Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
File:                     884763ea-5eee-3437-a700-182a36503d81.roa (raw, json)
Hash identifier:          JNX8zLfKSfIL8Dx/QUm5yp6Do/PnSMfBgoLZ5I+figM=
Subject key identifier:   13:7F:1E:8B:EC:6C:EE:F8:F5:83:D8:6C:79:69:64:F2:0B:16:34:32
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B3987017F43694CDD5BDD9A80
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     36375
IP address blocks:        35.7.64.0/19 maxlen: 19
                          35.7.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:01:7f:43:69:4c:dd:5b:dd:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=f82ed803-3d26-4625-85c1-97b0966d47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:b2:b4:ca:0e:a9:57:c8:d4:a4:7e:f6:fb:
                    18:73:e4:7a:6f:b9:3d:ac:5f:b0:b7:75:fd:42:1f:
                    b1:1c:af:a5:85:f2:f0:fd:15:28:98:6d:e0:85:e9:
                    fd:08:b8:c3:f9:12:96:3f:71:15:90:94:b1:84:f6:
                    9e:0f:11:c2:96:ec:af:70:80:87:df:8e:2b:03:10:
                    67:8f:ea:f8:0f:17:6f:b8:e6:72:1f:22:c6:83:f5:
                    2f:e4:01:33:30:5e:e7:c2:c1:90:09:cb:80:a9:31:
                    44:23:81:a7:4e:36:87:27:15:55:c9:b1:57:af:a6:
                    ff:44:9c:1e:26:88:3a:0b:07:72:98:a3:0e:3b:97:
                    b1:64:12:a3:c2:84:56:de:5d:54:8e:53:ef:e3:9e:
                    8d:da:e7:69:f6:91:a1:70:af:de:a1:7f:3f:d5:a8:
                    60:3f:dc:67:3e:ad:0e:75:0c:b2:f6:ca:a6:85:fb:
                    66:d2:ae:d5:3b:a3:94:28:88:a7:d9:72:b4:44:3d:
                    79:03:3f:72:0c:45:bb:90:0e:03:5c:63:d5:cf:39:
                    4b:b4:d6:bf:aa:73:5c:ad:dc:16:fc:a6:70:40:b1:
                    e2:f7:43:60:f3:be:9a:76:d9:d3:3d:02:f4:cb:41:
                    bd:0b:72:e6:d9:8c:9a:26:f7:26:56:71:c0:a9:72:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:1E:8B:EC:6C:EE:F8:F5:83:D8:6C:79:69:64:F2:0B:16:34:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.64.0-35.7.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:42:6e:21:59:e1:67:62:23:ce:01:8a:9e:d0:41:a8:39:
         94:92:18:90:0b:3c:3d:99:ce:77:47:0d:6b:16:6e:d5:ee:00:
         f2:db:64:d4:e7:2c:4a:de:29:98:b9:c4:fa:7a:eb:8e:e0:21:
         ae:94:3e:b9:37:a0:b4:4c:51:a3:65:c7:92:60:0a:76:fc:11:
         20:e1:6c:0f:00:33:f0:52:1d:fe:63:e4:2b:72:78:94:ea:b7:
         42:64:dd:53:cc:f7:91:25:2a:c0:b8:41:1a:e2:e1:4c:6b:45:
         25:32:a4:18:63:a2:9f:09:98:14:23:57:c7:7d:01:ae:8a:77:
         d0:6b:5f:52:5f:e2:3c:1c:a0:7a:9e:a4:99:dd:55:16:f5:99:
         a2:72:17:25:6e:e5:26:72:c2:10:15:5b:ff:ef:59:a3:82:76:
         23:5a:e4:7c:e2:dd:55:07:1f:57:51:84:a2:20:b2:e9:15:8c:
         7a:ad:18:87:ee:47:5b:96:57:27:40:ca:a0:0f:13:92:14:67:
         4c:1c:34:5f:f9:74:d8:e4:23:07:35:4a:c8:ef:ba:0d:f0:3e:
         de:f3:52:dc:57:d9:f3:db:18:77:71:b3:bc:af:dc:92:df:72:
         32:d0:cc:e8:aa:df:b2:55:8b:7f:79:48:da:56:b5:59:f3:52:
         56:e9:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:59 2025 by rpki-client