Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa
File:                     d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa (raw, json)
Hash identifier:          4JS/Xr9XC7Flqepsn6fKxpfVzsTRpFM+D2XcSXs81UU=
Subject key identifier:   AF:05:00:BB:97:B5:76:75:B9:63:ED:11:E8:F4:8F:3B:27:94:23:7B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBBCB178AE2D67B95A8C40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.240.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:bc:b1:78:ae:2d:67:b9:5a:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=93a96e96-1200-4496-986d-76987cf78e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:c1:06:c6:a9:56:19:fd:af:e9:67:d9:75:
                    82:cd:84:b7:ed:33:15:51:a0:8e:fb:4b:59:b7:e8:
                    83:85:b8:29:ac:9e:f6:be:ff:4f:09:d9:da:2f:b3:
                    37:8f:94:78:bd:46:b5:a5:31:fa:d2:50:f4:61:5d:
                    ab:57:a1:4e:fa:36:cb:47:06:ab:57:32:ce:dd:43:
                    8c:0c:be:f0:1c:14:c0:81:bb:ad:79:47:25:8d:7f:
                    c5:71:dc:be:49:e1:50:28:63:de:dd:5c:a3:53:e7:
                    50:70:50:68:7b:eb:a0:fc:97:38:de:f2:67:1e:f4:
                    08:81:91:8d:38:d1:ab:d2:dd:2c:a1:c6:67:52:1f:
                    40:4e:77:b2:ef:04:8c:29:a3:ba:af:5d:d1:c8:56:
                    b5:a7:80:8c:1c:9e:26:cc:88:6c:e0:65:3f:71:e8:
                    63:ef:50:b5:fe:2a:c2:14:f5:8e:18:c8:db:a5:a7:
                    e7:90:1b:d7:44:79:82:3b:55:8c:31:29:e0:f3:bf:
                    fc:24:8b:ae:c7:40:e4:2b:5e:22:77:51:4d:b1:ca:
                    52:87:a2:84:6c:f4:3b:c5:84:85:97:3c:3e:02:77:
                    a8:32:98:f0:39:80:05:83:79:9a:d1:b8:b1:a4:12:
                    32:86:d4:06:c5:6b:ab:8a:95:00:3a:1b:0b:b9:f5:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:05:00:BB:97:B5:76:75:B9:63:ED:11:E8:F4:8F:3B:27:94:23:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.240.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:06:1b:3c:cb:8d:ad:44:00:92:db:cc:4d:c0:96:40:38:
         66:a2:88:b6:ee:42:64:ae:7d:0e:a6:1d:02:5f:fb:38:aa:5b:
         08:b7:d8:66:c7:f3:80:a6:33:b6:d3:35:ab:e4:33:f1:10:9b:
         9e:05:2f:a7:be:b9:11:73:eb:d6:0f:60:9c:f1:b7:b6:9f:d1:
         de:1e:94:43:cf:cc:2b:cc:70:a5:58:67:f7:48:4f:b3:84:5f:
         5f:97:23:bd:28:92:76:14:43:db:20:47:6f:f7:0d:00:4c:c1:
         cc:19:c7:91:53:72:33:ee:7c:c0:0a:44:73:1d:e4:f5:04:63:
         4f:22:f1:a2:33:e7:a7:ef:ab:c4:ea:37:ee:ee:b6:52:63:74:
         10:bc:67:f8:25:35:e2:cb:f6:57:f1:b9:79:35:4a:a4:49:df:
         00:75:87:50:dd:54:e1:75:c2:b1:5c:e0:86:ba:83:48:d9:94:
         89:e7:89:e1:5c:ba:4f:71:02:f1:39:dd:21:36:d7:15:0a:ee:
         15:fb:b0:b5:50:29:4f:63:6a:bc:e3:ab:45:df:6c:a7:1d:b9:
         39:8c:db:49:ae:c7:32:bc:b4:26:5f:a8:ea:00:e9:59:55:c4:
         d4:9f:e4:1e:23:b7:13:05:b7:6b:93:62:24:26:c8:86:f0:90:
         cb:ed:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:33:51 2025 by rpki-client