e:ea:
                    27:e3:78:e1:ea:f5:9f:6a:29:b1:31:b1:98:0f:5d:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D8:F5:A8:9A:ED:25:F6:4F:A1:EF:6D:CA:D5:60:87:A6:90:27:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03efd2e6-2291-3f45-a29e-5fd2101d26fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.222.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:60:c4:b7:7c:b7:7a:0f:90:95:39:ad:55:ff:a6:a9:b6:
         d1:1b:c6:92:54:ea:ce:29:9a:c2:e4:6e:e4:42:23:39:02:af:
         a3:3e:f3:ef:49:c4:49:28:a0:48:88:56:2f:30:70:c2:17:d5:
         5f:df:cf:16:d2:ed:a0:ee:73:a1:3b:d5:6b:f7:88:2a:1f:fe:
         8e:3c:f8:31:23:52:74:3a:a2:bd:a2:d7:79:f4:bf:4c:d5:13:
         2f:93:13:53:20:04:ad:73:f6:e1:79:52:98:94:7c:43:bd:fb:
         1c:34:e8:c0:4c:95:16:f8:06:f4:9b:34:06:4d:50:d0:f0:e1:
         8e:83:79:0e:8a:d1:77:ff:99:75:02:28:bf:4b:e7:4f:d8:ca:
         03:f9:b3:6e:68:98:c2:11:d3:1f:13:30:a9:ff:b0:b6:2f:fb:
         15:84:3d:59:11:59:4a:4f:c4:88:d1:4d:2d:9d:f6:1f:8a:01:
         6e:18:c7:01:e2:dc:a3:f0:44:65:d1:09:00:56:f9:03:09:23:
         3d:e3:54:d7:a7:ce:6e:03:09:24:e7:18:ab:fd:68:de:7d:cb:
         32:98:e0:70:b5:b9:b1:6e:1b:f8:c5:f7:c4:e2:89:69:6b:76:
         35:15:4c:ff:45:11:66:d6:23:43:4b:19:da:3f:9a:9d:64:8b:
         f7:dc:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:06 2025 by rpki-client