Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d20d73ea-81b8-379c-9118-ed8868ee5569.roa
File:                     d20d73ea-81b8-379c-9118-ed8868ee5569.roa (raw, json)
Hash identifier:          klRTDh2FFFmYbPYo7Vx/vRFdzwyZriH+Hx5NGzp8QD4=
Subject key identifier:   0D:C8:2B:CD:AB:CE:A8:76:AE:B1:16:C2:74:E3:77:A6:F7:AF:95:9A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AAAC7F426CD924F3EA6D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d20d73ea-81b8-379c-9118-ed8868ee5569.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     19527
IP address blocks:        35.206.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:ac:7f:42:6c:d9:24:f3:ea:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=acd78ffb-dfe6-4668-ba44-c280eb949235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:22:fc:bb:d4:fd:b7:6c:87:bc:be:5d:a3:38:
                    f4:fd:cf:a9:34:01:93:b8:e6:6e:5e:ef:45:07:79:
                    ee:5a:65:6c:6d:f7:9b:64:f1:25:49:7a:ac:2d:f9:
                    47:dc:45:4e:66:b1:da:b1:a8:e2:95:aa:40:16:94:
                    ea:9a:83:0a:0c:d8:aa:a3:b2:77:c8:86:9d:22:33:
                    55:14:1b:ab:26:d5:3a:36:3e:41:60:7e:36:d0:e1:
                    2f:0a:ad:9d:3c:8b:97:87:88:30:8a:e4:2d:a7:99:
                    72:3b:39:34:2d:d0:51:8d:3b:d7:03:cc:97:03:37:
                    31:a2:5a:dd:cc:72:08:e6:df:17:9b:23:cd:3c:10:
                    f5:35:ee:ec:eb:d7:f2:5a:02:08:09:18:0d:80:ad:
                    b5:53:4b:c8:52:ef:f8:eb:b8:f4:55:36:b9:32:36:
                    01:6b:ca:f9:c5:e5:4a:5f:0e:47:8c:45:35:6b:d0:
                    a5:34:c8:e8:7f:56:1a:e3:ff:99:14:91:a8:20:d5:
                    ef:3d:38:2e:e8:85:da:dd:f1:76:8c:a6:18:6d:dd:
                    1e:7c:94:5d:6f:d0:28:66:68:ec:0f:68:14:2b:cb:
                    c4:2b:4e:8a:d7:20:37:50:6c:a8:33:ed:02:a5:5b:
                    19:07:15:22:65:d1:77:63:c2:f8:41:fa:bd:c2:b2:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C8:2B:CD:AB:CE:A8:76:AE:B1:16:C2:74:E3:77:A6:F7:AF:95:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d20d73ea-81b8-379c-9118-ed8868ee5569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:eb:db:0f:92:84:b9:9d:d3:03:bd:87:fe:e4:83:ec:3e:41:
         78:59:90:3c:ca:ee:5a:dd:cd:41:4b:e4:f4:6f:fe:40:4b:3b:
         76:a2:8a:ff:6a:f7:35:65:3e:7d:76:39:bb:58:c9:2c:11:13:
         87:4a:7a:56:e4:c5:0a:63:00:70:2f:67:95:6a:ba:c8:61:9d:
         84:a7:a7:73:4b:d9:b1:9a:e3:50:e3:dc:c1:95:9e:a2:04:43:
         91:6c:f0:92:e5:f0:9d:cd:f9:74:e9:18:b3:f0:75:7d:9b:a5:
         c9:75:f4:f5:3c:d4:77:63:fe:26:f7:9d:2f:08:97:e9:74:77:
         40:d5:56:3c:c2:00:8b:d3:0a:77:09:0d:44:47:fa:63:3f:3a:
         10:e0:3f:91:d8:7e:57:e4:38:08:52:fb:fd:bd:41:68:49:48:
         28:be:10:d3:76:94:bb:87:1a:fc:ec:14:62:62:aa:a8:98:38:
         b3:b0:ae:df:49:29:23:ab:41:8e:94:76:14:84:3b:28:68:84:
         80:b2:6d:af:09:d7:74:95:b4:dc:a8:a5:95:1b:72:81:4d:de:
         ca:41:1d:1b:b7:ad:37:13:7b:cf:b1:b8:5b:e6:22:4f:7d:9d:
         d4:5c:96:41:95:ca:20:64:fb:52:73:f5:b0:a7:26:8b:35:29:
         4d:a4:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:27 2026 by rpki-client