Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/64cac640-968f-3a36-88bc-dc722036df58.roa
File:                     64cac640-968f-3a36-88bc-dc722036df58.roa (raw, json)
Hash identifier:          uBDxWYBzapy2xd5NjLzsYwb+822+GFquN+23o5D0jx8=
Subject key identifier:   5D:C0:89:B4:09:57:44:ED:87:9E:8B:34:21:9C:42:E9:BB:4E:D9:8A
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584EA7873AF6A0CAD4B34AFBF880
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/64cac640-968f-3a36-88bc-dc722036df58.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     237
IP address blocks:        35.33.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3a:f6:a0:ca:d4:b3:4a:fb:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2f01a7f5-d0fa-4e07-86af-de85a88b11c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:53:81:47:88:53:66:a9:67:b0:76:42:a9:5d:
                    b4:3e:95:df:8b:f5:76:8e:61:2a:2f:c9:3a:72:e2:
                    9d:d0:8c:24:c1:d5:b7:06:8d:d0:af:47:59:da:80:
                    d4:c3:51:f1:33:51:a0:de:eb:41:18:a9:a4:2f:0c:
                    99:df:66:5f:f9:5f:a0:86:96:8b:fd:2a:1a:e1:0b:
                    c1:99:69:b3:54:2d:4d:c8:f7:96:89:3c:7c:b4:e6:
                    9c:60:57:03:7b:70:12:ed:97:f2:14:e9:8b:fb:b9:
                    1d:b9:f9:a6:fd:ae:8d:c2:2a:93:95:7c:3e:83:f9:
                    bb:52:58:48:56:55:ba:8b:21:39:eb:8f:a9:93:e7:
                    fa:25:4e:e2:82:30:26:31:36:29:f2:a7:bb:23:f3:
                    7c:13:ec:24:fe:07:18:dd:cc:8e:c0:2c:89:a8:91:
                    83:aa:28:a3:7f:5d:d8:5e:cc:bd:97:50:bf:46:d3:
                    63:fc:0d:88:a2:d5:82:65:2f:be:59:f5:44:ab:8d:
                    e4:17:92:21:83:03:42:e8:fa:76:2c:39:48:9f:14:
                    20:c8:12:b1:f3:ab:2d:40:17:db:d9:78:c1:2f:ee:
                    db:1e:eb:0e:a5:86:f6:f8:7d:9a:a9:a4:c1:71:1d:
                    3c:b8:51:d6:a5:3f:e4:a6:40:0a:a1:a4:33:3b:2e:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C0:89:B4:09:57:44:ED:87:9E:8B:34:21:9C:42:E9:BB:4E:D9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/64cac640-968f-3a36-88bc-dc722036df58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:54:8f:5a:47:29:df:c2:3d:fc:b9:25:7e:82:10:2a:b9:a7:
         e5:38:6c:39:ae:fb:27:55:63:b9:f6:80:87:70:77:94:af:38:
         a3:de:ff:08:4e:da:e9:3e:ff:9f:8e:91:e0:99:9c:5e:97:c5:
         b0:38:ac:38:05:a6:9e:49:a8:8b:97:9a:19:2c:fd:24:3d:23:
         e3:28:45:74:be:90:28:a0:bc:71:c2:3b:12:14:71:d5:7f:34:
         78:a8:fa:63:b3:5d:c5:4a:de:a1:3c:b1:d0:bb:49:bb:1b:93:
         7c:81:64:14:00:a9:ba:b9:f0:81:e6:a4:df:53:9a:f2:01:a4:
         e0:16:16:fd:d9:16:37:b6:1d:d6:76:57:69:9d:96:8c:37:c6:
         9f:63:c9:1f:6b:bd:16:36:c3:b3:5a:1a:fa:a2:34:53:8a:b7:
         18:3f:9e:7b:b9:fb:a0:cd:13:97:8e:ff:a1:55:c1:13:dd:7b:
         9d:7c:eb:5b:35:24:64:f1:b2:aa:e7:e3:ff:52:80:8d:43:5a:
         ad:3a:a3:5f:ab:83:1a:2a:2c:1b:f6:80:7d:4f:c4:27:a6:64:
         5f:87:17:78:a6:5c:e5:00:fa:0d:e0:ac:27:9c:7d:15:95:ce:
         ab:14:75:b8:14:ed:dd:82:49:4f:4a:03:8d:7d:63:8a:ed:88:
         ed:62:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:46:40 2026 by rpki-client