Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39907a3e-43de-3399-afdf-a74ff510c4dd.roa
File:                     39907a3e-43de-3399-afdf-a74ff510c4dd.roa (raw, json)
Hash identifier:          s99oLSAQnfpjW9LxnczhNWzjqkGSkO7Cb1vEeortAk0=
Subject key identifier:   48:A2:FA:21:66:D3:C4:84:AE:17:A8:43:E8:A0:DF:88:54:78:DE:B0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797E090775E07653A5CDC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39907a3e-43de-3399-afdf-a74ff510c4dd.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.193.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:e0:90:77:5e:07:65:3a:5c:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=f583b390-827c-4931-b2bf-0d200169f02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:a7:5a:e7:fb:1c:58:79:f3:75:7e:39:a9:
                    b1:86:5b:1d:c7:4d:ee:0f:42:3b:b5:c8:a6:91:0c:
                    67:75:23:83:5c:d9:09:e6:6a:20:d5:69:01:03:0d:
                    f8:b8:e7:b7:83:22:78:c7:79:1a:6e:81:af:bd:3c:
                    c5:19:fa:c8:01:e4:af:67:28:39:84:29:2a:80:18:
                    0b:2e:e4:96:f1:be:4f:20:0f:14:6b:6a:4b:09:f5:
                    1f:a0:70:03:5e:93:73:38:22:86:3f:4b:99:f4:9e:
                    23:33:78:7d:36:50:3a:61:c8:1e:e2:4f:ca:03:80:
                    9b:f6:84:cb:fe:ec:18:cf:b6:6d:c6:a3:40:95:03:
                    64:7a:31:78:4d:7f:1b:25:ca:a7:87:13:e3:f6:e4:
                    fa:b3:a5:2b:c7:9e:ac:82:a9:70:b1:d6:bb:cc:7d:
                    82:f2:ad:1c:f8:b0:8c:69:55:3e:82:f7:75:40:6e:
                    89:64:44:07:45:c1:23:22:3a:0f:c0:6e:3a:83:36:
                    6f:dd:00:06:58:46:93:4f:ac:90:f8:db:ab:a9:47:
                    0e:2e:df:99:3c:31:50:34:f1:e0:f0:e0:4f:f7:15:
                    fb:90:a6:83:9f:1b:4f:e5:31:20:8c:cb:21:a0:b7:
                    c9:73:6c:cb:f3:96:13:ac:3c:40:1d:c7:d3:86:57:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A2:FA:21:66:D3:C4:84:AE:17:A8:43:E8:A0:DF:88:54:78:DE:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39907a3e-43de-3399-afdf-a74ff510c4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:68:35:94:b4:86:36:b4:44:98:af:85:02:c4:89:16:af:
         15:a4:c8:33:cd:5d:0a:8a:15:1d:55:21:52:f9:b3:1e:79:74:
         4e:1d:fc:58:93:87:cf:b0:c6:1d:6d:15:2f:d4:48:f1:af:b7:
         3b:de:32:50:9e:dd:22:ea:ef:3b:ae:09:b5:c8:e7:e3:6b:e9:
         c3:06:aa:67:7b:33:be:4f:61:7f:6b:ab:ad:13:86:cb:72:77:
         7b:9a:a6:93:af:8c:61:be:4c:24:af:d4:23:03:c9:07:55:3e:
         5c:68:5b:93:7d:a2:10:61:51:a2:8a:33:96:14:90:92:7d:77:
         55:71:c3:de:fb:14:4f:ed:e0:1e:81:93:f4:8d:94:ce:ba:ce:
         62:67:f3:5e:cf:ca:25:b1:68:cd:c6:64:35:d3:0c:c3:e1:cf:
         43:13:02:29:78:4f:cb:8a:48:5f:e0:ac:35:05:fe:f4:d8:12:
         1d:db:a6:01:17:11:88:2f:c7:ac:f3:90:f7:e0:86:6d:cc:5d:
         e2:48:c0:b7:f9:79:5f:46:10:d0:2f:55:b0:e1:08:db:62:77:
         9a:3c:96:c4:b5:1a:75:32:bc:e2:67:17:00:09:d5:87:29:b5:
         35:88:ef:ea:9e:d3:5a:b7:92:8b:d1:a7:97:7b:9a:4c:d3:98:
         10:d8:d8:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+CQd14HZTpc3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZjU4M2IzOTAtODI3Yy00OTMxLWIyYmYtMGQyMDAxNjlmMDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXCnWuf7HFh583V+Oamxhlsdx03uD0I7tcim
kQxndSODXNkJ5mog1WkBAw34uOe3gyJ4x3kaboGvvTzFGfrIAeSvZyg5hCkqgBgL
LuSW8b5PIA8Ua2pLCfUfoHADXpNzOCKGP0uZ9J4jM3h9NlA6Ycge4k/KA4Cb9oTL
/uwYz7ZtxqNAlQNkejF4TX8bJcqnhxPj9uT6s6Urx56sgqlwsda7zH2C8q0c+LCM
aVU+gvd1QG6JZEQHRcEjIjoPwG46gzZv3QAGWEaTT6yQ+NurqUcOLt+ZPDFQNPHg
8OBP9xX7kKaDnxtP5TEgjMshoLfJc2zL85YTrDxAHcfThlf4CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEii+iFm08SErheoQ+ig34hUeN6wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzk5MDdhM2UtNDNkZS0z
Mzk5LWFmZGYtYTc0ZmY1MTBjNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8EgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfZaDWUtIY2tESYr4UCxIkWrxWkyDPNXQqKFR1VIVL5sx55dE4d/FiT
h8+wxh1tFS/USPGvtzveMlCe3SLq7zuuCbXI5+Nr6cMGqmd7M75PYX9rq60Thsty
d3uappOvjGG+TCSv1CMDyQdVPlxoW5N9ohBhUaKKM5YUkJJ9d1Vxw977FE/t4B6B
k/SNlM66zmJn817PyiWxaM3GZDXTDMPhz0MTAil4T8uKSF/grDUF/vTYEh3bpgEX
EYgvx6zzkPfghm3MXeJIwLf5eV9GENAvVbDhCNtid5o8lsS1GnUyvOJnFwAJ1Ycp
tTWI7+qe01q3kovRp5d7mkzTmBDY2A0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:36 2025 by rpki-client