Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa
File:                     ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa (raw, json)
Hash identifier:          kWKk2lrPL078sNZ1JGzQ1ZSG+IjAgYfd3FS1uKHzEJg=
Subject key identifier:   9E:61:48:CD:C3:EA:97:44:CA:22:A9:61:6C:7B:60:48:92:2F:85:53
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D7DEAC8D00BA55540B1C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        35.199.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:7d:ea:c8:d0:0b:a5:55:40:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=81c3c9cf-f2d3-4dca-b527-9d9f36e11c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:3e:52:f8:1d:af:a1:50:86:c7:44:54:2c:
                    13:cc:e3:60:65:75:0f:9a:ae:90:bb:99:bf:bd:79:
                    f3:3d:51:aa:9d:63:41:28:fa:e4:87:64:92:9d:2d:
                    18:ec:d2:16:56:dd:80:9c:80:ee:9d:8e:b0:35:c0:
                    a8:ec:b0:57:78:b3:89:f9:f4:b0:a4:a5:00:27:c5:
                    2e:de:7a:ad:4c:d6:f2:cc:19:cd:72:dd:ee:49:f6:
                    ef:1f:b6:c8:ee:74:53:16:1b:2e:de:12:25:3e:6b:
                    52:43:ae:a7:64:5b:bd:d8:9a:5f:c0:3a:c7:8a:e1:
                    09:72:8a:c6:e1:e7:56:c4:48:b2:21:74:67:4e:1f:
                    5b:44:20:36:3c:85:ca:de:09:66:b2:3b:66:d5:4b:
                    8b:ea:66:71:3d:52:ab:37:11:93:53:0c:62:6c:89:
                    df:d6:cf:af:3e:13:ae:45:5c:4e:bc:34:0a:80:46:
                    c7:b9:91:12:4e:c2:a2:57:84:8c:21:0f:53:1c:30:
                    ef:22:de:d9:1f:18:c3:1e:0f:d4:cf:53:1d:5e:b8:
                    7e:a1:2d:7b:5e:27:fb:e3:e5:45:81:7a:d6:aa:a8:
                    09:b8:ca:ea:43:71:a4:b1:24:ef:f8:21:39:f0:59:
                    d3:cc:a7:e8:56:d6:8e:7e:7d:2f:25:de:e2:12:43:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:61:48:CD:C3:EA:97:44:CA:22:A9:61:6C:7B:60:48:92:2F:85:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.199.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b9:48:96:63:33:81:64:37:71:09:76:9d:5e:1f:61:21:b5:
         c8:da:17:d0:4b:32:df:4c:d9:a9:08:97:a6:66:8b:75:a2:ad:
         ba:df:45:d4:fe:a4:40:d5:1a:2e:b9:15:8b:70:bd:d6:51:22:
         df:21:19:d4:b3:64:f5:3d:e4:3e:f1:a3:5d:18:26:74:05:1b:
         cc:8c:4e:a6:9e:c8:f3:97:04:9c:fc:b1:cb:44:ff:21:9b:d9:
         aa:c0:4e:28:06:ab:30:22:e2:50:70:07:e5:b4:7c:11:05:e5:
         b5:b9:c1:fd:8c:03:94:da:8b:2a:56:39:37:a9:51:34:f2:af:
         a7:fa:72:56:92:95:f0:09:99:b8:03:89:b0:12:69:42:95:16:
         dd:11:bc:1e:bc:10:4f:9a:60:86:b3:9b:d0:17:db:f3:68:d7:
         96:b8:08:9e:24:68:b0:fc:b3:63:5a:78:28:83:e0:49:15:86:
         9b:af:f7:3e:fb:34:14:60:82:b0:8a:c3:f4:52:05:0c:48:83:
         4f:57:47:27:f3:71:fb:0a:37:66:ce:4e:58:1b:38:d4:0f:df:
         76:4b:19:97:17:1e:39:01:64:c9:62:8f:32:be:5d:7e:61:4a:
         1f:a8:fb:5a:9f:ef:21:f7:59:89:41:d7:f8:32:d8:4d:57:3d:
         30:fc:cc:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPX3qyNALpVVAscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ODFjM2M5Y2YtZjJkMy00ZGNhLWI1MjctOWQ5ZjM2ZTExYzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY0+Uvgdr6FQhsdEVCwTzONgZXUPmq6Qu5m/
vXnzPVGqnWNBKPrkh2SSnS0Y7NIWVt2AnIDunY6wNcCo7LBXeLOJ+fSwpKUAJ8Uu
3nqtTNbyzBnNct3uSfbvH7bI7nRTFhsu3hIlPmtSQ66nZFu92JpfwDrHiuEJcorG
4edWxEiyIXRnTh9bRCA2PIXK3glmsjtm1UuL6mZxPVKrNxGTUwxibInf1s+vPhOu
RVxOvDQKgEbHuZESTsKiV4SMIQ9THDDvIt7ZHxjDHg/Uz1MdXrh+oS17Xif74+VF
gXrWqqgJuMrqQ3GksSTv+CE58FnTzKfoVtaOfn0vJd7iEkP90wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5hSM3D6pdEyiKpYWx7YEiSL4VTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2U3ZThlZjgtMDFmMS0z
NWM5LWIxMTktYmQxMzA2M2ZmOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8dAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE25SJZjM4FkN3EJdp1eH2EhtcjaF9BLMt9M2akIl6Zmi3WirbrfRdT+
pEDVGi65FYtwvdZRIt8hGdSzZPU95D7xo10YJnQFG8yMTqaeyPOXBJz8sctE/yGb
2arATigGqzAi4lBwB+W0fBEF5bW5wf2MA5TaiypWOTepUTTyr6f6claSlfAJmbgD
ibASaUKVFt0RvB68EE+aYIazm9AX2/No15a4CJ4kaLD8s2NaeCiD4EkVhpuv9z77
NBRggrCKw/RSBQxIg09XRyfzcfsKN2bOTlgbONQP33ZLGZcXHjkBZMlijzK+XX5h
Sh+o+1qf7yH3WYlB1/gy2E1XPTD8zN0=
-----END CERTIFICATE-----
Generated at Mon Sep 28 08:36:16 2026 by rpki-client