Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c049d32d-f87e-33c6-8a01-2578b4d98820.roa
File:                     c049d32d-f87e-33c6-8a01-2578b4d98820.roa (raw, json)
Hash identifier:          owxO0S+866UqBWx0OdhY6pKwF/X5I42E4SpVz6JP/d0=
Subject key identifier:   C1:A7:EE:9F:80:B6:69:D0:BE:E1:63:8F:B8:E6:86:6E:13:21:FE:3D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51FABB8EC8C1B0E7B6D2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c049d32d-f87e-33c6-8a01-2578b4d98820.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        35.238.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:fa:bb:8e:c8:c1:b0:e7:b6:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=0be896e1-8e63-4cce-b73a-2690bc72fc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:bd:fd:d3:41:72:48:ce:a7:c4:77:80:70:
                    15:db:85:9e:7a:24:3c:f5:a2:8c:e2:45:f9:a0:29:
                    ea:28:e7:61:06:9a:93:91:fa:d9:0b:9b:fc:d2:d6:
                    02:66:d2:cb:d4:53:8b:c4:9d:5b:67:09:ae:cf:ec:
                    1c:97:1d:a0:45:aa:18:23:9c:22:95:e4:53:4e:e1:
                    be:0b:fd:74:61:4d:b4:49:ac:f1:2b:5d:74:bc:d9:
                    f3:71:ce:bc:42:4d:83:70:0f:5f:65:15:27:64:82:
                    cd:91:d8:16:39:86:a2:cc:cb:08:c5:fc:3a:c5:9e:
                    f6:c4:46:27:24:58:b2:be:c5:0d:e2:1f:a6:31:86:
                    67:60:db:bd:44:7f:a9:d4:3c:8b:7c:4b:57:2f:99:
                    19:8b:8c:a8:74:62:1e:ec:de:3a:7b:a1:67:29:35:
                    f4:bb:c1:d8:dd:ce:a5:b4:62:9d:f6:f3:a6:7c:c2:
                    b6:67:91:98:b7:96:4a:74:bc:0d:20:f2:05:c7:22:
                    21:cc:2c:87:cd:3e:a1:47:99:6d:c7:e9:c6:55:0c:
                    e9:25:a3:8e:5e:dc:ab:b9:96:1d:97:cf:d0:2e:d9:
                    a0:67:59:83:af:7a:81:bf:7f:c2:62:ae:49:60:ea:
                    e9:ef:75:f8:bb:30:f0:af:e3:da:7e:09:e1:28:98:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:EE:9F:80:B6:69:D0:BE:E1:63:8F:B8:E6:86:6E:13:21:FE:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c049d32d-f87e-33c6-8a01-2578b4d98820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.238.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:b8:9e:bf:27:03:97:4a:cf:96:5f:50:e5:c5:ed:6e:39:
         e8:de:d7:07:25:c2:85:42:3f:8e:ad:a0:ed:77:71:8c:67:ed:
         9f:84:6e:0e:aa:d9:3f:50:ea:83:47:dd:cb:e0:6e:d3:ef:e8:
         28:2f:de:5a:b4:76:68:fd:e9:c2:4a:6e:db:51:92:f5:4c:0f:
         50:45:d7:b4:b4:c1:b8:2d:b6:a7:b1:66:d4:75:f9:bb:b2:54:
         19:bc:a1:d1:3f:19:72:1a:6e:8b:74:3c:ce:fb:95:0d:2b:2d:
         c2:bc:07:5a:a4:81:4c:ee:49:64:a4:43:27:6e:b7:72:11:c1:
         bd:73:84:97:90:81:6b:65:e9:04:54:d3:1c:de:4b:68:0a:34:
         ff:46:19:97:60:fa:5b:a2:ce:59:2d:11:9b:be:7b:eb:a8:84:
         fe:2c:06:c6:b5:25:10:8e:9c:22:41:fc:f6:5d:1f:78:89:90:
         90:08:8d:6e:4d:10:28:81:97:8e:ee:0f:b3:44:d0:cb:36:f1:
         9a:01:96:0a:40:e1:ee:a9:66:e3:3e:66:03:f3:0b:81:63:ed:
         6a:11:6e:4b:aa:f2:ea:27:27:d4:a0:4f:19:c1:fe:cd:d6:b6:
         9e:65:21:02:38:17:8f:66:3f:c6:73:c6:15:26:aa:ab:4c:e5:
         69:e4:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:54:45 2026 by rpki-client