Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa
File:                     33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa (raw, json)
Hash identifier:          N+jGjjpF2pf+iNt9zdFQ7nFf+9KGuyubn/EQmF4aQso=
Subject key identifier:   45:7D:42:C4:CB:51:DE:A5:77:19:68:FD:21:A2:8A:2C:68:CC:AC:35
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA9591EB80AA5392359380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.245.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:95:91:eb:80:aa:53:92:35:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=50c47a5c-376e-4835-9e16-bea317dbac90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:71:b2:57:94:84:2d:70:e8:73:97:4e:dd:
                    86:c2:85:d8:89:37:42:5d:64:f5:43:89:3b:e9:d3:
                    21:a3:a4:09:af:af:2d:8a:57:8f:68:23:ab:f2:46:
                    da:41:76:d7:56:6b:97:be:be:5d:9f:15:0a:86:3b:
                    c7:4f:e6:5a:62:1d:4a:52:bd:2e:c4:eb:e2:4d:13:
                    b3:75:be:54:c1:f1:f6:87:46:9b:43:3a:0c:81:e0:
                    32:e5:4f:99:80:98:7a:ec:0a:6f:21:1c:ab:04:35:
                    d0:f6:e6:69:9e:4f:76:79:2f:28:29:d5:5e:3e:f4:
                    98:d5:2f:c5:cc:33:da:e4:dd:d8:a4:25:55:35:81:
                    7e:f0:74:dd:3a:85:05:cb:ba:19:ff:78:fc:75:6a:
                    f1:c0:81:55:41:b8:f2:1e:22:eb:95:14:48:58:f4:
                    72:be:53:08:ad:61:fc:4b:d5:23:0d:5f:a1:03:52:
                    24:2d:c7:be:4c:10:e5:35:43:6b:3c:2c:20:92:95:
                    c1:ab:1a:56:ba:7f:3a:53:0d:c1:5e:be:47:26:ea:
                    54:ad:60:01:33:25:c4:3b:ba:8a:cd:20:d7:a5:4d:
                    04:e8:6e:07:00:ba:29:a9:f3:c1:7c:1a:80:ee:3a:
                    1f:37:27:fe:1a:92:24:50:1a:65:e2:2d:48:81:b0:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7D:42:C4:CB:51:DE:A5:77:19:68:FD:21:A2:8A:2C:68:CC:AC:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.245.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fa:64:09:7c:33:11:7f:65:54:70:30:19:f5:66:de:39:4f:
         3e:2d:3d:a1:ea:3b:00:94:2d:9b:e3:9b:60:7f:a7:39:99:c2:
         76:96:2f:c8:58:7e:51:82:07:1f:26:d2:eb:cd:d2:c7:cd:3f:
         03:96:ae:14:28:50:41:ff:74:54:96:fb:31:4f:6e:28:ae:ed:
         a0:ed:fa:44:34:f2:54:96:62:6b:87:ec:29:be:31:6f:09:fe:
         26:6a:cf:4b:ba:a1:9d:88:d3:33:03:b6:c2:c6:81:4e:06:e9:
         49:64:31:2c:12:ec:eb:d6:16:14:a7:6c:d7:00:53:af:a4:fa:
         8a:53:ee:a6:7b:0f:93:fd:4f:ce:e6:ba:b0:92:50:74:eb:b6:
         de:aa:9e:9e:26:7e:19:9b:4d:c8:35:b8:3f:61:3e:7e:89:da:
         09:56:83:e6:4f:03:c8:23:dd:7b:74:21:d3:e0:33:d4:19:86:
         4e:0e:5f:14:d2:82:7f:82:65:78:4b:54:74:79:81:15:c7:e8:
         ef:5d:4e:1d:d5:70:c4:21:4d:f5:21:5b:89:4e:e4:d7:28:9f:
         0e:9c:43:a0:ed:76:e6:ac:10:b1:12:7b:fa:bf:cb:0e:07:ca:
         05:8b:ac:e7:9e:89:fc:fd:32:2a:ce:76:ec:e8:62:56:fe:e6:
         fb:17:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:44 2026 by rpki-client