Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7c6bcd9-e977-3f27-91ae-36ed89b0e52f.roa
File:                     b7c6bcd9-e977-3f27-91ae-36ed89b0e52f.roa (raw, json)
Hash identifier:          vjZpLJv4GZOVpGBMK9qSJ3i2ACMJq+8pQKdyCuIrF5U=
Subject key identifier:   1D:6B:2E:A6:DB:B6:FC:1C:14:C2:6F:B0:B2:57:90:8A:C0:FF:14:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DA0EDE202AFA505BB85C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7c6bcd9-e977-3f27-91ae-36ed89b0e52f.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        35.185.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:a0:ed:e2:02:af:a5:05:bb:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=95ba7c81-2c89-454e-8fbc-83c996a7d89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:85:a2:40:a4:79:45:05:7f:4e:27:20:c1:
                    aa:02:98:ee:2f:16:b7:f5:9f:df:29:30:2f:fe:a6:
                    9e:cf:c0:1d:d2:24:ca:ce:99:07:17:57:34:77:83:
                    39:f7:73:80:4a:b7:d7:7b:ba:94:2b:f6:17:ce:5b:
                    a9:91:7e:7d:73:4a:9d:d0:f4:49:5b:95:02:29:49:
                    0b:4d:b3:30:16:8f:61:d3:2f:c3:17:34:79:f3:8b:
                    10:28:2d:16:37:8d:ce:8b:7e:7d:c4:05:90:8f:98:
                    8c:e8:7a:3a:c9:42:39:ba:13:4f:0e:9e:75:0b:79:
                    b0:f3:3a:f5:85:95:a7:26:91:22:ef:a3:66:80:4f:
                    64:9a:f5:64:0e:d9:6e:12:42:96:07:21:97:42:c7:
                    04:59:4f:1e:65:eb:a4:6b:23:3b:af:ea:2b:4b:ad:
                    0a:cb:3d:e2:eb:6a:3c:b4:a0:40:c4:51:ff:e3:86:
                    72:d6:e1:2e:f8:10:59:dc:ed:fb:f4:84:48:31:e9:
                    66:80:ab:86:c8:d3:46:03:e8:18:0a:0d:d2:0e:c6:
                    e1:f0:de:54:1b:b2:9c:e4:89:f3:e6:90:d2:c8:b1:
                    f5:13:f9:b4:db:93:6d:e2:72:3c:aa:22:b8:e6:f2:
                    fe:76:75:b8:d5:f1:34:99:75:e5:79:80:db:c1:fe:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6B:2E:A6:DB:B6:FC:1C:14:C2:6F:B0:B2:57:90:8A:C0:FF:14:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7c6bcd9-e977-3f27-91ae-36ed89b0e52f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:52:3f:47:44:4a:c9:05:e8:c3:49:01:41:7d:74:8e:19:
         d0:de:db:22:94:10:8f:53:e1:69:ac:f9:6e:97:63:03:90:31:
         80:af:28:04:55:a2:32:58:b0:9a:ce:aa:8d:1f:14:1e:6d:89:
         df:f6:a3:5a:01:43:97:ac:1d:64:ab:f1:3d:8e:ae:02:be:53:
         31:d5:ca:fa:e0:12:60:8b:76:eb:fb:2e:e1:82:e8:7a:d5:61:
         d2:24:2a:54:a2:66:d7:07:c1:e4:5f:18:6b:b3:b5:d8:93:6d:
         e7:98:32:83:e9:0c:92:da:a7:30:50:76:4d:f7:f5:77:60:0a:
         cc:49:cf:b6:13:8e:11:d7:cc:91:86:16:55:c9:17:f6:07:3e:
         a2:d9:fc:ce:ac:87:74:d0:0c:62:dc:10:02:f3:34:2a:d7:7a:
         8d:71:10:35:04:3b:be:fc:01:46:fd:54:9e:b5:0b:99:dc:b8:
         43:bc:70:70:46:e2:de:f3:23:be:05:19:1c:08:f4:85:f9:03:
         28:1c:09:cc:ec:92:12:d0:75:9f:b7:3a:9c:a5:88:5d:1a:f8:
         a5:77:fb:1f:08:07:fb:71:0e:83:07:eb:d0:da:c2:8c:f2:38:
         31:88:b7:ee:6c:aa:28:a0:70:84:fd:bc:95:10:72:32:e1:0a:
         5b:b7:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:25:41 2026 by rpki-client