Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c21379f3-cd0b-3be3-b370-ecba0d74e37f.roa
File:                     c21379f3-cd0b-3be3-b370-ecba0d74e37f.roa (raw, json)
Hash identifier:          lYQJlAzMN9i32J9FNWSwjxnTkP5chxB5AlpPq61hFvA=
Subject key identifier:   E8:A8:A2:FD:F3:EE:34:E5:4B:E1:E0:07:E4:17:3F:81:58:A3:0A:87
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B9EEF32EAF348410C3F8FFCE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c21379f3-cd0b-3be3-b370-ecba0d74e37f.roa
Signing time:             Thu 23 Oct 2025 20:47:23 +0000
ROA not before:           Thu 23 Oct 2025 20:47:23 +0000
ROA not after:            Wed 21 Jan 2026 21:47:23 +0000
asID:                     15169
IP address blocks:        35.212.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:ef:32:ea:f3:48:41:0c:3f:8f:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 23 20:47:23 2025 GMT
            Not After : Jan 21 21:47:23 2026 GMT
        Subject: CN=446e7796-12e6-4258-92ef-de67fafd63ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:35:73:a7:45:21:21:e7:3b:7a:68:ed:a0:
                    ec:c7:0e:e7:f4:35:01:81:fa:dc:89:c0:51:7f:31:
                    dc:0b:0b:49:21:ef:63:0c:54:54:e3:75:1c:c0:d1:
                    f0:ca:f4:25:68:2c:7f:2a:a1:02:c7:c8:21:75:5e:
                    b3:14:68:e1:51:82:df:e9:3c:6d:94:48:dc:b4:1b:
                    3b:a9:c4:45:c1:35:ae:f0:1e:bd:ca:d4:0d:a4:b4:
                    f5:0d:65:a0:6f:a6:5e:ba:41:b8:ab:77:07:a6:7a:
                    11:3a:78:dc:72:2f:24:4e:4b:88:05:d1:e5:ab:ce:
                    be:7d:c1:d3:04:11:73:59:9b:30:e1:3f:67:48:f2:
                    a1:f9:f9:f4:58:ff:a8:d3:18:02:9f:eb:27:26:bb:
                    8a:a5:9d:46:07:5f:a0:3b:87:2c:2a:27:c6:45:47:
                    9c:5b:43:61:f5:13:f3:a7:36:e2:f1:a1:77:c7:cb:
                    99:3e:82:d3:dc:df:df:39:4b:8d:bd:17:9b:8f:a8:
                    b1:50:6d:4f:1d:1c:bd:2c:5f:a4:99:37:fc:8a:69:
                    d2:86:60:ff:4a:ef:fc:4d:f7:26:98:2c:7c:d9:86:
                    df:b0:bc:41:9c:a0:64:e6:8a:1c:95:a3:1e:97:3c:
                    6a:98:f0:95:fc:a0:c2:2d:ce:56:00:9e:1d:b9:8e:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A8:A2:FD:F3:EE:34:E5:4B:E1:E0:07:E4:17:3F:81:58:A3:0A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c21379f3-cd0b-3be3-b370-ecba0d74e37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.212.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:5d:83:46:43:b2:a3:73:cf:18:f0:bd:f3:5a:49:71:5c:
         ce:31:0b:f5:a3:dd:e4:50:a1:bf:9b:b5:8d:19:0a:6c:44:93:
         63:05:e9:0e:73:38:43:18:8c:ad:22:f9:d7:16:c4:f1:55:79:
         1f:ea:00:20:ca:f8:99:46:be:03:a7:fb:e2:3b:b8:61:90:b3:
         d5:57:c5:62:73:fc:46:c0:88:c2:74:9a:b4:41:a2:f4:dc:96:
         f9:2c:ba:d6:0a:e4:e8:33:a7:97:4d:7d:b6:47:c9:6a:83:a6:
         c2:95:5b:26:75:ab:42:d5:46:29:b0:ce:c9:4a:05:59:c0:5f:
         7e:de:04:1f:ad:27:1c:84:41:88:86:ab:9f:67:bf:46:a6:ca:
         eb:62:22:f5:ce:a0:2a:50:ee:f2:c6:6f:9e:15:34:a7:7d:71:
         db:08:0b:44:77:c8:5a:a2:88:db:d6:46:bb:22:c8:e7:d2:b9:
         56:b7:53:a3:85:c6:67:4e:1f:39:40:f9:ed:af:9b:59:53:a0:
         c9:8d:52:ea:b6:87:1b:59:88:13:fc:88:b1:d6:8c:1a:e0:22:
         29:6b:70:bc:15:f4:5f:95:9b:1e:f9:b4:37:53:4e:fc:55:24:
         01:30:5c:7b:64:ed:41:06:91:5b:4f:98:56:89:26:60:d1:e6:
         9b:4f:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:25 2025 by rpki-client