Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/be6d8162-e4f7-3143-aedd-560f299b1209.roa
File:                     be6d8162-e4f7-3143-aedd-560f299b1209.roa (raw, json)
Hash identifier:          x3Bg47JieoBWT4lJ1O918DjWEHH1BSJ3UpmLznVaLd0=
Subject key identifier:   E3:28:E2:67:4C:6C:7F:1E:8F:E9:44:17:5F:11:F1:A3:2A:D0:A9:35
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA4E7E46AF952B81FD18E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/be6d8162-e4f7-3143-aedd-560f299b1209.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        35.206.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:4e:7e:46:af:95:2b:81:fd:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=81171cbb-3a44-4e21-a1da-63847d386196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:5c:63:5e:7a:72:61:15:bc:f2:fe:6d:30:
                    45:9b:c5:3e:de:48:37:f3:e6:ae:e3:35:46:81:ea:
                    00:3c:80:d0:75:f9:60:3e:49:b9:7f:26:47:c5:e5:
                    02:3c:54:10:75:fa:e1:e8:1d:c6:49:62:0b:75:cb:
                    4b:8e:e9:19:ad:c9:c5:c8:b3:05:9c:b0:3f:7e:83:
                    91:4b:a5:d0:0c:21:66:75:14:1a:ea:74:20:6e:96:
                    39:a2:f7:b6:e3:48:1e:ca:a7:cb:b2:bd:e0:86:c3:
                    8d:f1:6a:96:c7:f1:14:9d:ab:03:1b:64:87:ee:89:
                    97:77:4d:20:be:9b:31:2d:1d:ad:b5:37:c2:91:25:
                    87:f2:f4:4e:b5:8f:21:d7:54:1a:b2:df:a4:1b:f3:
                    31:c8:d9:34:83:c8:e1:db:3c:6b:17:30:42:50:c3:
                    17:0a:b3:8d:64:b2:67:97:b5:dd:4d:1b:bf:d8:9f:
                    c2:e1:e7:3b:15:04:18:1c:57:aa:48:7e:81:ef:5d:
                    bc:38:be:6d:c5:60:40:56:6b:f3:81:18:12:e2:f3:
                    c8:00:9c:28:af:9c:17:b6:7d:2b:2e:48:21:c3:ef:
                    01:5c:88:36:65:9b:89:b0:6d:2d:44:5b:fa:98:8c:
                    9c:0b:77:1c:7e:d2:6c:65:07:d8:70:88:eb:48:3a:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:28:E2:67:4C:6C:7F:1E:8F:E9:44:17:5F:11:F1:A3:2A:D0:A9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/be6d8162-e4f7-3143-aedd-560f299b1209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:3c:b9:10:b2:21:9d:74:74:dc:c3:05:e2:95:18:21:82:
         29:36:8c:7e:5c:90:eb:ff:00:d9:58:b8:90:14:b8:b8:0f:25:
         28:a5:6b:26:1d:ad:3b:01:ab:87:57:0e:d5:37:29:1e:e4:72:
         26:1d:b9:1d:d5:77:df:79:05:71:2b:ec:e3:dc:79:07:13:7e:
         cf:f7:3f:9a:6b:77:c3:9e:cb:8a:80:49:08:00:f5:18:ee:f9:
         1a:f6:90:58:3c:4a:f5:f8:70:29:58:4b:7c:b5:d9:ef:9b:91:
         25:64:74:d6:8a:a4:3d:2a:ad:45:ee:dd:80:e6:77:d2:b5:4c:
         4a:a6:76:ad:b3:86:79:26:3a:81:70:2f:bf:b4:bc:e7:67:78:
         59:83:07:33:8b:f6:e9:97:34:fc:46:90:6b:8d:12:4b:02:24:
         6a:77:49:29:68:bf:d5:bb:2a:e7:f4:34:36:1c:5f:ff:0b:b7:
         79:91:3e:39:c7:29:fa:4e:5c:f2:c3:13:f0:c6:f3:d4:32:5c:
         79:4d:b6:fc:0d:a3:4f:74:f8:48:0c:4b:7b:fe:6f:47:e2:01:
         32:88:a2:e9:87:54:98:9e:7e:ad:19:c4:57:e0:d8:21:82:6c:
         2a:2a:da:7a:ff:ad:c4:b2:77:bc:11:c1:6a:4d:86:7c:b6:49:
         f4:ce:a8:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqk5+Rq+VK4H9GOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
ODExNzFjYmItM2E0NC00ZTIxLWExZGEtNjM4NDdkMzg2MTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXpcY156cmEVvPL+bTBFm8U+3kg38+au4zVG
geoAPIDQdflgPkm5fyZHxeUCPFQQdfrh6B3GSWILdctLjukZrcnFyLMFnLA/foOR
S6XQDCFmdRQa6nQgbpY5ove240geyqfLsr3ghsON8WqWx/EUnasDG2SH7omXd00g
vpsxLR2ttTfCkSWH8vROtY8h11Qast+kG/MxyNk0g8jh2zxrFzBCUMMXCrONZLJn
l7XdTRu/2J/C4ec7FQQYHFeqSH6B7128OL5txWBAVmvzgRgS4vPIAJwor5wXtn0r
Lkghw+8BXIg2ZZuJsG0tRFv6mIycC3ccftJsZQfYcIjrSDoOQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMo4mdMbH8ej+lEF18R8aMq0Kk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmU2ZDgxNjItZTRmNy0z
MTQzLWFlZGQtNTYwZjI5OWIxMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7wPLkQsiGddHTcwwXilRghgik2jH5ckOv/ANlYuJAUuLgPJSilayYd
rTsBq4dXDtU3KR7kciYduR3Vd995BXEr7OPceQcTfs/3P5prd8Oey4qASQgA9Rju
+Rr2kFg8SvX4cClYS3y12e+bkSVkdNaKpD0qrUXu3YDmd9K1TEqmdq2zhnkmOoFw
L7+0vOdneFmDBzOL9umXNPxGkGuNEksCJGp3SSlov9W7Kuf0NDYcX/8Lt3mRPjnH
KfpOXPLDE/DG89QyXHlNtvwNo090+EgMS3v+b0fiATKIoumHVJiefq0ZxFfg2CGC
bCoq2nr/rcSyd7wRwWpNhny2SfTOqNk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:11 2026 by rpki-client