Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65e65949-1836-3bee-aa2f-36d01b92cb5d.roa
File:                     65e65949-1836-3bee-aa2f-36d01b92cb5d.roa (raw, json)
Hash identifier:          HewY09OR3WP/jqqWqeis8/3yb1z7gpH4qQt4DNSfQWg=
Subject key identifier:   8A:9A:8C:DD:2A:96:DB:4B:59:23:6C:6A:D2:9D:D7:11:E4:D2:D9:9F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA810A45B9560BEAC83680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65e65949-1836-3bee-aa2f-36d01b92cb5d.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.200.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:81:0a:45:b9:56:0b:ea:c8:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=00412aec-5d07-4415-8333-d2f755aa76e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:bd:3a:ee:f9:9e:61:7e:c2:d1:b7:0f:c0:
                    f2:4c:8e:58:58:92:29:30:fa:8f:db:5e:9d:c0:11:
                    29:8a:15:29:ea:55:5d:ea:05:b8:e1:8d:73:94:08:
                    b9:24:8f:43:3c:fa:5d:61:bb:11:bb:d0:fc:75:03:
                    83:79:43:bf:b1:c1:82:0a:fa:ba:6d:48:20:97:bf:
                    d2:3a:1f:ab:f1:dd:44:2c:58:21:4a:5e:05:e7:82:
                    f7:66:bc:f6:23:dc:af:d3:53:7e:2c:a3:af:e6:f9:
                    5b:1a:56:4b:77:66:dc:de:bd:be:50:e4:86:4a:9b:
                    0c:7d:41:ad:ed:35:21:64:e5:62:78:7f:36:39:30:
                    d3:b6:07:c6:20:7e:cf:d9:dd:64:76:45:a2:6b:f1:
                    e1:45:72:ef:90:6e:ca:fa:97:88:62:21:00:16:60:
                    63:a2:9c:77:df:53:c4:7a:cd:68:4e:da:72:99:88:
                    41:d9:5f:27:c1:4d:9e:4b:e5:1b:af:3e:91:78:34:
                    2e:40:62:96:ae:84:61:aa:6e:64:bb:81:19:6d:55:
                    14:8e:44:ef:47:a3:d9:2b:1c:d0:f6:52:a7:2e:bf:
                    37:b3:f8:12:8f:36:83:30:4b:51:5f:ce:3d:dd:68:
                    ef:8c:5c:78:fc:86:be:56:88:88:23:16:96:c1:e8:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:8C:DD:2A:96:DB:4B:59:23:6C:6A:D2:9D:D7:11:E4:D2:D9:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65e65949-1836-3bee-aa2f-36d01b92cb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.200.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:70:94:4f:6a:bd:4c:85:51:91:89:03:1f:a2:5f:6a:32:
         c3:89:56:d4:4d:3b:c4:48:d9:30:2d:3c:90:cf:5e:1d:18:b9:
         c4:5d:68:4e:c5:05:e8:20:76:3d:1b:ff:3c:26:f0:6e:57:d5:
         6e:5b:53:15:41:9c:dd:4f:03:8a:0a:b1:5d:ed:23:b5:60:a1:
         98:cc:8a:c5:20:6a:1f:94:6c:99:c5:10:ab:9b:42:58:4f:4d:
         25:c4:82:a5:5b:4d:d5:f0:64:61:a1:97:3b:c0:bf:6d:ec:9b:
         36:28:d1:b7:dd:58:47:e5:c2:6d:e9:55:00:ef:65:23:65:07:
         82:f0:71:f9:e4:5e:53:b2:fa:a7:39:5b:07:55:a0:51:1b:4e:
         2a:44:1d:24:f0:a7:14:7c:b4:53:1c:24:aa:c4:b1:6f:cb:b0:
         44:15:03:77:e8:66:fb:0e:09:8a:4c:87:44:bb:9b:a4:32:05:
         de:5b:13:9b:ac:8f:a2:31:bf:07:1b:d7:c1:e3:6a:1a:ee:03:
         11:d9:16:dd:ec:a1:9b:66:78:67:ef:55:20:6e:89:62:3f:5d:
         a5:d4:d4:56:08:c5:ad:8b:91:87:21:83:6e:1d:59:ea:47:3b:
         f2:d1:ee:2e:ad:ec:e6:14:10:b2:db:7a:1a:b5:e1:d5:de:e1:
         51:79:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:52:31 2026 by rpki-client