Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/965605c8-a5c1-33af-aa8b-71baa4cebea1.roa
File:                     965605c8-a5c1-33af-aa8b-71baa4cebea1.roa (raw, json)
Hash identifier:          lGJYpnhoM4kH23P7HgbC5hk2y5MaMIu7Ky9FKaV08Cc=
Subject key identifier:   0C:5D:5C:4F:99:2F:F2:A6:9C:F9:45:28:64:6D:7A:06:A5:FD:7C:63
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA37EA66624A68CBE6AD40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/965605c8-a5c1-33af-aa8b-71baa4cebea1.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.188.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:37:ea:66:62:4a:68:cb:e6:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=497bfe18-e1b1-4618-9c58-d9defd2e6cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:27:56:60:73:44:25:7d:7b:d1:2b:2d:69:
                    49:2e:88:bf:46:7a:71:4d:89:87:e2:1f:4e:c4:1d:
                    aa:fa:ba:97:89:ca:a6:c8:95:27:f3:3e:6c:11:19:
                    8d:1c:8e:7d:90:25:d5:d0:aa:d1:1c:00:cc:b8:e3:
                    2a:a3:46:d0:27:46:03:80:44:53:64:bd:9c:8c:da:
                    53:bf:c3:aa:2a:26:17:aa:55:ce:76:8d:ba:3e:97:
                    74:e2:45:63:0d:cb:a2:2d:21:99:fc:bf:2f:7e:69:
                    03:bc:c2:34:b6:dc:f9:d3:21:fc:04:b3:3d:50:73:
                    ef:f6:27:1e:7e:ac:69:d1:9e:33:a2:49:ff:08:cc:
                    3d:c1:a9:73:ec:2c:f0:a3:78:a4:21:ef:a1:0b:95:
                    94:02:65:ab:b7:88:c7:28:aa:23:14:63:14:8c:db:
                    1a:04:ae:03:d7:73:38:7c:ea:3d:67:cf:6e:8a:af:
                    a6:42:20:be:1a:c0:b2:c7:ce:a5:c5:dd:cf:00:dc:
                    ae:f2:f8:88:a8:22:ac:15:15:34:28:2e:06:e2:ae:
                    0a:f6:92:2a:a5:7b:dd:8a:36:1c:70:0e:37:19:56:
                    77:3a:f8:94:49:22:a4:c2:46:20:6a:b3:bb:94:2a:
                    ef:de:37:f4:a5:15:e6:7b:0c:97:fd:97:3a:1b:9c:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5D:5C:4F:99:2F:F2:A6:9C:F9:45:28:64:6D:7A:06:A5:FD:7C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/965605c8-a5c1-33af-aa8b-71baa4cebea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:93:f7:66:b7:32:85:8a:41:0f:9a:4a:c1:38:ba:3c:4d:
         ab:5f:8f:a1:02:d4:ef:19:81:73:5f:44:b3:c4:db:84:9e:6a:
         5a:fc:cf:14:2d:fe:71:98:b3:c0:bb:14:db:48:ce:22:4d:2d:
         73:ea:62:b6:bc:90:74:46:0d:c7:9f:43:9f:75:e6:36:3b:d2:
         5a:27:4c:30:1b:55:90:0a:5a:76:a4:e9:b7:11:1c:8b:51:2f:
         d8:37:35:36:f6:6d:45:8a:7d:ca:3a:85:fc:40:18:8c:a6:0d:
         d9:40:84:9e:e4:77:ea:11:5f:5f:74:25:9b:88:1d:14:ef:86:
         ef:b8:93:31:e1:2d:21:14:66:fd:ab:7b:7e:64:50:9f:79:8a:
         1c:5d:39:18:b8:f2:35:38:16:e9:c9:8d:61:91:4b:70:bc:a2:
         04:fc:98:a8:27:df:6f:79:66:6f:8c:a5:72:27:a1:61:26:ec:
         ca:d3:11:c6:0f:1e:ce:8d:3e:40:17:b6:5c:91:a1:5a:2e:e2:
         fe:91:ab:f9:ba:23:e5:64:64:30:cf:98:ad:ac:11:f2:ce:13:
         23:3b:e1:fc:2c:e6:e9:1a:20:75:16:b7:52:15:6b:82:8b:02:
         22:dd:b1:00:51:2d:1a:e6:7f:d6:45:1c:77:1d:15:0a:31:4c:
         24:f1:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:21 2026 by rpki-client