Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa
File:                     c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa (raw, json)
Hash identifier:          EMEo8uDWPiCKiNP/wXmu7ItVbm1igZKSNk84fzKDoHM=
Subject key identifier:   F7:6F:78:2A:D1:DB:FA:78:72:8C:C4:98:36:3B:A3:14:7D:69:AC:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AABD34FEE076E5C2280700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.229.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:bd:34:fe:e0:76:e5:c2:28:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=63b348df-5b2a-40ca-8b7f-d39674fe821c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:a5:06:35:b7:88:61:df:ef:04:d9:99:db:
                    21:88:9b:7a:36:59:96:76:da:55:c6:51:7e:bf:a1:
                    c8:cb:ab:6c:cd:8d:0b:47:a6:96:18:60:58:13:10:
                    c0:f7:38:7d:64:61:84:da:64:a7:ae:99:76:15:c9:
                    77:56:f3:7b:38:f4:f7:25:d7:70:b9:5d:e4:45:fa:
                    a6:ad:32:80:d8:05:e2:45:42:25:fd:4b:e5:b8:84:
                    16:53:cb:7b:73:06:19:ef:a8:54:a7:3a:cc:3e:24:
                    d4:24:0d:d7:f2:c0:f8:93:3f:c0:d6:2e:cc:45:05:
                    5c:c9:90:48:64:0d:e4:1a:47:5c:06:64:cc:72:f3:
                    e2:c0:a8:fa:01:db:62:c6:1a:ee:b3:81:76:33:94:
                    fb:e3:fd:c2:74:ae:7b:a6:fd:0d:f2:fc:48:9b:0b:
                    d9:4a:44:50:df:5c:6a:09:dd:d5:f9:b1:8a:15:0a:
                    1b:31:68:fe:b3:48:10:67:aa:bb:c5:7f:b4:93:b4:
                    fe:9e:bf:8b:d7:f1:e5:4b:a3:0b:dc:e7:24:c4:e7:
                    63:08:2d:f8:da:70:5f:4d:2c:a4:66:36:5a:c5:52:
                    3f:37:c8:1b:fd:2c:f8:2a:21:4e:da:ef:2e:2e:05:
                    89:3d:db:cb:2f:8b:6a:ea:67:6c:4d:26:c9:c3:22:
                    ee:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:78:2A:D1:DB:FA:78:72:8C:C4:98:36:3B:A3:14:7D:69:AC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.229.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:81:65:71:1f:a4:92:32:5a:fb:f3:bd:25:52:28:4f:fb:45:
         51:19:a8:74:c1:23:d2:c7:14:cd:c4:b8:c7:c7:50:e4:99:02:
         4e:e8:85:24:4e:ba:e4:b8:24:c5:c7:50:91:df:bd:ef:15:2a:
         28:fc:e6:47:49:20:43:cb:9d:43:19:a6:9d:61:04:b8:54:36:
         70:35:1b:28:75:2e:8c:92:a2:ed:14:6a:b0:3c:42:22:26:3e:
         dd:84:c6:a9:be:49:46:0f:b7:3a:ae:d8:64:2f:1a:c5:76:8e:
         9b:19:e7:9b:40:20:bb:d5:08:82:5d:4f:30:50:27:f8:aa:ca:
         fa:29:2a:14:a1:91:17:99:a6:2f:aa:de:5c:c6:7f:c2:95:2c:
         cb:03:4d:65:ac:c8:31:e3:f3:b1:5f:2e:6b:ec:0b:10:38:7f:
         49:d8:99:8a:34:51:69:d4:52:97:fe:b9:1c:8d:6a:71:06:3d:
         a0:42:a4:8c:dd:29:04:91:b4:f3:35:4d:45:f5:c8:13:00:58:
         0c:bb:a2:18:de:66:a3:f2:5c:4a:99:86:d4:7b:11:29:e8:2e:
         43:b0:67:e9:f2:9f:72:23:d1:1d:c1:80:bf:65:51:86:6c:0e:
         d6:4f:bc:fe:30:05:ed:4a:35:19:cc:50:f7:83:66:f0:7b:62:
         57:2d:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:28 2026 by rpki-client