Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa
File:                     7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa (raw, json)
Hash identifier:          DMYcnkS7tpW0FOTFjGkcJ0J04Tou6OWRHp2HGoT7ebA=
Subject key identifier:   61:E8:6B:5C:A3:7D:6A:7C:D9:61:B7:53:E1:4D:05:65:05:0F:37:2B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA3971D47C872550609400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.245.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:39:71:d4:7c:87:25:50:60:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=ed0f7180-e1de-42a9-8b47-a1077720a05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:5a:b1:e4:fb:a7:41:d3:1d:a2:e8:d0:d2:
                    30:6d:26:65:40:db:f4:a8:3b:da:b7:f0:af:d5:b0:
                    b6:30:b4:57:70:17:19:43:fd:f6:e4:7e:92:81:c4:
                    05:c0:a4:52:1f:03:a7:58:67:6a:c7:0a:bc:03:2d:
                    1c:cf:1d:86:87:23:01:b4:f0:15:76:27:6a:c2:12:
                    92:37:11:78:db:10:e7:59:6b:c6:ae:1a:c1:e1:99:
                    08:c6:bf:68:8a:e0:d4:a5:a4:71:1f:b4:01:2c:c9:
                    1a:ed:0d:8a:0a:41:d3:c5:5a:23:58:bf:ee:26:b0:
                    c6:4b:f7:07:a3:28:28:f6:46:4a:32:32:5c:24:28:
                    d5:f1:f2:c1:fc:3a:4e:eb:de:57:89:1e:11:f7:2d:
                    b7:c7:61:32:e0:5f:5a:f6:5d:bf:81:e6:e1:e5:2d:
                    4e:aa:2e:e1:49:1f:b6:55:83:a4:e6:d9:e1:70:70:
                    af:f8:2d:c2:3d:24:8b:a0:8d:07:78:33:ea:e9:a9:
                    fe:95:3c:04:e1:80:89:c6:ed:c3:d6:96:a8:64:61:
                    87:2b:f7:2c:3c:41:60:35:dc:b9:0e:48:e9:9e:33:
                    8c:a2:f9:04:d7:48:08:b6:64:28:35:a8:ad:f3:c5:
                    61:62:01:fb:78:ee:f5:2e:88:fc:77:66:68:ce:53:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:6B:5C:A3:7D:6A:7C:D9:61:B7:53:E1:4D:05:65:05:0F:37:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.245.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:09:26:68:d7:4f:1a:bc:b7:e3:23:90:fb:ac:ce:34:89:
         41:3f:12:53:50:e0:18:8e:e7:a8:57:fe:41:d5:7e:4c:20:0f:
         57:be:b9:bc:7f:88:0c:cc:f0:74:28:a9:34:36:70:98:6c:c6:
         fd:57:fe:29:72:69:85:bc:81:b3:9b:82:31:1f:91:55:7b:90:
         15:f5:02:34:81:4e:a7:ce:85:fd:7c:29:0e:36:1f:1d:a4:9c:
         85:3b:e7:fb:60:6f:eb:b0:bc:ac:f5:21:65:b5:72:09:81:b0:
         e9:91:2a:6f:75:61:c4:84:97:ed:2a:03:7a:f9:36:90:66:5d:
         cf:de:6e:c1:50:f5:19:bd:b6:7f:0d:c2:1c:8d:29:21:a6:8e:
         3f:63:91:1c:37:8b:d7:e6:51:5d:61:4d:06:93:3d:d9:33:34:
         90:5f:c2:66:c4:7b:6d:30:59:d1:7e:2f:87:aa:dc:38:8a:cf:
         93:ea:ce:d9:b7:e4:fd:75:4c:f0:8c:9c:02:3d:71:f6:e3:85:
         f3:d8:d8:ae:52:50:bd:3e:ca:e4:a1:3c:71:d7:ba:1d:bc:b6:
         19:ea:35:e2:8e:06:b0:15:cd:e6:c8:01:38:36:ad:49:a6:ea:
         35:75:0b:26:d3:4a:73:70:07:d7:66:22:bc:7e:26:18:0a:39:
         b7:fa:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:50:59 2026 by rpki-client