Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa
File:                     fd3c689e-2c7d-3a88-b382-65c29503a941.roa (raw, json)
Hash identifier:          kjqLvx8vrhgyYEzYzbpXNKxt3C3BLWdmzSg3ZUlKUjE=
Subject key identifier:   99:EC:3D:3D:D5:57:30:38:D1:51:32:AA:74:21:27:78:28:72:55:76
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DC7EE4743F8FA2FB17620
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        35.238.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:c7:ee:47:43:f8:fa:2f:b1:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=afbc1248-bc2c-487f-8c69-d0a6d133a1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:8a:16:94:91:4f:db:a0:ee:57:88:04:30:
                    da:7d:61:1c:13:c4:66:0a:34:e9:e2:f0:19:ad:93:
                    86:b0:6b:94:62:0e:88:f0:42:6a:f3:bb:97:ec:38:
                    09:41:53:f3:24:48:c2:4a:84:ef:7f:82:c9:d1:b9:
                    21:9f:6d:74:dc:5e:4a:af:01:66:22:54:d0:3c:8d:
                    c4:61:c4:07:f4:6f:9a:07:33:70:2b:57:1e:19:da:
                    bf:23:f2:d1:cd:9f:ad:05:5c:9f:6c:ca:ba:f4:c0:
                    76:30:dd:ef:a8:66:80:19:5d:52:f4:84:27:26:1d:
                    a9:3b:af:cb:23:f8:0d:0f:13:91:db:e3:26:e3:87:
                    a4:da:0f:c4:f4:ce:a3:86:26:bb:d1:1c:47:e1:65:
                    95:00:f4:02:53:ca:a8:e7:d9:f3:3c:28:10:27:70:
                    f0:e7:c4:88:8b:4e:10:d6:5a:e0:b3:6c:97:a5:af:
                    10:2e:c7:bf:3f:b6:7a:2d:79:4a:a6:d7:9a:a1:24:
                    69:a7:af:c9:83:a7:bf:8d:fa:02:f3:24:69:83:35:
                    e7:e8:77:1d:f6:ff:57:c9:d1:6c:c6:d0:49:66:87:
                    17:42:34:d7:45:fc:64:64:a0:83:2f:78:0b:ba:2a:
                    58:3d:ba:c7:95:39:9a:29:bf:33:79:ff:f7:c9:73:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:3D:3D:D5:57:30:38:D1:51:32:AA:74:21:27:78:28:72:55:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.238.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:4c:bb:2a:5a:26:d5:81:fb:98:c3:e6:d3:7b:99:7a:00:
         ef:09:3e:64:c1:e5:2a:81:5b:ef:46:b2:00:89:0f:ad:07:54:
         f6:64:36:2a:6e:67:76:3d:31:cd:c9:c2:fc:c1:5a:69:2a:3d:
         2f:6c:4c:59:5d:b9:18:5f:2b:b7:dc:0b:0e:7b:9c:a3:e1:91:
         03:4a:f9:94:ad:d8:95:32:4d:6f:06:0a:4f:15:b9:b9:b8:89:
         0c:b4:ae:a9:53:11:a2:de:3f:fc:51:51:19:3c:07:f2:b0:2e:
         54:bf:a7:12:f9:b5:33:27:48:1e:a0:39:21:07:46:ed:9a:07:
         70:53:25:21:ee:c9:64:50:dd:01:da:4d:86:26:42:f8:d8:11:
         62:95:43:c4:ab:f3:38:dc:b4:d0:37:7f:dd:3b:94:18:c1:78:
         94:8b:8e:8c:2a:f1:c9:e4:69:c7:7a:b7:08:37:40:57:35:d2:
         06:ad:7a:c8:6a:46:5f:0f:46:f8:07:ef:18:8b:4b:d7:d8:af:
         ab:8b:53:52:42:36:28:6e:2f:af:cb:00:30:33:20:c5:c8:dc:
         7a:42:40:2c:c2:fe:05:d6:ee:58:55:ad:9b:9f:45:81:1c:ea:
         5e:19:ec:ae:64:bb:3b:9b:5b:6b:fc:67:ca:a4:70:03:a6:80:
         fb:78:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:41:24 2026 by rpki-client