Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa
File:                     9990b039-2437-3800-aa8d-3f9667410b0e.roa (raw, json)
Hash identifier:          KRL2x5FIzbo9Rb0AXR5Vz027FaNltXhDSGuFB/wkdDA=
Subject key identifier:   01:50:1F:AF:BE:7F:CA:5F:5F:96:02:82:6B:0A:52:03:F7:0B:B3:2E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797D358AC128E399EDE6F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.223.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:d3:58:ac:12:8e:39:9e:de:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=e04e6eeb-00af-4c07-891e-32ad1fab01eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:36:e1:d9:f8:97:fc:91:16:81:ab:15:04:
                    fa:c4:9f:0c:dc:a6:20:81:bd:3c:fc:31:db:07:99:
                    c5:83:fa:d1:40:b8:1a:24:de:49:ba:36:1e:57:47:
                    8b:80:93:e1:ef:39:64:d5:14:a1:3f:12:21:a7:f3:
                    3c:7a:3d:aa:85:9f:70:01:bd:9a:5c:10:f7:8c:b9:
                    9d:ed:9b:17:c6:7c:ff:0f:8e:f4:31:da:f1:34:68:
                    92:21:26:7c:86:b1:1e:ba:b8:d9:8e:09:9d:5f:4b:
                    59:29:93:22:fa:9d:d5:e8:d6:fa:9a:c1:7c:f5:a3:
                    6b:92:8b:b3:5a:84:98:b3:65:19:8d:c2:87:89:60:
                    1f:2d:f3:85:c4:43:2d:32:9b:c2:05:dd:2d:9d:1a:
                    2a:4f:fc:6a:32:b1:10:e0:ef:e5:69:78:64:53:93:
                    35:38:d4:04:d3:fb:61:ff:b2:61:54:eb:83:b1:12:
                    f9:be:f5:d4:5e:c6:2c:6f:05:93:08:8f:35:42:dd:
                    7f:d5:02:31:7a:7d:58:03:51:e1:4f:5a:55:4f:95:
                    0f:ee:12:00:ee:a3:98:6d:f2:f9:a6:b0:16:ae:9c:
                    91:4a:9b:17:10:13:56:ce:ab:80:4f:56:cf:17:61:
                    e2:bb:a7:58:ce:5b:2f:af:a0:f7:82:be:55:5a:e8:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:50:1F:AF:BE:7F:CA:5F:5F:96:02:82:6B:0A:52:03:F7:0B:B3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:2e:67:36:68:b1:52:5f:f3:bc:95:79:68:d5:60:65:1a:
         80:f4:90:25:e3:d7:93:2b:59:48:92:62:ae:74:4c:81:63:89:
         a9:56:79:af:40:eb:4c:10:e7:da:6a:ff:8e:e1:a1:16:ae:ea:
         58:ec:84:6e:2d:ad:40:8c:59:31:d6:66:1c:e6:52:13:9c:4e:
         f5:f5:ac:f7:04:e4:c7:59:60:36:f9:01:35:b4:7a:ba:ea:de:
         6f:96:f1:ef:5f:1b:7a:cf:f9:28:b1:4e:fa:37:d3:36:53:d1:
         c2:35:e2:87:e2:6f:64:26:3b:a1:c4:26:21:91:3f:b9:d5:e1:
         6e:99:a7:ed:4e:a7:f2:78:82:f1:8d:5a:18:a0:7c:b9:3d:9b:
         7e:c2:4e:5f:f9:0b:55:40:07:41:2c:13:ba:7a:b7:41:90:06:
         26:86:1a:a8:30:b3:76:f6:17:dd:86:34:dd:05:0c:4a:7d:33:
         76:76:89:ab:6e:85:2f:3d:95:d0:8b:58:e4:c5:fb:d6:79:a6:
         f5:4d:f2:ad:5f:d6:cf:60:91:af:b7:4d:cc:17:64:e3:c2:3f:
         12:a4:e1:74:3b:55:da:09:ba:24:d1:b3:8c:03:85:95:1e:02:
         b4:36:d0:b6:08:e8:96:fd:5c:b0:64:e0:91:bf:f4:04:57:85:
         d7:85:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:38 2025 by rpki-client