Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa
File:                     0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa (raw, json)
Hash identifier:          ewztFFnjUxYrfxE4Y+f3feKB8y8WPU1bXeAI8xxAc6o=
Subject key identifier:   C0:99:FF:B8:E4:05:55:C4:8D:DB:D0:BD:92:5D:70:C9:49:F1:0B:52
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584D1707DA8964C40165F9725D00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     394769
IP address blocks:        35.7.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:da:89:64:c4:01:65:f9:72:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=774417c3-b92c-4172-b0e5-d34a51a429e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:52:b9:45:0d:61:47:68:d9:9a:79:19:37:
                    b1:2b:5b:d5:95:3d:1c:ad:94:4a:d7:c8:d6:89:7f:
                    7f:27:63:19:cd:40:60:89:00:3e:51:03:13:ef:fd:
                    53:c5:62:82:e0:8d:48:47:9b:5e:e0:18:9f:b3:6e:
                    b3:17:f1:47:52:20:28:44:09:e5:db:cb:9b:6b:3e:
                    d4:28:e5:b0:ec:22:e9:75:95:83:70:e8:95:90:57:
                    e2:b8:93:f9:e0:77:84:e6:a9:c2:9b:00:05:ca:04:
                    36:17:58:44:0c:66:d9:f3:12:16:f1:4e:b5:62:d5:
                    51:0e:58:47:91:7a:89:30:19:b0:b4:e6:ab:04:93:
                    d4:17:25:87:2b:43:aa:07:a1:3c:89:26:4d:cc:82:
                    e8:41:e1:44:46:8e:73:09:48:9f:f4:f7:e9:a1:89:
                    3d:11:66:a8:5f:30:68:27:7a:5f:dc:f5:de:36:01:
                    77:62:83:94:ce:f7:10:fa:9a:dd:5d:f1:aa:f4:71:
                    09:b2:6d:f0:35:ba:4e:c0:3c:a8:5a:ec:f6:2c:b9:
                    fe:ed:9a:33:f1:3a:a3:77:cf:e1:c6:36:bd:6e:3c:
                    1c:88:53:d1:60:37:6c:4d:d3:aa:fb:43:ed:dc:93:
                    c4:a6:2a:29:1f:6c:99:09:6b:bf:54:43:d2:62:85:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:99:FF:B8:E4:05:55:C4:8D:DB:D0:BD:92:5D:70:C9:49:F1:0B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:8e:8f:c1:a5:4d:e7:18:df:6f:61:73:f9:53:3e:d9:50:02:
         14:a7:87:dd:22:3e:20:b1:55:87:e6:d1:a7:1a:4b:95:4a:f1:
         cf:d4:5e:6a:18:41:72:3f:86:dd:25:e5:3d:2b:61:7f:ea:3e:
         7e:19:4b:91:ca:0a:f5:78:94:f5:d1:2c:d0:83:25:83:b7:7d:
         8b:9f:31:fb:9f:00:ea:0c:64:0f:86:45:56:03:34:a0:42:9f:
         3c:5a:fd:46:63:24:fe:2a:f4:27:19:18:55:16:cb:7f:14:f8:
         0b:fb:ee:18:05:f2:57:bc:ae:4e:b9:c8:7e:36:9d:3f:63:4c:
         7d:b8:98:3b:68:ac:0f:c4:53:fd:d7:2f:32:77:50:42:a7:35:
         fc:65:12:0b:3a:db:28:9f:47:10:12:89:07:2f:66:68:51:d7:
         b2:82:71:1b:a3:f6:49:cb:c8:4b:1c:5c:0c:27:5b:c0:12:bc:
         c0:d5:3a:ae:63:ea:72:a8:1b:f2:1e:25:14:36:cf:f4:60:fb:
         3a:9f:1d:3a:37:57:bf:33:1b:04:a1:d8:64:34:2b:f5:d8:79:
         c7:1b:2d:72:fb:2e:06:55:66:e0:29:85:d0:4b:e5:14:ba:21:
         91:44:17:3d:d2:b6:ca:fe:fd:a0:6f:e5:73:95:87:53:e6:22:
         7a:f1:b8:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9qJZMQBZflyXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
Nzc0NDE3YzMtYjkyYy00MTcyLWIwZTUtZDM0YTUxYTQyOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEZSuUUNYUdo2Zp5GTexK1vVlT0crZRK18jW
iX9/J2MZzUBgiQA+UQMT7/1TxWKC4I1IR5te4Bifs26zF/FHUiAoRAnl28ubaz7U
KOWw7CLpdZWDcOiVkFfiuJP54HeE5qnCmwAFygQ2F1hEDGbZ8xIW8U61YtVRDlhH
kXqJMBmwtOarBJPUFyWHK0OqB6E8iSZNzILoQeFERo5zCUif9PfpoYk9EWaoXzBo
J3pf3PXeNgF3YoOUzvcQ+prdXfGq9HEJsm3wNbpOwDyoWuz2LLn+7Zoz8Tqjd8/h
xja9bjwciFPRYDdsTdOq+0Pt3JPEpiopH2yZCWu/VEPSYoVBCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCZ/7jkBVXEjdvQvZJdcMlJ8QtSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMGQyNTVlZWMtODZhNC0z
MGVmLWEyOWUtZjllZDdjOWEyNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIwdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKaOj8GlTecY329hc/lTPtlQAhSnh90iPiCxVYfm0acaS5VK8c/UXmoY
QXI/ht0l5T0rYX/qPn4ZS5HKCvV4lPXRLNCDJYO3fYufMfufAOoMZA+GRVYDNKBC
nzxa/UZjJP4q9CcZGFUWy38U+Av77hgF8le8rk65yH42nT9jTH24mDtorA/EU/3X
LzJ3UEKnNfxlEgs62yifRxASiQcvZmhR17KCcRuj9knLyEscXAwnW8ASvMDVOq5j
6nKoG/IeJRQ2z/Rg+zqfHTo3V78zGwSh2GQ0K/XYeccbLXL7LgZVZuAphdBL5RS6
IZFEFz3Stsr+/aBv5XOVh1PmInrxuKo=
-----END CERTIFICATE-----
Generated at Sat Mar 14 02:11:04 2026 by rpki-client