Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa
File:                     e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa (raw, json)
Hash identifier:          u5j9MGsZW5yoJXh3C3cB45ixxvlGFRXEejI4hekL/v4=
Subject key identifier:   70:96:DA:19:CF:0F:72:8B:75:DD:4D:8A:7D:88:B7:97:91:E0:B0:76
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA361719B56A0E1E879A90
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.222.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:36:17:19:b5:6a:0e:1e:87:9a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=b32c4052-cb2e-422f-ad6f-dad2ddbd0562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:24:00:b0:7c:c6:7b:5f:e5:74:b3:85:0e:
                    88:21:e6:40:4b:52:91:7d:cd:b9:50:7e:9d:1c:6e:
                    da:4e:ff:19:5b:7d:87:e9:59:30:a3:69:2a:8c:af:
                    2a:1a:6f:6c:19:c0:8f:c7:f8:15:8f:7e:97:2d:e2:
                    41:69:6c:bf:47:af:c6:f1:b0:10:3d:fe:b5:f2:e5:
                    d6:77:93:1e:37:6e:9f:06:5e:18:e0:8d:ef:21:7a:
                    66:9b:14:a3:5d:de:1e:83:47:9b:f3:56:5a:ef:00:
                    23:97:bd:54:2a:6a:04:6f:76:10:78:2b:f9:66:d3:
                    16:31:dc:db:59:d2:8a:75:aa:9d:25:76:72:7d:16:
                    2a:95:e0:75:11:15:5d:8f:4a:c0:a6:76:da:aa:89:
                    c9:d6:14:95:ff:39:63:5e:47:86:7d:0e:97:dd:f0:
                    ff:7d:7e:3b:1e:0a:41:ae:15:dc:fa:d6:9b:6c:3e:
                    1b:c2:ad:84:d9:13:a4:f3:27:90:f6:6b:fe:71:8e:
                    90:61:5e:32:6a:e2:5e:58:51:91:01:0d:96:01:07:
                    74:05:fc:31:3b:37:cd:8e:c3:f9:99:49:0d:d3:32:
                    36:38:8f:38:f7:95:cf:21:52:00:92:04:12:48:61:
                    08:b5:3d:13:20:a3:b1:08:38:a0:7b:d7:d8:a1:4a:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:DA:19:CF:0F:72:8B:75:DD:4D:8A:7D:88:B7:97:91:E0:B0:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.222.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:07:00:df:05:d0:6a:90:c4:ec:b7:64:e0:c3:0c:c4:9e:
         ec:e0:eb:00:e5:f7:57:30:f1:80:ed:a8:84:62:f3:b8:4f:74:
         bc:dc:ce:f3:24:0f:0a:c6:ae:83:8f:ba:ca:36:fc:42:1d:df:
         73:57:bc:29:32:a1:4e:74:23:61:d4:de:da:9d:f1:4f:ca:7d:
         62:ec:42:4d:80:2e:f9:ac:15:83:da:de:68:b4:14:4c:19:90:
         2f:bc:ff:0e:96:e1:35:eb:7a:38:ac:b5:ab:70:7d:d3:d5:b5:
         3f:97:8c:b0:44:81:a9:5e:80:7e:c1:c3:30:a1:7a:99:10:d5:
         06:ca:f2:df:fd:23:31:c0:83:f0:bd:d2:38:ec:aa:1f:f3:91:
         d8:f8:52:df:f7:46:6d:56:b3:08:6b:33:78:29:dd:50:ab:fd:
         61:b3:a9:ca:66:cb:75:7d:e5:41:79:e6:89:dd:44:72:a9:b9:
         4a:36:1e:a9:f7:1a:60:59:78:0d:0a:51:3e:e7:fa:1f:ee:52:
         17:7a:13:b1:5f:19:7f:30:2c:14:a7:df:0d:7e:72:25:1a:41:
         25:03:5d:4f:fb:f3:07:d4:15:64:65:57:62:50:45:21:c9:64:
         30:b9:5a:e4:c8:bb:25:e7:ad:cd:30:23:48:00:95:c3:dd:ef:
         82:9c:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:21 2026 by rpki-client