Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/140fabff-0a7c-30d3-975a-416a414e610a.roa
File:                     140fabff-0a7c-30d3-975a-416a414e610a.roa (raw, json)
Hash identifier:          iY4HkYiCO/QXrpSQJzOaLiMxibNAURGCExGWK7Pe5xc=
Subject key identifier:   E5:81:51:A2:F0:B5:73:1C:DC:31:41:C5:94:04:C8:4C:0E:63:C1:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67975E7D6000E21A766A2700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/140fabff-0a7c-30d3-975a-416a414e610a.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.222.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:5e:7d:60:00:e2:1a:76:6a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=5bc9ec89-dd92-46a4-a14d-0f905c5bb511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:96:75:31:f6:b7:1b:09:d2:93:94:01:0c:
                    34:c6:d0:a3:40:af:86:87:dd:cd:63:be:55:22:cf:
                    1a:a8:40:1a:9f:84:fb:a9:21:b3:e7:0a:00:30:40:
                    bc:ec:04:48:e4:64:13:b1:73:5e:2f:89:c0:c5:20:
                    b3:83:6f:78:e1:ee:0d:50:5a:8e:32:8e:79:d7:17:
                    12:a1:e9:cb:92:00:a2:45:ca:6b:a8:e4:c6:24:84:
                    ad:4b:97:8b:74:9e:fe:85:0e:b4:7c:04:d5:13:36:
                    b3:d9:ee:49:c9:54:77:32:1b:85:8a:d6:10:08:52:
                    6c:b3:56:52:d7:5e:dc:8a:14:d9:38:c9:85:95:c8:
                    34:59:9f:57:bc:2f:c3:b6:32:c7:2e:55:58:e4:28:
                    56:61:f8:d4:ba:7d:47:0b:46:f3:fa:e5:14:c8:ac:
                    16:5b:3d:86:ca:a0:b2:a8:87:de:ed:66:f5:1b:49:
                    7d:2c:bc:80:74:1e:51:e5:e5:74:f0:c8:8b:c0:0d:
                    20:49:15:a3:45:66:bd:e7:2a:3a:75:a7:40:29:1d:
                    86:eb:84:ca:0e:8d:9e:e0:57:fb:08:99:fa:16:e3:
                    74:43:0d:4f:52:3c:9e:35:33:68:e2:ec:c5:65:bd:
                    68:d3:84:3a:a0:34:71:99:70:f4:c4:10:cc:1b:b6:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:81:51:A2:F0:B5:73:1C:DC:31:41:C5:94:04:C8:4C:0E:63:C1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/140fabff-0a7c-30d3-975a-416a414e610a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.222.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:c8:ec:24:49:aa:54:9f:54:16:b9:47:e4:14:59:ae:14:
         24:23:76:0b:f2:ab:a3:2c:08:97:a8:91:10:f7:31:a2:24:32:
         49:a7:53:f9:82:17:1a:69:65:ad:63:c4:84:0b:91:1e:97:9c:
         77:c8:6e:8e:ce:19:5b:66:99:ae:ac:b5:5d:56:c4:3b:e9:96:
         61:19:e1:27:21:2f:7b:a6:5e:1d:ea:ee:d4:26:31:f0:3e:ec:
         00:74:8e:10:9f:da:bf:35:5e:68:be:66:74:14:83:37:2a:46:
         13:3b:b6:84:cc:6f:36:f8:62:04:ca:2c:bb:bf:5a:04:2b:6d:
         f4:aa:59:fa:dd:15:ce:c5:14:6f:e8:5d:af:62:93:00:1f:7b:
         a1:09:c9:cc:7c:ba:11:dc:bc:f9:33:5c:2b:a6:67:54:fd:c0:
         a7:ec:84:a2:b1:0d:b8:71:50:c0:64:bd:a9:7f:f8:37:9e:b6:
         8e:70:3b:4d:1b:4f:6f:59:6d:73:03:a7:5b:04:c9:62:d9:8b:
         d0:98:d2:b5:d9:4f:bb:09:49:f2:fb:78:47:8d:62:d2:2a:79:
         06:98:48:a9:41:01:1a:b3:c3:1d:f3:84:cf:29:28:fb:30:cf:
         00:3c:51:c8:a0:59:97:aa:e3:98:b6:1f:91:ad:d4:58:be:e5:
         0f:98:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:50 2025 by rpki-client