Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa
File:                     cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa (raw, json)
Hash identifier:          KzTX0I5EV8kaHatFVRYuJJk2dpgtN+od9CSEp6C7xlQ=
Subject key identifier:   19:67:DA:13:22:34:7C:39:D1:04:AF:A2:BF:8D:EF:87:61:C7:F8:E8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51A30DE17F2F801B7F6680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        35.206.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:a3:0d:e1:7f:2f:80:1b:7f:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=d9d4caf6-b912-4366-8d22-929f18458ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:51:f4:df:2d:a7:28:d6:11:4c:41:1c:fa:
                    8a:27:18:68:7f:85:17:6b:e1:99:13:68:27:53:46:
                    65:f0:e5:11:b6:fd:46:32:ef:86:d4:f9:76:71:c8:
                    2c:10:4c:55:7c:18:08:1e:86:ef:47:d7:88:90:f3:
                    c8:ac:9a:c7:63:3f:99:30:10:1d:f4:ee:9b:86:8d:
                    fb:31:20:93:ef:1e:21:b1:81:05:b1:6f:80:95:4a:
                    8d:12:38:c4:ad:bc:d1:d0:48:13:ba:6d:0a:16:87:
                    bf:a5:02:fb:23:55:a6:4e:13:e9:c3:2d:f3:32:c9:
                    c8:7a:2d:d0:ad:93:2e:1f:b8:c9:54:cd:a2:f6:f5:
                    8f:f6:b2:40:90:d8:e3:f6:9a:9c:c3:3f:d1:7c:f0:
                    d7:d1:75:57:87:02:cf:21:62:db:ce:33:af:7f:21:
                    07:05:f1:bf:ff:53:95:3c:27:0d:25:e0:1d:b6:c5:
                    19:5d:50:44:f4:39:18:21:a1:6f:d4:01:e5:80:b4:
                    ec:1a:37:ee:44:1c:53:b3:49:4e:01:ea:ff:df:35:
                    1f:db:fd:13:2f:16:f4:52:db:98:01:8b:10:99:8f:
                    ed:0d:60:aa:ef:37:3f:3b:eb:25:a6:94:6b:4c:af:
                    96:17:9c:14:50:51:12:81:c6:6d:5d:57:67:e8:b2:
                    7c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:67:DA:13:22:34:7C:39:D1:04:AF:A2:BF:8D:EF:87:61:C7:F8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:45:2a:3c:22:76:b5:67:2a:1d:40:04:97:66:4a:df:d1:
         54:33:d5:fd:c3:c1:44:86:52:cb:c9:ac:07:d6:d6:c7:cf:62:
         8d:92:2c:5b:2b:c6:66:9c:0b:dc:f9:ad:35:ad:ad:e1:06:27:
         f7:a9:a6:6a:64:19:e9:84:12:a0:58:8c:c0:e7:c9:83:f8:c7:
         70:2a:21:d7:4f:2f:0c:09:bc:96:1d:25:53:ba:3c:fe:bc:1c:
         26:18:53:99:33:ea:63:38:89:ee:11:b3:d6:e1:52:08:77:b2:
         16:e9:bc:ce:31:48:0a:f6:c0:e2:6c:ee:c0:eb:36:43:2f:ac:
         08:d2:a9:34:14:71:91:af:a4:e3:ad:ca:0f:80:92:c0:ad:b9:
         f1:72:94:8a:bf:e0:9e:40:33:04:8d:a3:bf:ed:58:63:68:69:
         03:99:84:5a:13:3c:b9:5f:06:89:bf:f8:c2:2c:6f:ea:74:d9:
         8b:62:a0:81:68:b3:aa:ba:67:64:dd:ce:0f:21:d9:59:0f:53:
         3e:10:7e:1c:e0:f0:aa:8c:08:2b:01:01:93:35:08:e2:c4:45:
         d1:99:06:97:43:c6:d9:b9:04:95:00:ef:cc:bd:5f:7b:dd:09:
         17:99:d6:12:69:ff:62:9f:a8:63:28:08:5c:3f:a9:8a:05:61:
         e2:10:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:37 2026 by rpki-client