Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa
File:                     bd538f77-993a-3a7b-b68e-2bd33845696f.roa (raw, json)
Hash identifier:          KQWaZlDR7s+400n3VqXDPIggOofZ4TXJfoBFfAzg1AE=
Subject key identifier:   58:C2:12:6E:4A:C8:0F:37:50:3E:7A:A2:B1:2E:A2:C3:DD:C4:F0:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67978A066A45F6EF432583C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.240.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:8a:06:6a:45:f6:ef:43:25:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=dce9e8a0-801f-4045-b4fd-a99dd539455b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:5a:99:37:08:36:ac:6d:85:e5:99:ae:b6:
                    0e:6a:47:8e:5a:25:ac:07:fb:fd:96:4c:b2:7a:5e:
                    c9:cb:c4:ca:87:6a:03:8f:27:ff:c8:71:b1:64:48:
                    58:8b:31:67:11:ec:c4:15:d8:99:20:98:3b:d3:38:
                    e3:5b:74:49:6f:5f:cf:39:4e:0e:92:34:2b:8e:ef:
                    a3:97:8f:bd:d2:44:3a:ef:eb:e5:c7:91:ae:29:35:
                    aa:0c:d3:23:a9:44:e8:17:31:1a:b9:03:af:8e:df:
                    ce:c5:a3:75:01:d5:0d:5b:36:a9:b2:f8:49:3b:3f:
                    5a:a8:fb:7d:35:1c:b5:41:a0:42:25:fe:13:87:5c:
                    b7:11:36:51:ef:0a:43:48:86:c0:50:dd:f6:49:e6:
                    c6:9c:c0:71:89:bc:c1:62:f9:e1:19:75:39:43:48:
                    10:ea:d4:56:cf:3b:34:6c:2e:1d:af:7d:e2:d6:7c:
                    f3:72:0e:92:30:2d:0a:bd:4e:fd:c8:b6:56:45:1f:
                    43:aa:f8:c6:03:8d:ea:3f:e6:c4:dc:52:0b:19:59:
                    e4:2d:63:6b:96:7f:a8:c3:68:59:13:55:d3:01:20:
                    4c:a2:19:a2:33:1c:35:c5:78:7e:53:b2:8d:53:6e:
                    72:f3:e8:9d:fe:9b:f9:f3:b0:ec:23:9b:df:3d:6e:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C2:12:6E:4A:C8:0F:37:50:3E:7A:A2:B1:2E:A2:C3:DD:C4:F0:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.240.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0a:0c:a1:a2:f3:33:50:88:be:5d:53:34:72:e0:8c:df:ec:
         b8:de:92:9d:e7:0b:bb:63:73:8d:6a:27:70:32:57:cb:68:71:
         63:f9:e0:d5:09:21:4f:f0:a3:b8:8d:5f:e7:6c:c7:bf:7c:0f:
         73:23:ad:cf:83:0d:ac:6a:08:35:02:0f:11:b7:d0:38:81:80:
         0d:15:da:2f:4d:25:79:1d:ce:75:ab:12:b3:cb:4f:11:17:30:
         ba:ca:46:04:84:aa:69:36:86:6b:d9:22:d6:7c:1b:91:18:b0:
         7f:96:7b:34:51:f8:0a:2e:20:d8:68:09:df:d0:fc:3c:19:de:
         27:56:56:26:db:c7:51:a3:0f:51:b2:04:f6:40:c5:87:7c:63:
         ed:0d:0a:86:ef:15:fb:c4:39:8f:6c:b8:a1:ef:36:7c:80:6e:
         4a:8c:6e:a4:64:49:cf:e0:a5:4b:e9:82:59:1b:82:66:6d:98:
         49:bb:95:c9:a8:b9:9a:30:25:ef:15:91:d7:b1:5e:f9:7f:88:
         e6:a9:ec:70:56:c7:19:18:ac:ab:57:74:28:22:01:f0:22:18:
         65:91:d7:7d:02:d9:e0:b4:19:47:98:6e:e8:ed:1d:84:5b:ee:
         4b:09:2d:54:83:6f:d9:8b:c6:3e:87:92:85:5f:db:25:b0:bf:
         80:6c:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:07 2025 by rpki-client