Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa
File:                     8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa (raw, json)
Hash identifier:          UizHr8H1oFMstuobj1kdXC9FHJByjMuLn6mUUOI0HnA=
Subject key identifier:   B2:55:48:2A:EC:B5:35:27:5E:0F:38:C7:FB:80:9F:FB:4C:11:E0:B0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D8F0BD75ED84B97913280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        35.212.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:8f:0b:d7:5e:d8:4b:97:91:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=9bb3ec33-11ed-415e-803e-c18006c964fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:95:70:3c:21:43:37:b1:95:79:57:5e:bc:d5:
                    2a:ce:d0:80:75:c3:b0:0b:26:b0:91:06:5c:b8:11:
                    95:b7:a6:52:5f:10:38:66:a6:8b:88:c4:e5:c1:1b:
                    d9:4e:51:92:cd:1d:2a:03:0a:28:c6:d9:d3:0f:f0:
                    fd:71:64:ae:49:b5:68:43:57:f5:0e:70:a3:52:bb:
                    10:09:b7:67:a2:3f:25:fa:9f:63:1b:19:30:10:e5:
                    e0:4b:f9:24:f2:fc:35:99:d5:4a:9c:fe:94:6a:a5:
                    69:94:20:38:e0:1c:ec:d5:e6:cf:8c:4f:cf:e6:cc:
                    a1:1c:9b:fd:c1:ea:9f:0f:41:0c:84:7f:8f:db:a6:
                    6b:36:52:f1:cd:7e:b9:04:be:34:1d:22:eb:5c:f8:
                    ab:a4:79:52:0d:81:e2:eb:d3:ed:18:58:d7:8c:29:
                    6b:c4:d7:9c:89:5f:fc:f9:78:db:89:16:af:7c:45:
                    68:10:8e:34:32:f2:b8:c4:7d:c7:65:13:ae:10:fb:
                    f7:29:6b:d2:9c:6b:bb:d5:e2:68:ff:8d:de:73:d6:
                    94:3b:6f:c7:94:6e:f0:97:e5:07:d9:ee:60:0e:0d:
                    b2:e7:b6:60:68:9a:b1:a6:d6:a2:42:2f:15:bd:92:
                    60:35:fe:7f:38:a8:b7:f7:71:0a:58:6a:bc:6b:c5:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:48:2A:EC:B5:35:27:5E:0F:38:C7:FB:80:9F:FB:4C:11:E0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.212.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:52:d0:bd:94:60:9c:3f:66:31:cc:2e:e5:cf:f3:1e:3f:77:
         6b:c4:10:d3:a9:ed:ca:f0:84:5c:fd:2b:62:23:f4:ef:09:b4:
         66:27:50:d4:07:a7:b1:72:f8:4b:a9:08:80:45:60:ae:22:1b:
         3d:d3:ee:ee:72:d5:8a:18:32:51:aa:1f:ed:5d:09:35:12:b9:
         2f:54:e4:5c:da:42:b6:3b:b8:b8:5c:27:8d:26:42:5a:cd:7c:
         c3:bd:38:f6:c5:53:a5:8c:68:af:32:91:88:ad:9a:80:84:63:
         97:6c:31:db:c9:ae:f4:b9:3c:60:e0:f3:11:90:c0:c1:cf:9e:
         60:86:d0:5e:96:08:b5:55:6a:14:fd:80:a6:37:ba:65:a4:0d:
         46:23:41:5c:b1:c1:67:47:ef:25:9c:4f:9d:e5:98:5f:1b:ec:
         ab:fe:94:98:8a:ef:c3:cd:36:9f:2c:2e:1f:7e:1c:ed:e4:ae:
         20:0e:c1:00:f8:3c:38:a0:cb:9b:84:94:ce:c7:ae:74:d6:9f:
         c6:eb:44:e8:ba:b6:54:8d:b8:65:50:f8:e6:37:3a:55:f8:27:
         89:17:40:13:0e:06:06:5d:aa:90:0d:0e:0d:06:8e:5d:f7:34:
         67:c2:f9:f3:66:33:77:a5:15:9a:8b:8c:9f:12:03:94:3a:b1:
         22:d0:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:55:38 2026 by rpki-client