Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa
File:                     33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa (raw, json)
Hash identifier:          JkkqemDF4QHIzYo9Rek8kPYAfXoumXrA5Xy7qUgH9VU=
Subject key identifier:   68:DA:EA:7B:F9:39:A3:80:E4:94:8C:EC:42:5B:62:55:61:29:B5:E1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51B02D4A0E469B8D281180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        35.195.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:b0:2d:4a:0e:46:9b:8d:28:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=3a42c379-6fc9-4ff4-a9a6-0614df4424fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:09:2d:a1:d8:b9:3d:b7:9b:50:c4:03:72:
                    34:49:a2:3f:df:76:68:46:12:ca:a4:38:94:a8:a0:
                    51:ad:05:8b:7c:75:66:0e:a7:3c:98:af:13:33:20:
                    1e:d1:81:ff:bd:5e:37:c5:77:d8:8e:d8:28:78:b0:
                    d1:9d:87:1d:02:29:30:d9:1d:12:6a:63:7c:bf:be:
                    ef:e9:2f:48:74:24:46:69:93:3f:4c:96:f2:4a:e0:
                    f0:49:5a:8c:0e:16:68:44:fa:87:ea:f8:28:79:02:
                    82:5f:44:d2:79:f9:9d:ab:41:ae:63:ef:94:54:27:
                    89:21:52:e5:a2:e4:3e:0e:19:e2:a3:91:e2:60:a8:
                    24:fb:76:12:41:60:8d:7b:e2:a1:e3:4a:3d:75:72:
                    35:ac:e1:7c:fb:8f:fb:23:21:61:0d:14:53:da:32:
                    4f:09:e9:00:93:2d:b7:6d:f8:53:60:0b:00:cf:b9:
                    30:63:60:c4:70:90:de:bb:2c:b3:e5:8d:6f:42:4a:
                    c7:49:87:ee:ff:a6:f5:61:be:39:35:d9:45:35:0a:
                    b6:f2:13:69:41:54:46:c0:f3:b0:e4:95:e5:20:f0:
                    09:a4:be:15:5f:10:ad:f1:d0:77:21:b4:9f:2d:fe:
                    40:d6:24:f4:05:7a:24:b1:6d:66:29:0f:b8:8f:e6:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:EA:7B:F9:39:A3:80:E4:94:8C:EC:42:5B:62:55:61:29:B5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:29:9c:b3:a4:c0:c8:53:0d:ac:c6:32:0e:c8:bf:ee:85:df:
         0b:7e:56:78:b6:0d:b2:b3:db:d6:e1:f8:90:f9:b7:95:3c:12:
         12:8e:ef:65:59:52:c1:86:19:20:b1:e2:c9:f9:cf:ac:39:c7:
         42:6a:0c:0f:1b:09:d8:43:d4:5c:7d:9c:41:1b:f3:cb:e3:55:
         5f:f7:b7:81:41:e3:3d:30:62:6d:d3:9a:bf:71:ff:43:03:59:
         91:5c:6e:a1:d8:37:35:f9:38:6b:1e:fb:24:de:10:96:ef:5f:
         ee:1e:b0:21:7f:93:5c:ad:8d:4e:bd:dc:b2:af:47:4f:65:28:
         ce:f2:83:af:68:2d:73:b1:a2:ed:45:ca:59:6f:82:e0:44:9b:
         48:a9:e4:f6:bd:b0:29:a5:08:4d:4f:6e:59:a9:0b:e7:f1:ac:
         3a:bc:0d:b2:a0:60:82:0f:4f:90:dd:06:f2:29:11:46:6d:f3:
         58:22:b4:e7:c8:f6:e4:ea:41:12:ac:8a:bc:31:bf:e1:62:e2:
         56:49:43:6a:54:c0:8e:6c:8e:38:99:dc:8e:b4:f8:b8:f4:78:
         92:4c:b0:a1:51:89:6a:15:b7:68:00:71:3b:d4:04:c3:c0:23:
         22:fb:af:96:0e:64:7c:52:87:98:20:ee:06:dd:af:0d:8f:bf:
         46:4e:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:34:40 2026 by rpki-client