Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea4d80f9-0319-362e-8222-2647fc8e3b32.roa
File:                     ea4d80f9-0319-362e-8222-2647fc8e3b32.roa (raw, json)
Hash identifier:          gTynnd/qBwLVIgfNaNDC4CEWhy9IWnIlBBpZjLufEUk=
Subject key identifier:   CA:BB:14:B0:43:19:D3:A9:48:5B:A6:58:76:60:5E:30:46:80:9D:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB7B0292B7D554AD2BCDD8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea4d80f9-0319-362e-8222-2647fc8e3b32.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.239.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:7b:02:92:b7:d5:54:ad:2b:cd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=c089fff7-6504-4b16-9cdb-e3350bd7f295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:19:cd:42:db:4b:32:ed:a2:03:90:ca:23:
                    f4:d0:da:3f:e4:74:86:c5:db:f6:03:81:04:f6:bd:
                    f3:80:26:3b:21:12:17:e4:a1:f2:a0:34:0a:e2:d6:
                    cd:00:e4:ab:66:2a:fe:42:e3:41:c9:c2:29:ee:b8:
                    3f:a1:65:03:eb:1d:64:41:1a:bd:2e:bd:2a:e9:4d:
                    e2:3d:5b:97:2e:54:47:4e:e6:48:04:fe:22:2f:eb:
                    3b:2e:5f:6d:84:75:7d:87:60:a1:71:f5:0d:9b:59:
                    0a:fe:3b:28:0f:b0:17:a8:4a:be:ed:ca:a2:50:e3:
                    69:76:c4:ae:9b:ea:ad:92:29:fc:9e:cd:62:73:fe:
                    38:f4:91:e9:87:ad:6a:ea:39:23:c1:86:73:01:00:
                    3c:9f:5e:fd:4e:2f:60:c0:f5:68:02:25:42:48:17:
                    ba:58:94:23:62:f4:9f:62:b9:26:af:37:be:84:90:
                    99:67:02:cb:ba:44:d7:b7:b5:4d:2f:0b:5b:62:09:
                    98:17:b2:bc:29:4a:80:15:e3:8d:b4:36:07:f7:30:
                    f8:cb:ea:3d:5b:2c:d5:79:e5:69:1d:31:f7:5b:39:
                    9e:46:f5:e3:b1:e9:26:4d:e6:b3:fd:da:d4:e2:08:
                    44:5e:dc:43:45:4b:ad:cc:0c:ab:97:9d:c3:7e:da:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:14:B0:43:19:D3:A9:48:5B:A6:58:76:60:5E:30:46:80:9D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea4d80f9-0319-362e-8222-2647fc8e3b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.239.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:4d:fd:a9:b9:a1:54:73:fb:b3:33:81:82:04:c9:c2:0a:
         39:ac:c3:bd:f2:b2:7a:f0:8c:7f:fc:61:17:9b:62:29:30:a1:
         71:06:35:27:ca:0b:e2:ff:18:94:d0:b1:b3:b7:fe:11:10:25:
         28:61:00:db:81:f2:83:47:6f:f7:bc:5a:9a:2f:6e:02:b4:06:
         8a:d0:69:db:c4:21:02:a4:ed:c2:e8:d7:86:65:94:52:a0:7d:
         67:5f:e9:c2:41:81:63:c8:33:39:fd:f4:f9:94:46:3b:5b:b3:
         67:12:fb:7c:11:93:1e:45:80:cc:99:c2:eb:39:d2:4a:d6:08:
         23:8d:7d:7c:64:59:43:72:f7:97:04:42:8c:50:63:0c:81:91:
         e4:d2:d3:c2:cf:67:1b:35:b1:0e:bc:63:e3:27:05:b5:ed:9e:
         66:33:35:ad:4c:c0:fb:77:13:67:a1:b0:33:a6:be:32:ce:f8:
         c4:3f:05:ae:32:e3:6c:2d:ae:5e:e6:e3:04:68:b4:e8:77:5a:
         c2:8e:cd:73:0c:48:30:f6:2f:b0:c0:af:18:47:11:5f:ab:77:
         46:b6:0f:be:de:6d:a6:26:87:27:22:a1:fd:cf:2c:fa:da:97:
         41:c1:e1:d9:81:e3:c0:54:6d:6d:bd:29:08:d7:71:cf:a9:ad:
         81:0a:15:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23sCkrfVVK0rzdgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
YzA4OWZmZjctNjUwNC00YjE2LTljZGItZTMzNTBiZDdmMjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZMZzULbSzLtogOQyiP00No/5HSGxdv2A4EE
9r3zgCY7IRIX5KHyoDQK4tbNAOSrZir+QuNBycIp7rg/oWUD6x1kQRq9Lr0q6U3i
PVuXLlRHTuZIBP4iL+s7Ll9thHV9h2ChcfUNm1kK/jsoD7AXqEq+7cqiUONpdsSu
m+qtkin8ns1ic/449JHph61q6jkjwYZzAQA8n179Ti9gwPVoAiVCSBe6WJQjYvSf
Yrkmrze+hJCZZwLLukTXt7VNLwtbYgmYF7K8KUqAFeONtDYH9zD4y+o9WyzVeeVp
HTH3WzmeRvXjsekmTeaz/drU4ghEXtxDRUutzAyrl53DftrEYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMq7FLBDGdOpSFumWHZgXjBGgJ1pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWE0ZDgwZjktMDMxOS0z
NjJlLTgyMjItMjY0N2ZjOGUzYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuzTf2puaFUc/uzM4GCBMnCCjmsw73ysnrwjH/8YRebYikwoXEGNSfK
C+L/GJTQsbO3/hEQJShhANuB8oNHb/e8WpovbgK0BorQadvEIQKk7cLo14ZllFKg
fWdf6cJBgWPIMzn99PmURjtbs2cS+3wRkx5FgMyZwus50krWCCONfXxkWUNy95cE
QoxQYwyBkeTS08LPZxs1sQ68Y+MnBbXtnmYzNa1MwPt3E2ehsDOmvjLO+MQ/Ba4y
42wtrl7m4wRotOh3WsKOzXMMSDD2L7DArxhHEV+rd0a2D77ebaYmhyciof3PLPra
l0HB4dmB48BUbW29KQjXcc+prYEKFbk=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:23:59 2025 by rpki-client