Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c15780ce-d28f-3b7d-89d7-1bd04a6d4133.roa
File:                     c15780ce-d28f-3b7d-89d7-1bd04a6d4133.roa (raw, json)
Hash identifier:          pYh81rnNk5jGiigrq2LCw1EJ4jUcraK1OVOjYVwE1W0=
Subject key identifier:   7C:16:B6:CC:38:C0:6E:C4:D9:9E:3C:E9:DC:92:24:8B:26:61:C5:D7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67977AA8F07AD942F3630F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c15780ce-d28f-3b7d-89d7-1bd04a6d4133.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.224.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:7a:a8:f0:7a:d9:42:f3:63:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=d99de38a-1ea5-46b8-91db-a361aa9d3b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:18:6f:c8:39:90:eb:68:45:95:a3:7e:af:
                    39:34:01:26:9e:50:44:14:0c:e0:bd:7a:a1:b4:94:
                    e3:ae:69:93:49:38:a4:35:f4:16:ab:23:f2:88:2a:
                    d5:c2:75:67:bc:e9:e2:d6:8f:09:5d:03:4f:a2:30:
                    5a:3d:24:54:4d:6e:4f:1f:f1:3d:9d:fb:62:fb:ec:
                    c6:26:3d:76:97:54:a9:6d:99:80:83:14:85:f1:93:
                    21:2b:eb:b2:42:28:53:ce:19:d7:fe:c0:33:f1:f2:
                    e7:09:12:34:26:59:bc:79:22:a4:40:62:61:70:e3:
                    6e:63:4c:f4:4f:0a:dc:7a:98:f2:0b:40:af:ce:6e:
                    bb:b6:56:ac:41:12:cb:77:6c:83:23:25:cb:68:44:
                    7d:07:c1:67:ae:e9:37:c8:15:f4:5e:5b:75:47:63:
                    24:50:6e:3a:38:b1:c4:2e:bf:a9:ac:34:fb:a7:c5:
                    a0:07:c6:a0:44:f9:bc:03:6b:a3:c7:d7:1c:77:94:
                    de:66:66:21:9e:57:77:a9:a3:a7:60:ae:13:23:e4:
                    06:11:0e:6a:48:bf:62:2c:a6:72:79:11:a6:30:0c:
                    0c:a4:39:06:ad:f2:db:a8:8c:98:fc:82:51:0b:1c:
                    28:ec:d8:2f:6e:b8:e6:ab:a9:0a:26:c5:c4:d5:45:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:B6:CC:38:C0:6E:C4:D9:9E:3C:E9:DC:92:24:8B:26:61:C5:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c15780ce-d28f-3b7d-89d7-1bd04a6d4133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.224.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:90:b2:28:47:5c:7f:e2:47:0b:3c:e4:46:8b:1f:6f:ef:5e:
         cf:57:99:e2:92:3c:4f:7c:9c:f7:4d:c3:f4:b4:1c:c1:16:6e:
         89:7d:6a:bd:4f:bc:65:43:df:97:43:95:a5:ea:ed:c4:13:03:
         a9:37:83:65:b0:68:70:49:41:e5:8a:bb:ac:45:4d:f2:19:23:
         9a:2a:51:6f:a1:c3:d3:a1:4d:aa:ea:45:7e:d4:78:45:36:bb:
         3d:44:19:be:aa:da:c8:bb:9d:5f:31:eb:e9:53:52:91:f5:93:
         6c:b3:21:1c:3e:b2:28:85:9c:09:5e:0a:64:41:85:90:53:f0:
         45:93:6f:74:9d:de:1d:6c:f6:78:eb:2f:99:bb:86:6b:8e:a1:
         2b:c9:7f:29:d2:0e:b8:ff:15:6e:ee:d4:88:da:e6:e6:ac:47:
         07:61:d8:b7:bc:b4:41:87:d7:8d:7f:36:53:f9:f9:ff:7d:31:
         5a:1f:12:c8:34:47:69:cb:74:42:41:42:7d:3a:22:80:b0:ec:
         b9:71:eb:7c:f3:94:d5:b6:cf:e3:e0:a9:40:ac:64:f0:fc:06:
         32:fa:7a:a4:f5:96:a8:02:29:9c:df:d9:50:0b:58:76:1d:61:
         39:89:c8:50:ff:b5:24:46:94:8e:1e:3c:89:e5:17:f9:ec:65:
         fb:1f:ed:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:56 2025 by rpki-client