Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01a9699b-10bb-38e4-8c7a-68a78c54a4aa.roa
File:                     01a9699b-10bb-38e4-8c7a-68a78c54a4aa.roa (raw, json)
Hash identifier:          EmwDzKB2SXiSOtoP0f8M8GUn6VnY82pgxCJD8LZamgk=
Subject key identifier:   B6:45:4C:64:50:7F:E2:17:6D:96:7A:32:12:95:62:D7:3C:E6:FB:A3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797C362DB2D1C6FDE7D6C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01a9699b-10bb-38e4-8c7a-68a78c54a4aa.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.203.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:c3:62:db:2d:1c:6f:de:7d:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=15671de5-5b9f-4ee9-aa63-bca9f21c1194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:25:4e:56:32:10:af:3f:c8:8b:92:83:0b:
                    13:46:af:73:f3:bb:a0:60:df:05:0c:7b:4c:e3:a1:
                    5e:84:12:89:42:5f:fb:33:ce:15:da:c0:33:4b:1f:
                    53:f8:0f:a9:58:56:9a:5c:e6:10:a5:b8:a2:b6:1a:
                    e1:81:54:ad:48:c8:32:86:c0:65:ef:f7:7e:f4:32:
                    ac:28:2b:9a:c8:e8:33:b8:f7:6e:b8:9c:d9:7f:20:
                    22:b5:6b:f0:7b:72:27:93:9d:0a:8c:d2:d4:08:4a:
                    40:b3:69:15:7e:98:7d:ab:0b:6b:16:41:ac:b2:99:
                    f8:74:b7:13:09:8e:11:36:0a:7a:72:6b:b9:4c:4f:
                    6d:73:9c:07:32:e2:d6:22:fe:ae:a1:f0:c9:65:83:
                    30:f1:f1:d9:9a:ab:61:71:f4:66:27:bb:9f:4e:bf:
                    e7:ef:f1:dc:bf:26:fb:73:9c:f4:5f:c7:2d:66:83:
                    78:43:59:c9:52:33:f8:42:2a:eb:10:27:8d:71:bf:
                    e4:d0:f1:c6:65:26:50:a0:c1:d1:29:f9:1e:7c:7d:
                    88:07:0f:d0:df:d5:4f:61:0a:e5:b7:a5:97:35:59:
                    f9:37:4b:b9:f5:3f:3a:0e:32:3b:b9:21:aa:ce:41:
                    6e:f2:21:da:28:8f:16:2f:54:15:20:ad:8c:74:09:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:45:4C:64:50:7F:E2:17:6D:96:7A:32:12:95:62:D7:3C:E6:FB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01a9699b-10bb-38e4-8c7a-68a78c54a4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f2:f5:6f:67:3c:6a:93:24:2f:d4:03:13:c8:59:ca:d7:d9:
         bd:15:f6:7f:7b:15:6d:4e:3b:01:5c:70:41:0f:b9:aa:63:68:
         06:c9:23:00:20:bd:6b:89:1c:b5:6c:4c:e5:7e:96:bb:6c:1e:
         1a:e2:74:7b:79:d3:e2:6a:89:f6:68:31:fc:1f:db:39:59:6d:
         1d:1a:5a:88:fc:c9:7c:8a:57:4a:60:9d:7f:37:b2:78:6e:85:
         94:c6:be:bb:12:f1:8e:85:3f:5a:4c:19:d6:5f:34:48:91:48:
         19:74:80:56:fe:eb:a0:1b:09:b7:fe:8a:2c:3b:68:19:a9:c5:
         73:95:86:72:37:01:66:46:05:35:22:f5:ad:49:b2:c0:e4:37:
         ab:f8:05:d4:86:ba:b9:e2:11:9d:82:86:8c:ea:58:42:3b:32:
         ee:c0:70:30:b4:cd:3d:9a:43:e4:d2:4a:f8:bf:fd:6e:f1:e9:
         42:15:78:98:1a:e4:a9:26:e8:52:85:95:98:f7:e1:f5:82:3f:
         c1:9f:2e:7f:53:97:ad:dc:ff:03:28:99:a4:75:7a:75:7a:4d:
         79:fa:fc:54:4b:5e:0b:99:0c:7d:1f:10:9a:04:5d:12:8f:6d:
         b5:31:6e:ca:1a:6b:4b:85:7d:d4:34:2b:a0:59:9a:c5:b0:02:
         75:20:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:51 2025 by rpki-client