Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
File:                     884763ea-5eee-3437-a700-182a36503d81.roa (raw, json)
Hash identifier:          tLhiJYkn/W476q/oDm5HbgCEUzLmEogxLbtSDE3XCVo=
Subject key identifier:   63:08:83:89:A8:A8:31:E3:50:50:EE:D9:37:6B:9C:4F:22:3E:81:8B
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584EA788960871D90BF6E1FF9380
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36375
IP address blocks:        35.7.64.0/19 maxlen: 19
                          35.7.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:96:08:71:d9:0b:f6:e1:ff:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=09cbe8b1-ba9b-4d27-80b3-505145e78af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:67:61:f8:d6:45:ca:2b:f5:52:14:ce:b1:
                    3b:99:df:c3:83:63:be:c3:dd:59:2d:33:e9:24:92:
                    fb:ee:03:63:f6:e3:fa:95:5e:63:95:0c:0b:53:86:
                    8c:92:00:f9:d4:3f:f6:72:ea:63:96:63:26:c6:7b:
                    99:fc:eb:fc:71:7a:aa:4e:15:88:a6:95:8a:6a:0b:
                    44:f5:9b:47:44:36:49:b0:30:cc:c9:9d:65:3c:31:
                    e1:6d:0f:96:49:d3:df:73:5a:2a:38:71:ff:5f:91:
                    7b:b8:76:52:06:d7:45:0c:ea:02:57:2c:6f:69:98:
                    e0:0c:3b:5d:be:4b:67:a9:5a:b0:e3:c9:2f:86:5f:
                    70:e0:a8:05:ca:f4:4c:e2:9b:ee:3a:45:64:56:ef:
                    bc:27:18:4c:5d:5b:2b:51:92:bd:e8:1f:34:0e:fa:
                    eb:f3:4e:27:c4:36:fb:07:ae:ae:34:56:31:4d:b4:
                    5c:ac:a0:1d:19:05:61:ad:b7:3f:c2:bb:c0:6d:d4:
                    a5:22:12:3d:89:b8:81:e7:07:56:34:1b:dc:41:74:
                    3e:ea:f2:b6:89:4b:c3:9e:3d:8a:b6:93:21:12:cb:
                    18:59:6e:a4:05:58:ac:fb:28:ed:79:af:67:6a:f1:
                    f7:d8:34:0c:bf:74:0e:fa:6c:d7:af:8c:a5:0e:97:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:83:89:A8:A8:31:E3:50:50:EE:D9:37:6B:9C:4F:22:3E:81:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.64.0-35.7.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:df:90:23:6b:34:6f:8e:68:b5:5d:56:6c:89:5f:e1:5b:71:
         5c:fd:24:d5:ae:11:1f:41:96:77:7f:81:78:d1:f2:cb:46:7c:
         ac:30:4d:2b:94:44:7e:39:10:c2:36:90:4c:f6:c5:42:15:49:
         31:8b:cf:18:a5:32:fb:59:2e:0d:84:7b:43:68:aa:c3:df:e1:
         47:42:4d:63:bc:2c:4e:1f:95:f1:fc:09:46:36:88:1f:0a:ff:
         ae:e8:5a:e0:94:eb:04:5d:58:d1:d5:8b:e6:b3:6b:de:e0:68:
         1f:fd:46:53:eb:ad:9c:c7:72:a3:ce:17:4c:1e:9b:7d:24:ec:
         ad:c7:55:b7:07:e7:76:69:7a:46:88:39:1f:8a:92:81:d3:16:
         0a:72:a2:f5:62:7c:d1:cc:2d:76:77:8e:33:b5:41:78:0e:f9:
         8f:e2:63:d9:9e:e3:49:83:8b:ae:e6:e7:b9:6b:d6:6e:fe:f2:
         64:40:83:b7:8d:b9:9a:a8:0b:98:ab:fb:26:70:68:cc:ad:b0:
         a8:99:c3:4a:af:86:76:d1:59:bc:b5:ee:3d:46:0a:26:07:9d:
         4d:0b:74:13:a3:9c:2b:0c:82:b9:46:78:40:2f:3a:e3:7e:a0:
         bd:b8:9a:ea:fc:3a:ff:f8:fd:72:fd:7f:e4:c1:9a:34:f0:db:
         e1:13:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:03:04 2026 by rpki-client