Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cefa7210-a5ae-3a29-b6d7-69e27c0d0be1.roa
File:                     cefa7210-a5ae-3a29-b6d7-69e27c0d0be1.roa (raw, json)
Hash identifier:          ieliMo69xyO5hx3Kbj6cg34mblmn+zonhEtSfvRNRRI=
Subject key identifier:   25:E3:BD:A5:54:94:F0:73:13:79:F9:59:7F:09:0A:F1:29:6A:D2:2C
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584ECAE7F5C3EDD74EC23F70C700
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cefa7210-a5ae-3a29-b6d7-69e27c0d0be1.roa
Signing time:             Mon 10 Aug 2026 17:09:10 +0000
ROA not before:           Mon 10 Aug 2026 17:09:10 +0000
ROA not after:            Sun 08 Nov 2026 18:09:10 +0000
asID:                     401307
IP address blocks:        35.63.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:e7:f5:c3:ed:d7:4e:c2:3f:70:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Aug 10 17:09:10 2026 GMT
            Not After : Nov  8 18:09:10 2026 GMT
        Subject: CN=b9dcc2f6-043b-44fe-a91f-e1ad1b760dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:34:de:5d:b7:28:33:8b:80:ab:6a:b4:db:
                    96:a7:7d:0f:78:f0:8d:f0:e9:6b:a3:54:30:ea:d8:
                    f9:0f:0a:8a:67:ec:2a:68:c3:18:ad:52:6a:13:24:
                    b9:76:e5:48:22:ba:53:10:9b:89:d1:7e:2a:e0:eb:
                    69:8e:e5:6d:b4:f0:24:59:f3:b1:8e:e4:e2:1a:8d:
                    d8:7c:1f:37:7d:25:fd:a2:38:f6:cc:b2:82:09:0e:
                    ca:14:44:9d:98:ca:a7:b3:b6:0e:23:fc:f1:5e:46:
                    9e:7d:d9:78:60:9b:bb:f6:24:74:d6:a9:35:05:ea:
                    27:72:e0:de:7a:28:ab:fa:00:de:5a:c8:5b:6d:4f:
                    e3:64:a8:a4:6c:80:44:d8:c8:a9:40:bb:3d:b2:a1:
                    82:06:48:57:73:23:cc:c4:a4:59:4e:a7:b5:7d:65:
                    4b:37:78:f3:6f:95:14:34:22:fb:d6:5a:6a:28:8e:
                    27:45:1e:35:66:fc:93:72:c9:4c:a2:f3:66:18:64:
                    70:e0:99:99:08:87:9f:7f:23:f3:2d:3d:32:29:97:
                    f7:47:98:27:a2:70:27:98:ad:79:bd:11:d8:f1:4a:
                    98:72:47:d0:d3:a9:01:6f:e8:8a:92:56:bf:cd:2c:
                    36:a6:0e:92:92:04:2b:a8:d9:bb:e6:a3:d9:2e:e0:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E3:BD:A5:54:94:F0:73:13:79:F9:59:7F:09:0A:F1:29:6A:D2:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cefa7210-a5ae-3a29-b6d7-69e27c0d0be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.63.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:86:e4:53:2d:ad:96:fc:9b:3e:7e:78:da:9a:0d:9f:53:24:
         02:16:a1:5a:67:c1:d4:f1:fa:fc:85:bd:91:fa:d0:fa:6c:28:
         c2:f4:39:b0:20:b8:37:26:6b:bd:4f:21:a0:9a:d9:49:38:b2:
         d1:02:6e:de:a1:13:37:25:d1:d3:d6:14:1d:11:85:dd:c7:1f:
         cb:e6:b5:5e:b7:1c:5c:a5:8d:52:e9:7f:27:75:c9:50:c7:17:
         34:7b:cd:b8:f6:d2:11:d6:70:26:a3:ce:be:2d:2e:bb:2c:fc:
         57:7f:13:37:fb:c3:ed:d2:67:a6:74:f8:7c:ea:5a:61:74:80:
         a9:da:be:d2:56:b2:97:db:e9:fd:94:d1:96:70:12:44:6a:8f:
         d1:aa:39:7b:c1:43:b6:7f:dd:69:66:92:4d:bf:c0:a9:b8:1d:
         33:d1:5a:4e:34:fd:9c:74:35:25:9a:1c:05:7d:ea:9f:8a:23:
         cd:56:c8:11:c8:7b:92:df:6c:f3:80:d6:7c:ee:c7:de:46:81:
         23:7e:3c:6b:52:03:a9:46:a0:51:1e:09:66:66:6d:bf:1e:8b:
         4d:25:83:36:d4:2a:07:9d:f9:e1:08:d6:16:a6:89:39:8c:98:
         b4:e4:e6:1b:53:e2:9f:c0:ad:22:04:fa:10:84:41:7c:4a:f0:
         7a:e7:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:28:14 2026 by rpki-client