Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b9d98e-5a20-38ec-8922-03c1232b8568.roa
File:                     86b9d98e-5a20-38ec-8922-03c1232b8568.roa (raw, json)
Hash identifier:          MuvEk5ro99y+xmRYhLgYthDE/ZfpYcSv4kIM2mzIEtc=
Subject key identifier:   67:5C:BE:99:DB:B2:64:35:C6:09:FA:3E:AF:34:DF:FA:95:62:40:00
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B679758511F73F0E3A85483A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b9d98e-5a20-38ec-8922-03c1232b8568.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.236.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:58:51:1f:73:f0:e3:a8:54:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=13fcf5ee-69b5-4860-9203-3ae5e799e77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:93:cb:09:f2:4d:c0:a5:c8:0d:12:36:78:
                    44:11:96:03:9d:21:3d:f8:dc:27:96:57:71:b2:d2:
                    58:91:b5:54:af:67:17:b0:84:27:8f:a2:f3:d5:4f:
                    33:99:fb:15:ad:c5:40:26:25:03:10:80:15:ba:8d:
                    39:16:81:5a:9a:07:81:b0:5f:5f:f5:8d:82:8a:1e:
                    ce:ec:1a:ee:d1:80:f9:b3:0d:a2:2f:ea:83:67:0d:
                    9a:93:71:91:1b:e3:5e:e1:20:15:f0:a1:4e:5a:82:
                    1f:a2:4a:9b:c8:70:37:47:92:99:c8:16:96:30:83:
                    a7:f6:09:28:dc:dc:77:4a:43:00:3a:fa:8b:d1:f1:
                    9a:43:7c:d6:20:3f:74:18:61:17:6c:19:0d:08:52:
                    c1:c1:05:e4:95:86:91:c2:cb:7f:42:f5:8c:30:cd:
                    ff:5c:4b:55:92:a2:36:3a:bc:21:04:51:1d:1e:d1:
                    91:99:a8:d5:94:b0:be:64:fa:50:36:f7:3e:ac:b3:
                    dd:7b:68:8f:e5:6d:ee:d5:bd:16:a4:7d:ac:1e:07:
                    d2:fe:3b:a5:01:5e:fc:9f:2f:e8:3f:98:9f:a6:c9:
                    d9:7e:ba:8c:cd:35:66:4e:25:73:12:1f:ca:d0:93:
                    92:7c:a9:c5:10:e2:11:fd:0b:32:97:cd:14:f8:5b:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:BE:99:DB:B2:64:35:C6:09:FA:3E:AF:34:DF:FA:95:62:40:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b9d98e-5a20-38ec-8922-03c1232b8568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.236.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:c8:8d:43:51:15:10:4e:c1:c9:57:a2:71:7d:b9:52:a1:
         e7:97:42:33:63:ec:df:34:ec:54:21:ab:b0:f3:06:8b:fa:a2:
         6d:7a:b8:3f:4b:2c:da:61:eb:29:d6:a5:db:16:74:81:a8:d8:
         c0:72:8d:0f:9d:9f:83:d4:74:0d:a1:c4:a5:39:22:f1:c7:b0:
         78:4e:15:74:fe:57:45:78:16:c6:7c:7d:d9:e2:30:a5:c1:be:
         b3:8b:81:84:b9:33:09:42:62:9e:47:6e:69:9d:3b:ae:3a:77:
         71:1f:ec:05:d8:e7:c9:4d:11:81:0f:2c:b4:1a:f4:3b:e5:0b:
         99:c1:3f:47:d3:93:37:35:ec:7f:cd:f7:a8:5e:c0:64:66:c0:
         10:e0:7f:1b:00:fe:6d:9c:9a:d0:48:d8:21:3a:88:30:2f:68:
         09:9e:c8:bc:44:50:01:57:53:16:2a:31:67:e5:53:c5:2d:d4:
         ff:84:39:a5:3f:25:c7:de:ba:01:f6:80:8f:b8:40:58:6e:c5:
         23:2b:d0:06:da:72:09:9a:82:a9:f2:5e:44:1c:7e:6a:53:77:
         6e:ce:b7:b8:7f:dc:74:f3:f8:31:4f:26:12:d2:6a:35:77:ad:
         08:39:d2:b6:e4:99:13:c7:cb:e7:9f:15:26:e7:23:f9:ed:7e:
         8b:9b:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:04 2025 by rpki-client