Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa
File:                     63a799f7-620c-3e6d-a174-e979e3a9bd06.roa (raw, json)
Hash identifier:          e5ZEUKp2DlziLah9ujxagZ8khX0djla1kKbEfPpE8Fg=
Subject key identifier:   AE:0D:EC:A1:C5:B9:C0:24:7E:B7:38:2C:4D:E1:E3:9D:75:C6:39:99
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA57336EB3510EFD80DD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.238.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:57:33:6e:b3:51:0e:fd:80:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=838a0020-abb1-4e04-8097-7aa4db1fbded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:a5:66:8a:68:84:b2:8e:01:e8:93:7b:2f:
                    19:31:5b:c1:d7:e9:9d:76:61:9b:26:1c:2e:af:16:
                    6e:47:cd:63:1f:02:11:f3:38:71:fb:af:da:fd:86:
                    61:48:69:52:e7:0b:8b:dc:5a:b9:46:24:25:d4:3d:
                    d2:65:20:32:4e:e5:80:ed:5a:e7:2e:05:ba:d4:26:
                    07:c9:0e:4a:4f:5d:01:70:19:c8:f2:3b:ab:f1:26:
                    f1:be:a8:60:a5:62:6b:fa:81:9d:38:a7:89:93:09:
                    42:fe:84:68:dd:48:87:18:bf:ee:87:71:27:77:ce:
                    77:59:46:bb:2c:bd:a0:dc:01:e8:ce:6e:29:32:7a:
                    3f:52:5e:be:93:b5:e4:95:50:8f:c0:6c:23:27:d6:
                    f3:c2:db:bc:a0:63:bf:7b:b2:9e:e6:3c:94:0d:f5:
                    4e:ba:61:15:a7:36:f2:64:3e:5a:cb:51:38:f1:aa:
                    64:9a:da:38:bf:99:99:76:2f:ee:29:08:47:3b:95:
                    37:ec:84:3c:f8:b2:cb:4b:50:40:6f:e6:ba:01:89:
                    39:9f:7e:8a:df:dd:cb:c2:3b:20:39:9d:97:11:4f:
                    e4:74:01:06:fe:77:9b:d8:02:5e:e0:e6:ed:e5:5e:
                    aa:78:93:d6:8a:47:30:9b:37:be:2c:c1:94:57:d7:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:EC:A1:C5:B9:C0:24:7E:B7:38:2C:4D:E1:E3:9D:75:C6:39:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.238.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0a:d0:2b:af:23:20:ef:9c:48:7e:74:6d:f1:19:fe:6a:63:
         df:7f:2f:79:ba:37:2f:b9:7a:31:54:f3:ea:48:bb:ff:32:86:
         d2:ce:5c:48:e3:9d:17:3a:0a:87:50:48:06:6f:76:43:c7:d5:
         79:f3:2f:37:dc:83:b5:9a:87:30:7d:53:81:fa:a8:7a:f4:c4:
         08:fe:59:27:c4:cb:a1:09:df:8c:50:e2:80:e3:96:45:71:c1:
         e9:05:58:e2:ba:ec:49:02:97:21:28:6d:70:11:74:cb:88:d9:
         78:9f:60:4a:ad:c1:e9:95:2f:3c:2f:7a:f7:d3:1c:de:81:8a:
         b6:e4:a2:9c:2d:52:01:59:df:43:3c:0b:cc:4e:34:3e:be:12:
         d3:b2:87:d4:a5:36:54:ea:e9:68:07:d3:2c:c2:53:34:28:9b:
         6a:e4:ea:66:c2:66:c3:eb:94:72:4f:72:70:e6:e8:5a:1d:78:
         2e:41:0b:e5:b4:3f:f8:62:3b:4d:bd:4e:97:b9:1d:7c:30:c2:
         27:ea:c8:09:36:c5:02:25:0b:a5:89:22:fc:96:52:d5:d1:ae:
         cd:c9:77:6e:2e:5f:07:2f:f6:f5:60:ac:e1:d9:e4:b8:2e:7c:
         30:73:b3:0c:f7:83:d2:03:ce:cb:88:34:aa:99:d4:ca:bf:6f:
         03:f6:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:48:44 2026 by rpki-client