Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f3c76d0-86a3-345a-a9c8-3793931c9b23.roa
File:                     9f3c76d0-86a3-345a-a9c8-3793931c9b23.roa (raw, json)
Hash identifier:          x84KqAdbfqKySSZOTBJSfG1PnRqgN/QOoTnWxI15EN8=
Subject key identifier:   B7:2E:EB:2C:08:7E:A6:28:87:C7:0A:B9:FA:4B:14:65:07:C8:71:1E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797E2E3B1BADCD036222100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f3c76d0-86a3-345a-a9c8-3793931c9b23.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.227.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:e2:e3:b1:ba:dc:d0:36:22:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=abe764b0-9851-4173-8084-874cc793955f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:2d:62:3e:80:8d:00:ca:dc:40:eb:4c:fa:
                    44:86:c6:9e:04:d6:0d:32:0f:57:a3:1d:c1:f7:7e:
                    ab:b9:36:58:e2:e3:74:38:7d:e5:c9:1e:2a:ee:6c:
                    a6:56:b6:9f:08:77:6d:2e:c6:a9:17:9f:52:d5:42:
                    54:ab:c8:83:ff:0a:0e:68:36:d0:46:cf:4a:0e:1c:
                    2e:29:67:5b:c1:d6:04:b2:fb:e7:95:99:80:d1:30:
                    ac:05:8b:4a:f2:c0:eb:7c:f0:ad:d1:4f:41:b1:6e:
                    b0:76:4d:fa:b5:04:b5:3f:16:11:63:83:25:de:bb:
                    b5:36:ef:a8:4e:36:14:3e:e5:b2:f3:d7:33:c9:65:
                    6a:18:2a:0d:9a:ad:f5:96:25:fb:12:7c:c3:b5:ff:
                    52:7c:82:06:1e:7a:79:b6:21:71:07:54:21:b3:e7:
                    a9:23:02:ce:06:a4:f4:a2:66:46:a5:b0:a5:47:66:
                    6d:62:a3:ed:ca:e7:f2:30:dc:cf:d2:3e:4f:c0:06:
                    17:4b:9a:51:78:ab:67:47:6e:b5:6c:30:cf:fc:db:
                    49:56:e5:8d:54:fc:97:d6:2e:50:01:b2:fe:ad:7c:
                    cd:be:35:9b:ce:38:12:a8:d7:3d:37:ac:48:d2:05:
                    8a:c5:3c:25:5e:71:1b:01:58:67:67:84:3f:a2:e1:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2E:EB:2C:08:7E:A6:28:87:C7:0A:B9:FA:4B:14:65:07:C8:71:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f3c76d0-86a3-345a-a9c8-3793931c9b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.227.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:b8:71:88:3e:6d:d0:ec:2e:90:d7:c1:47:b0:54:f3:e6:
         20:a8:f4:a9:a0:ce:56:63:07:00:f6:bb:d2:db:b0:98:01:9b:
         64:85:c2:dd:f6:ba:3e:79:e3:72:32:0d:ae:3f:20:c8:90:67:
         12:21:ad:d1:40:66:e7:43:11:ed:46:9d:2d:f4:ed:b5:16:e0:
         31:b2:0a:b5:62:8f:ec:c9:03:b8:11:f8:77:1b:25:2a:92:92:
         ba:dc:61:1d:51:bc:d9:87:60:28:9c:5b:93:07:d1:44:84:e1:
         98:a4:12:06:7c:f0:37:15:79:69:be:de:6e:7e:f2:98:25:b5:
         96:17:e8:4a:32:59:e6:fe:ce:2b:f7:06:f1:2a:d3:8b:b4:84:
         a5:0e:c0:05:3d:e4:f3:55:d9:d6:d0:0a:83:ff:86:08:cf:9b:
         61:55:66:97:59:b2:66:fc:2e:0a:79:77:1c:63:83:d0:aa:4d:
         32:5f:46:44:d6:f3:53:51:6f:de:d5:89:d7:a1:6c:b2:11:24:
         a0:7b:81:3a:75:08:d7:29:b8:1e:6e:55:fe:e0:d3:4f:89:9c:
         6c:d0:07:e2:10:f8:5d:f5:d2:8e:08:6d:88:d3:70:4b:4e:b7:
         9e:14:06:a6:fd:da:8a:09:6b:5f:93:fd:c7:4b:50:ad:69:13:
         2f:46:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:43 2025 by rpki-client