Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b531f7f9-e14c-3864-bedb-2175cd9996f8.roa
File:                     b531f7f9-e14c-3864-bedb-2175cd9996f8.roa (raw, json)
Hash identifier:          bXCMDoXySKoTgsku0U3otqIiKXN8PNPqu2EBl0JwrRU=
Subject key identifier:   67:F7:AD:26:DB:DE:E4:69:AD:36:76:0C:24:7D:41:F7:66:DF:0A:2F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67974BE75B0961FE805E2980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b531f7f9-e14c-3864-bedb-2175cd9996f8.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.221.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:4b:e7:5b:09:61:fe:80:5e:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=a055ff77-bb85-4443-ba0e-90d92eb62bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:1c:95:18:67:4e:ff:be:8c:99:c9:f5:da:
                    0f:8a:8b:a8:98:62:4a:93:13:8c:6f:b1:dc:b3:56:
                    a8:0e:43:bc:d0:03:2e:24:be:ce:cd:6c:04:1e:25:
                    99:f6:18:54:e9:0e:eb:e6:01:00:a6:55:d1:eb:fb:
                    79:af:24:97:98:66:ee:d0:20:c7:6b:ec:59:b8:bc:
                    50:d8:25:39:ea:c9:e8:d3:0c:8b:3e:1f:65:4f:cd:
                    8e:84:81:2e:3e:4a:8f:e9:70:6e:6e:5f:d8:0e:04:
                    5e:94:57:50:9a:26:8c:44:b8:32:c6:b2:3e:cb:b2:
                    76:8b:77:e0:61:ca:c3:51:ae:40:8a:61:5c:02:16:
                    09:70:fd:e5:9e:55:75:2f:32:fc:bf:af:ec:97:8d:
                    31:f7:15:8f:f8:ba:f8:f6:bd:45:11:5a:f1:6a:fe:
                    7c:6a:c1:99:e1:1f:ec:88:3a:ef:33:ec:21:f6:e0:
                    f8:3f:3d:ff:25:77:ab:a8:32:6b:3d:74:a7:31:2e:
                    92:88:5e:73:47:9e:7a:28:d9:cb:ff:a6:3f:a8:9b:
                    11:02:21:aa:28:1a:2c:56:6f:45:67:c3:96:db:c6:
                    32:74:18:17:44:7a:d5:01:ad:a5:4a:5b:cf:6c:87:
                    7c:6c:35:00:8d:80:60:33:e4:09:77:57:75:4f:69:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:AD:26:DB:DE:E4:69:AD:36:76:0C:24:7D:41:F7:66:DF:0A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b531f7f9-e14c-3864-bedb-2175cd9996f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.221.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:1b:6e:6d:2c:50:cc:02:42:3d:ba:4c:51:60:69:5b:05:
         70:de:53:0a:5b:7a:5c:bb:83:b6:3a:1f:7a:1f:9b:59:a1:c2:
         8a:5b:50:e9:8d:90:b8:bc:bf:48:88:95:73:8c:2a:32:75:37:
         17:73:8b:b5:f2:02:d8:f5:1c:a0:c5:57:86:fc:8d:13:7d:76:
         ee:8d:74:3e:18:fa:c6:af:01:f3:48:b2:cd:fd:c9:52:a0:33:
         de:38:5a:37:6b:a4:b6:db:aa:3f:ab:5e:df:47:15:8b:80:0a:
         cf:08:af:15:cf:b6:10:95:2a:1d:2b:28:2e:84:24:bc:d1:9b:
         42:97:31:69:9f:af:04:02:ed:88:08:f9:82:35:2b:5a:2c:3e:
         6d:74:90:b8:85:3d:93:61:94:d6:94:81:89:26:8c:53:af:08:
         d0:7c:1b:2d:d5:81:ae:1d:70:77:e2:b4:88:df:db:df:7c:61:
         83:f9:3f:03:10:c9:46:81:ad:39:9b:5e:36:45:16:68:7e:0f:
         60:b8:a7:78:aa:0f:f4:27:11:8c:fd:a3:33:db:b3:6b:2e:d2:
         d9:35:7e:e9:06:70:aa:e1:31:0b:80:fe:1d:01:f9:41:5e:79:
         d0:9b:89:b7:ea:03:9e:a5:4c:d4:22:ae:71:27:1b:4d:f3:12:
         52:40:ed:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0vnWwlh/oBeKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
YTA1NWZmNzctYmI4NS00NDQzLWJhMGUtOTBkOTJlYjYyYmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8MclRhnTv++jJnJ9doPiouomGJKkxOMb7Hc
s1aoDkO80AMuJL7OzWwEHiWZ9hhU6Q7r5gEAplXR6/t5rySXmGbu0CDHa+xZuLxQ
2CU56sno0wyLPh9lT82OhIEuPkqP6XBubl/YDgRelFdQmiaMRLgyxrI+y7J2i3fg
YcrDUa5AimFcAhYJcP3lnlV1LzL8v6/sl40x9xWP+Lr49r1FEVrxav58asGZ4R/s
iDrvM+wh9uD4Pz3/JXerqDJrPXSnMS6SiF5zR556KNnL/6Y/qJsRAiGqKBosVm9F
Z8OW28YydBgXRHrVAa2lSlvPbId8bDUAjYBgM+QJd1d1T2kpXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGf3rSbb3uRprTZ2DCR9Qfdm3wovMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjUzMWY3ZjktZTE0Yy0z
ODY0LWJlZGItMjE3NWNkOTk5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI90QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjlG25tLFDMAkI9ukxRYGlbBXDeUwpbely7g7Y6H3ofm1mhwopbUOmN
kLi8v0iIlXOMKjJ1Nxdzi7XyAtj1HKDFV4b8jRN9du6NdD4Y+savAfNIss39yVKg
M944WjdrpLbbqj+rXt9HFYuACs8IrxXPthCVKh0rKC6EJLzRm0KXMWmfrwQC7YgI
+YI1K1osPm10kLiFPZNhlNaUgYkmjFOvCNB8Gy3Vga4dcHfitIjf2998YYP5PwMQ
yUaBrTmbXjZFFmh+D2C4p3iqD/QnEYz9ozPbs2su0tk1fukGcKrhMQuA/h0B+UFe
edCbibfqA56lTNQirnEnG03zElJA7TA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:35 2025 by rpki-client