Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f1551ac-6dcc-35f9-a4fb-13753ea2f1b6.roa
File:                     1f1551ac-6dcc-35f9-a4fb-13753ea2f1b6.roa (raw, json)
Hash identifier:          9HPNsuW/zw322dfa/jgJd/cLhTHFAf1/haf9GHpcFFc=
Subject key identifier:   D8:33:1E:DB:11:C2:4F:E9:E2:17:EE:AD:DD:BB:A7:22:83:A1:CA:2E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67975BD1BFA43BC2ECF05CF0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f1551ac-6dcc-35f9-a4fb-13753ea2f1b6.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.203.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:5b:d1:bf:a4:3b:c2:ec:f0:5c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=1317050a-5c85-4903-b1bb-fb2c22b6d20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:49:bf:a9:fd:be:09:93:12:a6:23:9a:c3:
                    58:bd:77:03:38:0a:62:57:d8:66:bf:09:b3:9a:8f:
                    58:d9:2c:f6:91:7c:f0:44:23:7a:4c:a3:73:f1:61:
                    d3:bc:ee:07:e2:41:76:99:87:0b:e8:0e:05:ef:df:
                    40:30:5f:0e:13:c5:70:2b:66:af:88:2e:17:84:64:
                    ce:31:42:19:1e:93:24:3b:00:e3:bc:30:39:28:6a:
                    ec:53:b5:a0:91:f8:67:5c:82:74:7e:11:0a:a8:0d:
                    bb:91:83:d6:39:3d:6c:96:11:f1:e2:40:e9:63:dc:
                    27:cf:63:4f:a3:39:60:8f:68:e9:f8:7d:dd:a1:e7:
                    ef:55:0e:29:27:b5:fa:17:f2:a8:b6:1b:54:a8:7e:
                    1f:fa:c3:ad:db:15:45:e9:80:47:bc:84:67:c9:b6:
                    6f:d7:9e:be:80:aa:82:a8:27:e3:57:5b:4b:79:e9:
                    8b:d2:ab:05:8f:15:a8:ec:ee:53:9b:a8:00:31:72:
                    c5:0c:b4:db:6f:3d:69:47:b4:89:b3:08:91:f4:6b:
                    0f:60:c3:37:e6:6f:ea:58:56:73:69:0d:8f:c0:a2:
                    23:f4:3f:ba:08:d7:00:94:52:69:4e:35:94:ea:dd:
                    d8:a1:14:30:3b:80:5c:8b:73:4e:7e:12:d8:d1:b6:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:33:1E:DB:11:C2:4F:E9:E2:17:EE:AD:DD:BB:A7:22:83:A1:CA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f1551ac-6dcc-35f9-a4fb-13753ea2f1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ac:90:f0:63:9e:76:c8:3c:78:2a:fe:98:fc:5e:80:f2:a2:
         dd:c8:02:ed:42:5f:c0:a3:62:49:49:bd:2a:8f:e5:28:13:03:
         0c:16:eb:80:33:6b:2d:bc:48:f1:5d:ea:52:49:8b:0f:17:3c:
         22:63:4c:d1:25:7c:a5:6f:fd:a4:97:01:58:1e:b8:d8:a0:6e:
         a4:47:20:ec:bf:a0:f3:a2:3a:08:6d:84:40:e3:5c:61:0c:e0:
         22:40:0e:c0:a8:25:70:4a:fe:1d:87:f1:04:dc:ea:b4:64:5f:
         71:3c:02:5a:69:b4:08:cd:7b:b3:4e:ae:3d:a8:10:dc:eb:93:
         34:21:12:74:23:5e:d2:4a:25:d0:f8:91:35:c6:60:b9:a5:de:
         4d:a9:a5:81:c0:53:7e:ab:20:1c:02:f3:c4:da:b8:88:27:aa:
         c1:c5:bb:9a:a2:cf:09:d3:b0:9e:16:30:9a:1a:55:46:44:f5:
         46:e3:4a:05:ab:fa:d9:6c:cd:4f:c4:29:40:60:cb:bb:17:49:
         71:79:9d:f2:9d:fc:dc:ff:0a:1a:15:e6:c0:c4:1b:35:3e:5c:
         ad:e4:da:62:86:74:6e:5d:60:b1:d1:11:7b:b2:fc:27:7e:4b:
         73:84:e7:7b:9c:a6:7c:72:92:98:26:8e:f2:bc:4b:9b:3f:10:
         a5:16:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:30 2025 by rpki-client