Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7c1990a-a596-3d83-8059-b6ca0dac0357.roa
File:                     e7c1990a-a596-3d83-8059-b6ca0dac0357.roa (raw, json)
Hash identifier:          dRGy3sVIaN+12mzHuvrW/w47ak6tsJvRsQl3ARf+6do=
Subject key identifier:   A9:88:A7:24:58:D0:F6:0F:EF:90:C8:B2:2B:AE:99:AC:97:AF:7C:23
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DCD0C8C7F08CCE4A49E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7c1990a-a596-3d83-8059-b6ca0dac0357.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        35.228.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:cd:0c:8c:7f:08:cc:e4:a4:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=79d2fb19-be21-4dcc-a0aa-125b5c50c9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:32:b0:6c:f8:15:96:e7:77:e8:df:04:d9:
                    04:74:ea:61:35:99:39:3b:26:83:7e:8d:89:ec:e5:
                    50:fb:c2:38:d9:73:f1:08:80:9d:3b:34:15:95:52:
                    a6:38:b0:40:34:0e:96:64:1d:a7:9b:fc:56:09:29:
                    69:ba:a3:db:49:6d:59:54:ae:1a:8e:bc:db:b2:c8:
                    24:09:a4:74:a4:19:66:47:18:2e:20:4b:a6:a1:5d:
                    9a:a8:e3:ad:33:40:8a:b3:d6:af:3d:a5:da:04:7b:
                    7c:59:17:58:bb:92:42:6f:2b:b6:2c:ae:b2:66:ab:
                    72:26:6a:ed:52:7f:33:b5:dd:27:d2:80:7c:6f:cc:
                    00:4c:78:18:6e:ab:9f:8a:2a:6a:f2:9d:2e:88:21:
                    01:28:e7:27:a8:ae:72:43:b1:e6:e1:84:05:fe:24:
                    d1:11:7c:8b:b5:44:c5:76:9b:a9:84:05:b0:f3:43:
                    81:29:76:23:71:ea:f1:99:3f:6b:8a:bf:09:96:65:
                    90:39:45:70:f4:08:71:fc:07:00:06:2a:53:f7:1a:
                    98:ef:f2:99:9a:f6:2d:08:28:d9:c1:9b:52:bf:d5:
                    ad:1b:85:18:a3:d0:26:ad:43:b8:b2:11:1e:2b:64:
                    66:1a:c7:f0:cf:b3:af:55:ee:6b:85:15:75:01:c3:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:A7:24:58:D0:F6:0F:EF:90:C8:B2:2B:AE:99:AC:97:AF:7C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7c1990a-a596-3d83-8059-b6ca0dac0357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.228.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:06:0a:a5:de:ee:3e:0b:52:d9:e2:34:6f:b6:47:58:15:45:
         00:7b:aa:30:d0:b3:c0:ec:c8:ff:02:22:ca:e2:04:b4:fc:74:
         35:3e:f5:54:0c:bc:45:3a:25:9b:72:c7:51:18:af:20:94:50:
         22:40:38:f7:78:2e:2e:76:3b:de:81:cc:63:a3:c8:d5:13:d0:
         51:de:fe:8f:df:2f:13:23:94:d8:dd:16:53:73:0e:98:a7:bb:
         e5:62:23:4d:65:15:0c:38:0e:d6:3f:63:9b:1b:bf:8e:36:8d:
         af:04:f6:22:0c:38:45:a8:2a:85:f9:f7:08:f4:2c:64:fc:5c:
         fc:16:9f:0e:a7:44:81:51:e6:30:a4:32:cb:5f:c6:dc:0d:91:
         a3:99:da:ed:60:9e:ab:22:34:75:5e:ee:a6:b3:89:4a:5c:58:
         0b:9f:b6:64:6c:40:12:b5:b7:60:2c:61:ef:1c:29:0b:a7:36:
         43:f5:b0:00:43:32:5b:a7:3c:51:44:a6:f2:54:45:45:b7:9e:
         d9:99:07:30:40:51:a9:da:64:3d:f8:11:a0:f9:d9:f6:b7:dd:
         c8:62:75:8f:0e:13:b8:80:b4:63:e5:0e:b8:e5:cc:66:23:b1:
         3e:4d:42:44:60:32:fb:69:70:15:24:e7:48:95:93:e6:81:e6:
         ea:b0:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:30:08 2026 by rpki-client