Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c90fc597-6b81-3527-88f6-dc93812835bf.roa
File:                     c90fc597-6b81-3527-88f6-dc93812835bf.roa (raw, json)
Hash identifier:          yPPaFwv6gr4BcrFxv7dyNysowW1owmZYQofgKreKHgg=
Subject key identifier:   FC:08:75:00:CE:2A:CA:8C:AD:AA:CF:0D:6B:FE:DF:11:AD:9D:73:25
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D7F05BD83177F4F6358C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c90fc597-6b81-3527-88f6-dc93812835bf.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        35.206.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:7f:05:bd:83:17:7f:4f:63:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=d527f172-c298-4883-8cf4-8076ffc50bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:e1:52:c3:22:05:62:6f:57:70:17:da:59:
                    a5:50:e2:c7:45:18:aa:c6:e2:62:6b:c3:19:4a:f9:
                    fc:1d:0d:99:21:a1:95:9f:ba:82:32:85:52:ea:08:
                    d9:cc:d3:e1:49:ce:16:65:50:01:84:ec:ef:b0:48:
                    9d:8b:49:09:86:d2:04:86:91:79:4c:13:1b:d3:18:
                    3e:7c:96:7c:e1:fc:5d:8f:03:09:c7:ee:98:6f:9d:
                    c4:e9:8e:8b:9a:95:9d:b1:3f:ef:2a:1d:e6:3b:24:
                    69:f8:c5:e4:d5:52:20:37:ec:5d:0a:ca:7e:c7:3a:
                    57:e5:95:34:80:5c:fb:8f:c3:89:49:c0:30:0b:11:
                    89:53:3e:b2:ea:96:25:45:cb:6a:ae:42:06:e8:84:
                    55:8b:42:f7:ba:5a:05:99:e3:a4:83:b0:50:49:27:
                    03:5f:e1:d8:75:10:8b:2e:8f:36:3b:b9:30:f0:be:
                    2c:0d:ba:68:6b:1b:a4:e7:a1:31:5f:d6:87:3c:20:
                    37:78:eb:20:28:de:ae:bf:1d:83:0e:c0:31:d5:21:
                    ea:5f:dc:63:e5:1a:49:57:7f:0b:f5:2e:65:a0:bc:
                    74:8c:0a:91:65:64:2d:35:96:5e:db:c4:99:12:44:
                    c1:71:ce:fd:27:a1:c9:90:3d:ee:39:0d:8f:de:fe:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:08:75:00:CE:2A:CA:8C:AD:AA:CF:0D:6B:FE:DF:11:AD:9D:73:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c90fc597-6b81-3527-88f6-dc93812835bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:63:98:34:ed:5c:26:e9:77:95:48:10:21:1c:3e:48:fe:44:
         8c:e0:0b:b4:0d:4e:0c:a0:96:21:71:0d:6b:af:0b:aa:0e:91:
         4f:45:70:12:9c:63:db:1f:d3:e7:fe:65:78:d3:a0:c0:bb:0f:
         43:b2:c1:aa:09:88:d2:75:4a:ad:e1:b3:43:5b:bd:ae:5c:29:
         b6:64:f5:0d:63:bf:ff:7e:8b:e6:ec:6b:91:0a:12:c9:88:63:
         21:f6:53:e4:eb:ca:61:b9:50:4f:e8:53:79:d6:b9:57:d1:6b:
         2b:2e:67:64:52:bb:f7:04:5b:c7:44:e2:27:78:43:b3:a0:1e:
         da:2c:ec:62:91:a2:a0:a0:46:e1:71:09:a5:7d:ec:d4:87:16:
         21:94:4f:95:a5:22:5e:35:92:db:73:6b:b2:28:ea:b6:cf:f1:
         56:7b:fe:52:e9:bb:e6:35:ef:9f:49:6e:fc:2f:67:74:d3:7e:
         63:23:7c:c2:66:a0:96:4c:ee:25:76:6c:30:5e:f5:e4:83:5a:
         09:01:4e:5f:5a:54:da:45:cf:3a:4f:08:d9:d4:18:2e:70:a9:
         94:7a:a0:0a:46:a1:af:87:99:c8:29:dc:73:4f:1e:7b:a7:d3:
         e5:ed:34:72:53:ce:34:dc:83:47:a2:75:cc:50:98:6e:53:77:
         af:a9:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:52:39 2026 by rpki-client