Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0428cca3-d944-31e7-b96f-ebc172871493.roa
File:                     0428cca3-d944-31e7-b96f-ebc172871493.roa (raw, json)
Hash identifier:          EPeqefS4W9rFONDIHnPkyFqD1WbLM0XdbUio1bpm2A8=
Subject key identifier:   83:17:8C:F5:FC:1E:48:79:13:38:D1:0D:85:14:D9:03:06:78:E0:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB7C0CC8A25CAEC7EEFC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0428cca3-d944-31e7-b96f-ebc172871493.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.221.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:7c:0c:c8:a2:5c:ae:c7:ee:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=84c8a026-de17-4937-92d9-c6e6b2de3a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:a5:dd:3a:1b:aa:49:61:79:ea:6c:a3:76:
                    4b:01:a1:40:a5:fb:41:82:96:09:88:0a:84:6b:88:
                    19:0e:63:0d:1b:c1:14:b3:44:79:68:66:72:e2:87:
                    65:05:c9:e2:5a:5d:57:30:1b:79:46:0e:2e:d5:f9:
                    ab:ed:e8:c1:b1:c7:81:90:79:c8:ac:18:d5:bb:2b:
                    c9:b9:25:3d:de:b6:4e:63:eb:3d:02:07:b5:46:77:
                    bc:4b:8a:05:7c:fa:8a:a8:11:75:f0:c4:e0:bd:7c:
                    a7:b9:db:23:42:e2:bd:16:55:3b:74:aa:d3:7c:cd:
                    d1:0b:69:b5:7e:29:7e:74:a3:10:70:8a:c0:93:a2:
                    1d:cd:f5:c3:96:76:fc:08:70:21:dc:5d:7f:e8:4a:
                    c3:4e:3d:2e:f4:8c:54:7a:58:8b:8b:a3:d8:5d:d0:
                    81:78:54:6b:17:3d:87:88:6d:59:f7:43:8d:f9:49:
                    d8:47:fb:af:95:4e:39:a4:16:a5:97:c6:ba:b5:05:
                    c6:6b:9e:2d:cd:be:93:2c:77:e4:27:62:f7:1f:90:
                    c8:e1:e0:8a:38:e2:8c:46:de:0d:eb:af:a1:fe:16:
                    7e:36:ad:46:f6:1c:01:8a:1f:dd:c2:8d:f8:80:01:
                    49:bc:27:58:ab:d7:6a:98:01:5b:a2:aa:25:7d:a5:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:17:8C:F5:FC:1E:48:79:13:38:D1:0D:85:14:D9:03:06:78:E0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0428cca3-d944-31e7-b96f-ebc172871493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.221.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:e0:72:e9:ad:b3:fa:8c:fc:b3:92:a8:86:37:a4:23:97:
         38:28:df:02:f2:0e:1a:2d:e8:96:bc:8e:5d:e3:62:c0:27:06:
         7e:34:69:d4:d1:70:75:34:d6:b9:3f:8d:4a:62:48:7e:76:a5:
         7a:6e:fe:e4:55:79:2e:3f:49:7f:82:ec:e1:3c:e5:60:74:51:
         5b:eb:5d:88:37:ac:80:c6:46:44:e6:0b:40:ed:d1:50:7a:cd:
         8d:44:40:e5:d8:52:a9:ec:b9:cf:01:05:0a:f7:33:4c:d5:99:
         ab:b5:16:56:e9:60:22:d9:52:ba:b1:72:b0:53:d1:a8:86:cf:
         d2:dd:59:14:23:98:9b:6a:ee:3d:67:1e:31:c7:ce:bf:e0:1d:
         c6:0f:7d:36:6d:2c:22:da:eb:a3:52:20:fc:ec:b1:bf:50:ff:
         b3:81:11:81:ad:65:d1:62:b9:87:41:d8:32:77:8f:8b:e0:38:
         70:24:e7:a6:45:ce:35:62:2e:7f:ea:63:af:86:11:e2:ad:67:
         b1:68:ac:3d:9b:14:ec:9a:60:d3:24:b6:d0:3e:8c:01:f9:90:
         1f:88:06:cd:93:c0:b7:4f:a0:de:e4:a7:91:b6:ad:2f:50:af:
         9f:5b:8c:88:ab:f5:c0:ca:90:30:51:98:11:e7:a5:34:aa:a9:
         65:b3:e5:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23wMyKJcrsfu/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
ODRjOGEwMjYtZGUxNy00OTM3LTkyZDktYzZlNmIyZGUzYTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJGl3Tobqklheepso3ZLAaFApftBgpYJiAqE
a4gZDmMNG8EUs0R5aGZy4odlBcniWl1XMBt5Rg4u1fmr7ejBsceBkHnIrBjVuyvJ
uSU93rZOY+s9Age1Rne8S4oFfPqKqBF18MTgvXynudsjQuK9FlU7dKrTfM3RC2m1
fil+dKMQcIrAk6IdzfXDlnb8CHAh3F1/6ErDTj0u9IxUeliLi6PYXdCBeFRrFz2H
iG1Z90ON+UnYR/uvlU45pBall8a6tQXGa54tzb6TLHfkJ2L3H5DI4eCKOOKMRt4N
66+h/hZ+Nq1G9hwBih/dwo34gAFJvCdYq9dqmAFboqolfaXBcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMXjPX8Hkh5EzjRDYUU2QMGeOCQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQyOGNjYTMtZDk0NC0z
MWU3LWI5NmYtZWJjMTcyODcxNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI93wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF554HLprbP6jPyzkqiGN6Qjlzgo3wLyDhot6Ja8jl3jYsAnBn40adTR
cHU01rk/jUpiSH52pXpu/uRVeS4/SX+C7OE85WB0UVvrXYg3rIDGRkTmC0Dt0VB6
zY1EQOXYUqnsuc8BBQr3M0zVmau1FlbpYCLZUrqxcrBT0aiGz9LdWRQjmJtq7j1n
HjHHzr/gHcYPfTZtLCLa66NSIPzssb9Q/7OBEYGtZdFiuYdB2DJ3j4vgOHAk56ZF
zjViLn/qY6+GEeKtZ7ForD2bFOyaYNMkttA+jAH5kB+IBs2TwLdPoN7kp5G2rS9Q
r59bjIir9cDKkDBRmBHnpTSqqWWz5c8=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:36:18 2025 by rpki-client