Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f54010f-05f5-36ac-86ac-775b12a37942.roa
File:                     9f54010f-05f5-36ac-86ac-775b12a37942.roa (raw, json)
Hash identifier:          B4StBgY42S8bUFDTkPx6hzUhSyhYckp/HljgFu2aQSc=
Subject key identifier:   67:9E:79:83:D7:1E:5D:CA:2D:63:C8:6F:64:B9:FB:EC:B4:AF:EA:3C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AAB375A6F2E2BB538FBFD6
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f54010f-05f5-36ac-86ac-775b12a37942.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        35.203.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:b3:75:a6:f2:e2:bb:53:8f:bf:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=c95878d2-5941-405d-a488-5dc63cb86246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:d3:00:3d:08:ef:96:40:79:f3:be:d5:4d:
                    74:bf:2f:83:09:c5:5c:4f:4e:e7:a3:ca:2d:84:f6:
                    6e:11:ea:e5:33:e2:bc:64:79:b0:28:a6:c1:96:da:
                    b1:0f:6b:df:14:d6:86:90:bf:01:ac:16:09:e3:24:
                    f6:13:32:e2:40:cf:e0:c2:29:a9:a6:6d:35:db:a4:
                    6a:41:a8:96:a4:5d:6b:6a:e5:81:6e:56:65:d7:24:
                    14:1a:18:54:a1:6f:2e:19:3b:a6:4d:5d:f0:1d:86:
                    37:c2:ad:9b:97:dd:d1:61:af:6e:bd:ae:77:85:1d:
                    94:8d:4d:4a:6f:fb:0b:2f:5d:c0:20:66:af:29:d3:
                    42:8a:71:57:14:39:f3:b2:55:1a:e0:0d:5a:17:52:
                    c8:c1:44:d7:c3:e6:37:c0:bf:b9:a7:b2:0e:be:21:
                    78:ad:3a:0a:af:e6:a4:db:c9:9d:1d:e6:39:db:8f:
                    44:b2:a4:49:4e:17:ab:c3:5e:76:e0:e0:44:8e:90:
                    0a:39:92:5e:25:d2:49:44:0e:7d:19:1c:cd:b8:bd:
                    22:7e:90:eb:ed:25:fa:bc:92:73:f2:ce:d5:44:d2:
                    6f:fa:43:79:85:b9:3f:bc:60:99:86:17:b5:e1:5d:
                    04:fb:e2:23:b2:d6:41:08:79:8f:9f:e7:0f:7b:e0:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:79:83:D7:1E:5D:CA:2D:63:C8:6F:64:B9:FB:EC:B4:AF:EA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f54010f-05f5-36ac-86ac-775b12a37942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:d8:9e:fa:b0:a6:25:ab:be:05:eb:bb:8a:9e:b2:ef:36:
         66:0a:3d:aa:4b:6a:76:da:bb:fa:81:da:14:67:4b:8a:92:ab:
         66:55:a4:e7:89:04:16:d8:bf:88:8f:f8:25:14:ee:5c:a5:60:
         21:8b:e3:01:4d:a0:e5:3d:94:91:95:0f:12:4c:eb:2a:00:57:
         b1:32:20:09:01:b7:bf:17:13:d4:1f:f0:8e:df:60:35:94:98:
         0a:a4:cd:d8:1f:f4:73:7d:f4:89:84:8b:9a:d0:05:97:3a:38:
         e7:a2:33:1a:46:48:d3:e7:16:d2:c5:d6:dc:af:1b:dc:1e:1b:
         66:d6:b8:cc:78:1f:1a:cd:46:c8:f0:03:e1:bc:f8:c0:0e:9c:
         e8:c3:ee:59:54:0b:95:62:69:9f:8a:42:e5:ad:0e:4e:e3:0b:
         a8:d0:e0:e4:dd:22:c4:95:06:8a:4e:ce:c2:3b:e1:2e:76:46:
         5f:fc:83:a7:c7:f9:86:d4:34:ed:10:29:4a:b8:fe:5c:7b:47:
         96:25:40:46:10:43:d3:1f:cc:56:1e:6c:7a:33:15:f5:92:fd:
         f1:b9:57:e9:9e:47:c9:91:92:f2:1f:79:c8:9c:fe:56:ee:07:
         95:dc:c7:c0:7c:32:33:eb:84:3d:b2:7c:47:22:d2:20:91:21:
         92:e2:9d:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrN1pvLiu1OPv9YwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
Yzk1ODc4ZDItNTk0MS00MDVkLWE0ODgtNWRjNjNjYjg2MjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmfTAD0I75ZAefO+1U10vy+DCcVcT07no8ot
hPZuEerlM+K8ZHmwKKbBltqxD2vfFNaGkL8BrBYJ4yT2EzLiQM/gwimppm0126Rq
QaiWpF1rauWBblZl1yQUGhhUoW8uGTumTV3wHYY3wq2bl93RYa9uva53hR2UjU1K
b/sLL13AIGavKdNCinFXFDnzslUa4A1aF1LIwUTXw+Y3wL+5p7IOviF4rToKr+ak
28mdHeY5249EsqRJTherw1524OBEjpAKOZJeJdJJRA59GRzNuL0ifpDr7SX6vJJz
8s7VRNJv+kN5hbk/vGCZhhe14V0E++IjstZBCHmPn+cPe+DCwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGeeeYPXHl3KLWPIb2S5++y0r+o8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWY1NDAxMGYtMDVmNS0z
NmFjLTg2YWMtNzc1YjEyYTM3OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8tgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJac2J76sKYlq74F67uKnrLvNmYKPapLanbau/qB2hRnS4qSq2ZVpOeJ
BBbYv4iP+CUU7lylYCGL4wFNoOU9lJGVDxJM6yoAV7EyIAkBt78XE9Qf8I7fYDWU
mAqkzdgf9HN99ImEi5rQBZc6OOeiMxpGSNPnFtLF1tyvG9weG2bWuMx4HxrNRsjw
A+G8+MAOnOjD7llUC5ViaZ+KQuWtDk7jC6jQ4OTdIsSVBopOzsI74S52Rl/8g6fH
+YbUNO0QKUq4/lx7R5YlQEYQQ9MfzFYebHozFfWS/fG5V+meR8mRkvIfecic/lbu
B5Xcx8B8MjPrhD2yfEci0iCRIZLindo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:51 2026 by rpki-client