Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa
File:                     22aa4d02-615a-3483-9e42-f7dbb847dc21.roa (raw, json)
Hash identifier:          k2YRqtPQOE1iN31kZGPjC8Z274/h07vTKy7XC3NIydM=
Subject key identifier:   4E:5A:79:01:D6:2F:5A:68:E7:30:5D:46:61:6C:30:59:78:E0:6D:00
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AAB220213138BBECB13D60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.201.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:b2:20:21:31:38:bb:ec:b1:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=56106e2e-9825-4529-9024-82c5fcd288fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:78:94:c0:b5:ee:2f:58:f1:0b:18:c4:1f:
                    76:ae:44:0d:b1:0b:69:77:35:3b:e5:36:b4:71:70:
                    3b:20:bd:c8:9e:52:b5:52:be:4b:9f:e3:99:e3:f0:
                    2f:22:f5:8f:cb:bc:bf:4d:eb:8a:18:99:98:b5:3f:
                    97:72:c0:e4:41:ac:89:de:91:c6:db:59:19:73:b0:
                    bc:35:5d:0c:13:27:8e:73:16:38:d1:c8:7e:da:26:
                    72:d1:0c:b4:5d:b6:7a:f5:94:9d:b1:23:e9:87:7e:
                    00:17:be:ba:df:dc:0a:52:04:9d:a9:50:5d:c6:b0:
                    b9:c9:41:6d:7e:98:4a:fe:c0:1a:f6:eb:19:7c:6a:
                    8e:89:ec:a1:c8:ab:79:fe:c4:96:76:33:f5:a0:6c:
                    f3:75:34:fb:96:d0:7b:2c:d1:e8:20:61:50:cd:7f:
                    f5:2e:c6:09:d6:71:3e:41:f6:1b:49:1e:7f:7d:fe:
                    5c:69:02:29:ac:e9:89:86:21:4f:75:08:6f:57:ba:
                    0a:e7:aa:8b:7e:b8:20:12:b3:9f:ab:35:95:1a:ad:
                    89:bd:c0:5d:16:5b:c1:07:5b:2c:88:d4:1c:64:0b:
                    2f:98:39:71:01:bb:bb:29:98:70:48:62:1e:b3:29:
                    95:7a:40:c2:aa:f9:57:18:e3:2d:21:fc:25:82:2d:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:79:01:D6:2F:5A:68:E7:30:5D:46:61:6C:30:59:78:E0:6D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.201.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:72:e0:9d:17:ff:9e:06:0d:2d:88:21:04:f4:b6:d2:b0:d9:
         5b:d3:cd:b5:3d:5e:31:a1:77:78:95:41:2b:48:f7:0b:f1:91:
         d9:85:c3:b1:71:14:0a:cc:a3:f0:9f:39:58:3d:47:e1:3c:62:
         5f:f7:7b:54:61:22:d8:71:61:65:ad:d2:18:26:9d:29:9c:f4:
         14:d6:d2:78:46:68:dc:c5:ab:89:27:dd:ac:cd:18:9c:c3:a0:
         46:5c:36:77:62:37:6e:3d:88:78:58:b9:a8:74:ca:39:78:d0:
         b2:18:e8:9c:0b:ad:be:57:28:15:f5:ac:03:eb:77:37:b2:ef:
         64:60:66:b4:be:33:1e:e9:98:c5:36:74:90:2e:02:8b:67:7e:
         be:2d:bf:59:eb:3f:01:49:d4:fa:29:74:c9:99:41:a4:63:3a:
         e5:f1:16:86:1c:0b:68:a0:22:55:d2:90:50:bb:b9:5c:fc:3a:
         af:72:da:ed:83:18:b2:07:dc:ec:57:e2:1b:65:8f:09:7b:3b:
         b9:e7:3d:90:95:c9:5e:41:b3:e4:d4:3f:8a:2e:ba:f3:48:13:
         99:a2:02:41:fe:4e:90:e6:cf:67:eb:87:61:fd:c1:ac:7a:f9:
         ef:f0:a6:33:80:b1:19:25:68:69:56:ae:40:f0:24:a3:89:10:
         8e:6f:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:50:09 2026 by rpki-client