Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca207179-d550-3731-9968-ff2dbd1f71e9.roa
File:                     ca207179-d550-3731-9968-ff2dbd1f71e9.roa (raw, json)
Hash identifier:          qLArPJWlG92uyTKcMGxbzwtHQ6kb6joLW72/oH4pdqs=
Subject key identifier:   29:CA:37:EE:98:A9:AB:25:14:BE:CB:A7:53:6C:AD:92:7D:8E:BA:BA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF5F2F2BE72864F31284CF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca207179-d550-3731-9968-ff2dbd1f71e9.roa
Signing time:             Tue 12 May 2026 14:45:41 +0000
ROA not before:           Tue 12 May 2026 14:45:41 +0000
ROA not after:            Mon 10 Aug 2026 14:45:41 +0000
asID:                     396982
IP address blocks:        35.215.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:5f:2f:2b:e7:28:64:f3:12:84:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:45:41 2026 GMT
            Not After : Aug 10 14:45:41 2026 GMT
        Subject: CN=f0463722-c56b-4583-ac2e-8ae665a972ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:5b:90:1e:05:1f:e6:b4:bd:75:c7:db:12:
                    13:d0:69:da:2e:2a:d0:c8:fe:30:4a:c4:d7:71:fb:
                    38:15:69:1a:81:41:6f:a7:29:52:e5:7a:01:fe:95:
                    71:c1:7c:8b:46:39:65:3f:f8:09:b1:9a:63:9f:51:
                    18:87:4c:fb:82:1e:ea:a0:2d:27:61:88:6e:9b:da:
                    5d:a1:10:05:58:b4:fa:b3:71:43:5a:ef:47:99:12:
                    a9:f8:7b:a9:f2:00:99:6c:e8:c1:68:72:0d:cb:a4:
                    4e:c3:c3:f5:77:43:a7:71:f4:ea:bd:8e:72:f5:be:
                    41:74:33:53:b6:4e:83:f5:69:d4:e0:60:0a:bf:7a:
                    06:df:13:2b:d5:0b:37:4c:11:29:8c:09:fd:8a:0d:
                    1d:a5:40:1f:63:99:93:f3:b7:d3:8c:bb:c7:e9:98:
                    92:34:58:ed:9f:a6:19:7b:83:0f:47:87:80:c0:e9:
                    69:e9:08:ed:b2:d8:42:ad:13:4e:3a:e0:e2:8b:9e:
                    19:55:94:b9:bb:4c:c5:ec:08:1b:ad:c8:cb:81:58:
                    bc:2b:15:06:14:e9:55:ba:e0:dc:bc:01:93:7f:3e:
                    18:29:61:be:a5:9c:0f:f2:10:29:ca:01:66:48:9b:
                    ed:ee:6b:ea:46:c4:5e:09:d8:94:0a:37:8f:a7:07:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:37:EE:98:A9:AB:25:14:BE:CB:A7:53:6C:AD:92:7D:8E:BA:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca207179-d550-3731-9968-ff2dbd1f71e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.215.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:c6:0e:a4:56:aa:31:a7:da:16:30:9a:ca:16:25:e5:e4:
         63:22:37:ab:ad:4c:0d:be:cf:7f:1f:8d:d4:33:50:38:f0:23:
         5e:17:2d:8b:26:89:99:01:6a:7d:d2:cc:a4:78:15:a0:7d:6e:
         1c:4f:76:c5:93:cd:82:f7:fc:28:8b:f4:ab:d0:a0:34:7d:6f:
         08:c6:71:a4:af:ff:3a:c3:b5:2b:f7:47:49:6f:e5:ea:92:5e:
         e7:57:32:d5:fd:0e:4c:58:a3:c8:65:f8:35:c9:69:b6:60:c3:
         b0:00:0f:c3:49:33:7a:2a:39:4f:ac:3d:5f:73:34:54:9f:a1:
         14:85:48:d9:f9:a8:2a:39:96:74:2a:ac:3d:50:4b:14:db:d3:
         cd:ed:4d:bb:2a:01:c7:20:3a:0f:b4:ce:3c:7d:0d:22:81:f0:
         a1:80:b0:c8:c1:70:5b:54:81:d5:1b:a8:8b:c8:92:af:fa:28:
         82:92:7b:2a:2c:14:89:58:e9:78:75:58:b3:f9:35:32:8a:67:
         32:38:65:36:1b:d9:f8:8b:3e:45:6d:28:c4:11:12:2e:96:0e:
         bc:0e:67:4b:4d:f4:99:ef:4f:e5:37:ac:d2:44:e0:3b:54:46:
         de:96:b4:73:64:00:20:5c:9f:17:69:bc:62:a1:96:68:2c:37:
         b2:0b:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:31 2026 by rpki-client