Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfd276b5-f64b-3b62-b21c-76f88bc724a7.roa
File:                     bfd276b5-f64b-3b62-b21c-76f88bc724a7.roa (raw, json)
Hash identifier:          wAbb1C//O3U8pUf/XNKPQ8lVaJL/UgbgdCkMFIB3sXk=
Subject key identifier:   AC:29:B4:1C:60:39:FE:7F:88:4C:56:9B:6B:21:DE:43:0B:35:93:0A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D801F1E1EB28E93F2D980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfd276b5-f64b-3b62-b21c-76f88bc724a7.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     19527
IP address blocks:        35.207.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:80:1f:1e:1e:b2:8e:93:f2:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=74f058c0-e7a5-40f5-b826-9f9a80015803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:32:dd:80:ed:e2:45:1d:61:13:4d:1b:b1:
                    d9:03:78:8a:4d:92:16:29:7f:82:28:0c:99:ba:6c:
                    c2:65:47:7b:3c:21:ca:1e:d4:dc:20:7a:5d:45:f7:
                    d9:c9:53:fa:99:e5:ba:8b:40:72:b3:36:ff:79:12:
                    52:38:e0:7b:57:d0:30:fb:ff:6f:98:4c:96:c0:53:
                    be:e5:75:61:2d:e3:09:0f:d9:58:fa:f5:a9:9b:c0:
                    8b:46:3b:9a:ff:f8:f3:3a:97:f1:6f:31:71:73:f5:
                    20:38:21:0f:ed:88:5a:45:5e:59:ed:59:a9:9a:14:
                    3a:38:d7:c3:d6:4c:fa:cd:e1:c0:fa:8e:49:a8:74:
                    01:d9:a4:55:53:db:99:03:8d:81:37:f8:ad:68:6b:
                    68:d5:cb:8c:72:3d:71:cb:02:73:7e:6e:55:84:5b:
                    56:cd:04:27:c2:f6:11:b7:9e:e5:42:aa:ce:9a:60:
                    d7:52:76:fb:67:55:4f:4e:52:bb:29:9a:3f:e4:1c:
                    93:39:a5:e6:27:a9:8f:ec:04:16:1f:85:cd:56:62:
                    64:a1:c3:49:03:be:ec:b3:1e:a0:20:1d:66:5b:b1:
                    f1:76:c6:4d:2e:c6:55:cd:e3:04:38:08:7f:cc:b0:
                    bd:0a:f4:80:85:c3:01:28:46:ff:60:0f:30:a2:d6:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:29:B4:1C:60:39:FE:7F:88:4C:56:9B:6B:21:DE:43:0B:35:93:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfd276b5-f64b-3b62-b21c-76f88bc724a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.207.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:36:b5:12:08:44:40:33:7c:3f:f7:cb:b8:f7:b1:c6:f9:26:
         aa:09:08:b9:33:f1:88:7e:22:35:1c:85:da:53:10:76:95:28:
         1c:37:59:46:bd:a9:b5:ec:ff:b2:ec:1a:38:26:71:50:11:94:
         82:fe:4a:46:71:4b:b9:32:e0:26:db:7d:e6:e7:ef:8b:42:b8:
         7e:d0:f8:f2:d8:d7:94:cc:ea:60:75:76:0d:d0:1b:bb:d7:5b:
         62:94:e3:36:50:c5:98:91:ee:c1:c3:a8:26:f0:37:55:68:b1:
         cb:ba:1c:e0:0a:0f:7e:bc:4a:cf:6b:66:84:93:3f:44:2e:57:
         d4:37:18:e9:29:62:2e:27:ea:79:5d:d3:8c:2d:9f:8f:25:d7:
         89:1c:f8:5b:df:21:cb:a2:bf:6f:53:f9:72:67:d7:af:31:1c:
         d2:10:fd:ea:99:e9:23:33:e7:17:c0:0f:2e:fa:75:45:7f:9f:
         e2:3a:d2:ff:df:ec:0f:c7:41:ac:0d:70:2c:5b:a3:5d:3e:25:
         fe:d1:37:6c:29:a9:bd:9c:b8:bf:4e:4c:ae:ed:40:94:84:71:
         68:39:57:65:0d:16:83:eb:87:3f:be:a0:bc:27:84:92:37:ee:
         bd:93:10:c0:00:e7:9d:b1:db:92:bd:bd:1d:7d:b3:4d:15:1f:
         4e:c4:09:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYAfHh6yjpPy2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
NzRmMDU4YzAtZTdhNS00MGY1LWI4MjYtOWY5YTgwMDE1ODAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzIy3YDt4kUdYRNNG7HZA3iKTZIWKX+CKAyZ
umzCZUd7PCHKHtTcIHpdRffZyVP6meW6i0Byszb/eRJSOOB7V9Aw+/9vmEyWwFO+
5XVhLeMJD9lY+vWpm8CLRjua//jzOpfxbzFxc/UgOCEP7YhaRV5Z7VmpmhQ6ONfD
1kz6zeHA+o5JqHQB2aRVU9uZA42BN/itaGto1cuMcj1xywJzfm5VhFtWzQQnwvYR
t57lQqrOmmDXUnb7Z1VPTlK7KZo/5ByTOaXmJ6mP7AQWH4XNVmJkocNJA77ssx6g
IB1mW7HxdsZNLsZVzeMEOAh/zLC9CvSAhcMBKEb/YA8wotbQvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwptBxgOf5/iExWm2sh3kMLNZMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZkMjc2YjUtZjY0Yi0z
YjYyLWIyMWMtNzZmODhiYzcyNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI8+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIE2tRIIREAzfD/3y7j3scb5JqoJCLkz8Yh+IjUchdpTEHaVKBw3WUa9
qbXs/7LsGjgmcVARlIL+SkZxS7ky4Cbbfebn74tCuH7Q+PLY15TM6mB1dg3QG7vX
W2KU4zZQxZiR7sHDqCbwN1Voscu6HOAKD368Ss9rZoSTP0QuV9Q3GOkpYi4n6nld
04wtn48l14kc+FvfIcuiv29T+XJn168xHNIQ/eqZ6SMz5xfADy76dUV/n+I60v/f
7A/HQawNcCxbo10+Jf7RN2wpqb2cuL9OTK7tQJSEcWg5V2UNFoPrhz++oLwnhJI3
7r2TEMAA552x25K9vR19s00VH07ECe0=
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:06:28 2026 by rpki-client