Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa
File:                     42e27d57-82e5-3480-beac-4835f1b4b65a.roa (raw, json)
Hash identifier:          5xrykBU7nJWPcaR068cXkcumU6WfkjBpJYTO4piZBXU=
Subject key identifier:   F9:F7:7C:8E:91:26:51:1C:23:1E:3D:F6:98:91:6E:D5:A1:ED:7A:FD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA7A55F281D28BE6162260
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.243.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:7a:55:f2:81:d2:8b:e6:16:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=9e873916-6e84-4f69-8dca-7c65b2280667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:f0:bc:03:45:84:b0:e4:99:57:4e:58:1d:
                    c5:13:80:01:ae:58:06:97:5a:91:44:32:90:be:49:
                    d7:02:a3:9c:35:15:b6:72:54:b9:ef:49:e8:8e:3c:
                    42:51:6d:b6:dd:0f:0e:5c:b5:4c:86:82:3a:53:81:
                    94:97:95:8f:05:c0:46:3e:7a:8b:4f:5a:4c:a7:d6:
                    3b:35:b7:34:2c:d1:68:c0:02:9b:02:5d:91:c7:52:
                    7d:d6:4c:1c:08:d1:79:81:8f:12:a6:4a:bf:79:d4:
                    28:6f:75:68:f7:b3:07:e2:bc:07:4f:b8:7a:01:ca:
                    88:88:11:1f:ab:a9:79:55:71:66:01:e1:db:21:d8:
                    b0:88:a4:5a:62:18:f3:23:40:33:3e:33:81:c0:a2:
                    37:6d:81:50:8c:28:5c:fe:38:90:2f:12:6c:7d:a1:
                    e8:a3:c3:eb:1e:37:86:6c:ee:a3:2e:87:e3:a2:c0:
                    ab:3c:15:65:13:f5:b2:57:41:8d:33:84:7f:be:c8:
                    b0:dc:c0:f1:6b:14:71:a5:ae:7b:d2:50:0b:9f:70:
                    a2:b3:27:be:6e:f2:47:3f:0c:66:b5:3a:fd:8d:23:
                    dd:13:7e:d4:d4:27:4b:14:dc:02:dd:eb:24:ba:73:
                    85:50:86:7f:70:fe:19:43:24:87:f1:7f:32:fc:3d:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F7:7C:8E:91:26:51:1C:23:1E:3D:F6:98:91:6E:D5:A1:ED:7A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.243.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:43:f3:2c:73:4a:f5:c9:db:95:c3:b3:76:01:41:1f:33:
         b8:0f:90:f5:93:15:25:08:fb:f8:98:c2:63:9f:96:75:75:27:
         b6:9b:1f:d7:56:b7:6f:79:d2:24:4f:a5:5f:cd:dc:b8:1a:d4:
         58:ae:e9:77:70:65:a9:14:8e:8a:5c:50:3d:c8:63:dc:5e:e6:
         d4:96:dd:97:d3:e0:f7:7a:4b:9a:1a:14:5d:ac:0c:4d:d1:3b:
         78:8a:20:06:a6:15:18:ee:33:f0:2e:7b:6f:cb:cd:97:6f:34:
         0b:4d:f8:16:88:6d:26:b9:ac:12:b0:9a:d9:59:2c:cf:81:c3:
         bf:db:ff:97:0c:2f:7d:bd:02:46:cd:2b:c2:8d:16:d4:ef:6c:
         b5:b0:6b:5a:c4:f5:4c:66:98:35:54:14:9e:77:c5:97:cc:90:
         e4:d3:63:a9:0a:bb:c1:76:33:e7:7e:33:68:6d:dc:06:30:9c:
         f2:a1:50:10:b6:eb:e8:49:6e:75:40:34:12:a0:4e:d4:46:a0:
         b5:68:39:b5:67:6e:70:b6:dd:b6:d1:3a:8d:49:18:02:10:63:
         ca:cc:4e:41:94:97:1a:f7:f2:5f:b7:35:a8:14:ab:50:0b:e5:
         b4:9c:56:6f:b0:70:48:91:19:1b:87:d4:35:ec:22:8c:83:d7:
         67:b2:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:43 2026 by rpki-client