Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1265c82-5c36-3093-9e5c-ef94be79301f.roa
File:                     d1265c82-5c36-3093-9e5c-ef94be79301f.roa (raw, json)
Hash identifier:          MaSoGgiag7S39fuIxt1BW1liT004ND/5Jo6EAH6WGOc=
Subject key identifier:   D4:E5:8B:72:6B:80:28:C9:B6:E3:61:C5:41:56:B3:98:1A:96:B2:50
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797807BB24FFDF79F1B8A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1265c82-5c36-3093-9e5c-ef94be79301f.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.222.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:80:7b:b2:4f:fd:f7:9f:1b:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=d1bb0be3-aa31-493f-9670-6aa682d2fe14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:47:5d:89:13:f7:3c:85:e2:82:d4:ce:33:
                    bd:99:b5:ea:66:4c:d4:5b:76:b7:05:eb:b0:2f:cc:
                    db:53:94:56:3b:0b:2a:db:71:ae:fe:57:e3:6c:e5:
                    74:99:ce:b6:71:81:6a:f6:e0:7e:e0:c6:84:d2:bf:
                    23:dc:9c:87:8b:40:c7:26:c5:b5:20:18:ab:ad:a0:
                    86:bf:26:6a:df:a0:3f:03:f4:c5:61:1e:1f:6a:aa:
                    37:6a:09:93:d7:9f:53:b8:73:93:95:23:ea:66:43:
                    bc:c6:41:31:24:e8:07:d3:ae:29:da:ed:bb:c5:21:
                    c3:2c:63:c9:b3:e1:b7:f2:f9:d3:3e:3e:1d:c9:64:
                    cf:fa:53:f0:4a:e3:b7:2e:f1:ed:f6:f5:4e:af:a3:
                    b5:ac:3d:5d:9c:4d:3e:c2:68:99:0e:8d:9f:c1:94:
                    28:08:41:ed:60:b3:d7:6f:8a:12:cd:1b:fa:6a:60:
                    3c:ad:7c:db:5d:bc:aa:b4:24:8e:0b:87:74:95:1b:
                    74:5d:ae:f9:f4:ce:21:33:ec:b5:6b:fe:b8:86:cd:
                    26:d4:9f:5b:0d:9c:d5:06:3a:d8:15:f7:c8:77:2a:
                    95:62:8f:38:2a:e4:0f:3e:19:82:54:6e:3f:f5:08:
                    97:cf:37:16:f5:11:a9:43:7d:6e:3e:0c:44:fd:90:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E5:8B:72:6B:80:28:C9:B6:E3:61:C5:41:56:B3:98:1A:96:B2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1265c82-5c36-3093-9e5c-ef94be79301f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.222.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:64:98:cd:80:5d:a3:d4:44:66:12:c3:a9:de:f5:1d:20:8f:
         d3:d6:98:c5:97:62:71:a2:44:b7:e8:62:ba:b9:e1:e5:a1:0d:
         4e:48:79:58:03:38:a4:6a:bd:4d:9c:42:29:6a:8a:18:d2:c3:
         08:25:14:27:5b:9d:7b:a5:b0:0e:52:55:a8:23:f7:2f:aa:f0:
         0b:7b:bd:fb:18:c1:6c:44:d5:c8:12:df:5b:8f:40:3a:b5:bf:
         36:0b:59:0d:08:d0:07:65:8b:b8:07:c0:f8:1e:08:f3:bc:58:
         10:b9:d0:e5:68:c7:0f:72:41:5c:9b:9d:45:95:ea:21:a0:8e:
         96:4c:50:62:a0:66:e6:bf:29:91:d1:2a:bb:e2:ec:85:27:a9:
         35:00:0d:a6:5d:f0:72:00:c7:5f:ca:15:04:b4:0e:ba:68:b3:
         4e:a1:4b:ac:db:61:8d:13:59:a7:3b:f6:07:f3:7c:1e:6d:c0:
         f5:08:86:cf:b4:52:10:a9:4f:45:d8:c9:3f:19:31:66:0f:97:
         dc:23:43:f2:98:5d:10:01:b3:26:02:65:24:0c:51:fa:a2:ea:
         3a:4d:8a:71:43:2a:e4:ea:2d:55:d4:a1:e2:31:3b:96:fd:6e:
         85:17:01:27:68:5f:13:ce:e9:9b:ce:15:d6:8d:6a:58:cc:a8:
         8e:e5:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:10:14 2025 by rpki-client