Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa
File:                     68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa (raw, json)
Hash identifier:          n+a9996Fsx6zYi8ttqmUuNQndO8k9QekzWP+pF8HsdM=
Subject key identifier:   55:4D:74:59:9E:CE:4C:BB:6F:F3:93:33:9A:23:F2:79:1D:A2:2F:41
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D9C288DB7B8A0803FA180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     19527
IP address blocks:        35.206.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:9c:28:8d:b7:b8:a0:80:3f:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=6d2965eb-c30e-45c9-93cc-2b30425bd807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:51:dd:6f:7a:86:4a:76:38:36:09:27:6e:
                    b8:93:73:33:ee:5d:65:73:76:6b:29:5d:04:74:75:
                    05:4c:d5:7d:69:de:6c:d3:79:3f:83:92:78:b3:50:
                    3a:a0:ae:91:f7:f3:75:d6:6c:9a:71:70:00:76:0d:
                    b7:09:6d:45:ad:75:73:9e:fb:d3:7b:35:e4:2e:70:
                    ef:2b:51:0e:40:56:95:f5:b0:e0:5a:9e:9d:f6:ca:
                    8a:d7:c1:b5:19:70:a9:0e:02:76:98:8b:0e:14:23:
                    a2:e5:2c:27:d5:13:41:a8:78:78:b1:b2:be:b4:43:
                    9b:a5:54:e4:b6:6e:ab:3e:f0:35:95:09:7a:31:e7:
                    5f:a6:3c:ee:75:fa:f7:34:ef:30:08:aa:d8:b9:22:
                    75:75:2e:71:85:97:fa:85:de:85:25:3a:1b:e8:77:
                    2a:01:85:6a:c3:7f:9f:21:87:eb:7d:14:1a:30:ce:
                    7f:81:c5:62:37:99:02:53:db:9d:d7:b7:05:e8:7d:
                    09:7d:e5:fd:95:f6:78:86:2c:13:ac:4f:6e:c8:9b:
                    33:a0:77:62:da:f1:b1:62:b4:96:dc:7d:1c:27:77:
                    38:4a:80:f4:05:af:fb:09:59:9c:71:6c:41:55:1a:
                    39:41:60:8f:5d:bc:2a:f7:ec:f5:ab:02:9a:64:3c:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:74:59:9E:CE:4C:BB:6F:F3:93:33:9A:23:F2:79:1D:A2:2F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:2c:b9:7c:35:07:8a:fe:e0:c0:83:14:94:6d:c3:02:2f:
         a0:25:3f:3f:c5:ef:ca:07:d3:36:e0:62:e7:96:e6:7f:8f:e1:
         e4:f7:0c:8f:f6:cf:6c:30:4c:10:eb:e0:db:eb:ed:3c:0d:a6:
         f2:55:eb:e2:eb:0b:5c:8d:b0:ab:3e:18:41:63:7b:69:a9:48:
         45:9b:2e:ca:84:0a:3c:8a:7f:31:da:ae:41:fa:2f:42:35:e3:
         a6:ca:c6:e8:35:38:13:90:70:43:3b:1d:42:76:f1:f5:5f:a1:
         08:31:ec:d3:73:cc:d2:cf:63:6d:bc:02:8f:1c:b2:1e:2a:5b:
         18:8e:6c:27:16:39:b4:5a:c0:5e:d2:c4:53:17:b7:12:4a:36:
         32:48:f9:46:8b:52:32:22:b4:8a:10:8d:eb:83:65:43:71:05:
         b3:68:2e:a9:fc:aa:58:49:b5:57:5d:82:c0:b3:7b:81:7c:99:
         8f:49:06:48:36:c4:7c:55:37:8f:66:ac:22:00:92:76:20:b3:
         52:4a:a9:e7:cc:bd:04:79:94:59:5e:eb:61:b5:36:0a:55:3f:
         5d:01:48:47:9d:30:7e:19:a6:24:ae:cf:a2:e2:f8:fb:2b:31:
         1b:08:83:1e:fb:77:e5:43:77:a1:10:04:ae:bd:88:70:dc:46:
         74:44:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:51:19 2026 by rpki-client