Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb34b962-bffb-3a60-9201-038e617d45fb.roa
File:                     fb34b962-bffb-3a60-9201-038e617d45fb.roa (raw, json)
Hash identifier:          SwfBjmtF1elh9UkoxUhAGp/VvxJQWgjzxIjajmyWs5U=
Subject key identifier:   8B:1B:D8:08:D3:74:98:E4:CC:26:4D:78:18:FC:14:9D:BB:FD:97:D4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DCD44F53B6E254EC32100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb34b962-bffb-3a60-9201-038e617d45fb.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        35.213.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:cd:44:f5:3b:6e:25:4e:c3:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=82dec292-7696-42b4-a7a8-d7801a3f19d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:46:6c:ad:72:5d:ff:77:24:d8:0d:62:fe:
                    0f:0f:ad:ba:88:1f:d5:6a:cf:ec:54:57:3f:66:da:
                    16:f5:47:5b:0e:c1:86:36:cd:7d:8f:2f:93:12:f7:
                    01:c1:c5:9b:38:56:b6:38:7d:ab:82:43:b1:b4:f1:
                    45:d4:34:3d:c3:e4:cb:03:26:29:bd:1f:61:6d:0a:
                    3e:81:f2:e3:7f:79:f0:76:e1:e5:46:cd:c1:85:76:
                    74:a1:01:23:ac:f0:03:ea:31:7a:3c:a1:98:d3:d0:
                    24:8b:3e:de:92:b6:21:75:fc:e7:7c:92:6e:00:7f:
                    0d:ee:cf:cc:e1:fe:0d:89:e5:4c:f0:69:d3:c8:6f:
                    ca:97:90:e1:54:11:bb:2c:71:31:6f:2f:9c:2c:03:
                    c2:67:22:82:69:0c:bb:07:d1:f5:6e:0e:6d:21:a2:
                    f9:3e:3d:c8:de:26:87:3b:58:6c:f4:92:2e:03:85:
                    65:b2:b0:f5:a2:3f:e8:2b:fc:6d:62:f1:33:bc:20:
                    30:2e:be:cc:e6:70:cc:4c:f4:fc:ba:e6:7a:69:b5:
                    fb:c0:8f:9c:45:d4:78:70:81:a7:00:03:8d:aa:4d:
                    05:71:55:43:86:a2:2c:07:09:49:f1:24:3c:19:2f:
                    ff:16:6c:03:65:a6:52:10:70:fb:71:15:08:96:e3:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:D8:08:D3:74:98:E4:CC:26:4D:78:18:FC:14:9D:BB:FD:97:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb34b962-bffb-3a60-9201-038e617d45fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.213.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:9f:9f:75:a7:fd:83:00:e7:3a:9e:bc:ff:83:0a:09:7e:
         41:38:17:2a:89:64:3b:5d:33:fd:76:8d:a5:be:25:8b:f5:45:
         18:51:ed:69:c3:6d:d5:db:6e:68:b8:c7:e1:5a:92:61:a7:44:
         b6:c6:41:13:6f:1e:1d:ee:3b:c6:d8:4f:4b:b3:4b:ca:c5:fb:
         02:f5:1e:1d:3d:e7:be:83:1b:8c:51:05:9d:9f:27:88:e6:be:
         ef:67:6a:ae:e2:6f:54:27:6c:3f:26:5a:b9:1a:cd:f7:4a:38:
         d8:7d:eb:c2:4a:b9:96:13:a3:f5:e8:91:64:c3:2c:f5:b5:29:
         14:61:7d:fb:9b:b6:f5:6b:ff:75:77:54:69:19:9a:d9:bf:98:
         d5:5b:b7:dc:b4:74:57:a9:27:b6:13:ee:a8:eb:aa:49:97:a0:
         7f:59:79:43:80:13:cd:b7:5f:4a:32:06:31:cc:8b:a2:94:62:
         56:67:75:ac:af:59:bf:24:60:f7:36:04:85:c4:07:ba:55:bb:
         61:ca:43:49:4e:5a:a5:af:08:dd:cd:87:e7:60:e6:67:88:ec:
         37:48:43:37:02:89:77:dc:0f:9b:ab:91:25:78:3b:44:79:30:
         23:c0:97:e6:7a:77:7f:77:50:b2:24:ea:9f:d9:84:ac:c8:db:
         bf:f2:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:49:46 2026 by rpki-client