Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa
File:                     0280d272-3010-32e2-a9c6-9a6552888640.roa (raw, json)
Hash identifier:          8BMTyde21XT3d4d9ZvnxmWpZveVQGdnRX8PISEbJ9v4=
Subject key identifier:   C9:B3:07:89:B7:91:3F:68:E9:42:BB:63:DC:AE:6C:5A:6C:AF:6D:B0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51B16F4BB8EE405A370F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        35.239.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:b1:6f:4b:b8:ee:40:5a:37:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=ee845440-061f-4ccb-924c-a9eef3011b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:4b:cb:5f:4d:22:31:07:c7:91:12:b0:4a:
                    73:a3:c0:01:de:ab:cd:83:43:77:ad:f5:5d:b2:02:
                    20:b3:55:de:51:38:a2:58:bb:88:9a:56:b1:8f:d0:
                    3d:72:b7:13:9a:21:a6:79:d8:be:06:80:d4:f2:3c:
                    4a:bf:fe:95:31:26:22:86:17:e5:f5:64:73:f9:40:
                    8c:b7:63:01:22:11:c0:0c:06:fc:95:21:72:4d:85:
                    d3:4b:ed:47:a0:0c:0f:13:36:e6:4d:f7:9d:15:f4:
                    30:ad:96:d8:5b:e2:0c:c0:35:f4:38:a9:cf:ec:44:
                    8e:7c:bf:df:de:f1:8e:ac:87:29:ab:ad:3f:a7:c7:
                    f6:33:92:df:09:28:f1:bd:fd:1e:28:0e:e8:cf:81:
                    76:da:53:30:af:05:48:0f:a6:e0:2b:a0:ff:ca:e9:
                    65:8d:e7:be:7a:44:c0:ba:80:0e:cc:31:d5:f1:3b:
                    0b:c1:92:a5:fc:df:83:b3:1f:32:11:88:26:66:c6:
                    24:41:d7:f0:80:f4:98:10:39:d8:87:2f:5f:4e:d5:
                    fb:1b:cd:6d:c8:9c:23:9a:68:aa:98:8b:1e:b7:cc:
                    63:ef:e6:ee:7b:e6:0f:9f:57:cd:e9:9e:d9:ec:00:
                    19:3e:0d:40:ef:7e:61:51:40:af:11:c4:73:0c:07:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B3:07:89:B7:91:3F:68:E9:42:BB:63:DC:AE:6C:5A:6C:AF:6D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:b9:63:bd:5c:9b:de:7e:a5:0c:07:cf:cc:85:0c:69:fe:
         e0:ee:26:9f:31:62:88:5b:37:78:2e:c3:18:c2:7d:9b:d9:09:
         95:f7:3d:bc:8f:3a:4d:3e:7b:ac:38:fb:c2:3e:36:e0:da:47:
         f2:52:18:5b:46:bb:79:e1:79:46:95:fe:c4:57:33:8f:9f:77:
         d5:b7:d0:58:a3:99:60:35:f8:97:7a:95:53:5e:15:11:93:db:
         00:d8:d1:78:72:c7:77:58:0b:2d:cf:7b:cf:f7:c5:6f:d3:0c:
         58:51:74:76:d3:91:72:9b:1d:46:af:d7:1e:6a:b4:66:5b:0b:
         32:59:93:41:cd:03:cb:cc:36:cf:91:62:b0:75:8e:77:09:dd:
         0a:ca:eb:11:b1:0f:4e:6f:64:5c:a8:f6:6b:a1:6d:52:de:b2:
         a5:6b:58:6e:78:b2:66:fc:63:c0:2a:83:03:18:7d:90:aa:a6:
         12:52:fb:56:49:25:bf:64:bb:54:45:cf:c4:c0:e1:de:cf:96:
         4a:19:83:83:c9:d4:98:fa:ec:56:71:bf:32:a7:5e:be:44:ac:
         48:fd:97:bf:e8:d7:f3:3e:e9:2b:8c:6a:d2:ad:ba:58:fe:b9:
         08:f9:22:bd:11:7a:79:f5:e0:57:5d:b9:31:4b:a6:c6:a7:16:
         72:7f:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:54:56 2026 by rpki-client