Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa
File:                     d3601d74-a920-36fe-9fc7-7641e6a380a9.roa (raw, json)
Hash identifier:          flTeS62SEi6KwiEjxylCUAgy9bs8ck926CH5BUdR2vU=
Subject key identifier:   61:41:F0:AF:83:6C:33:AE:77:7E:F8:69:87:F2:1A:6C:30:01:92:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797B1AE56B98C1384027340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.239.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:b1:ae:56:b9:8c:13:84:02:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=e19ecbdc-a8d7-4dfd-bcc4-fa173afe1d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:f2:66:9f:34:ee:67:f0:c9:ae:20:27:a1:
                    3c:a6:7b:a1:35:41:e6:22:92:16:d3:63:d1:55:06:
                    b5:53:b0:5b:63:89:37:12:2f:a3:62:2e:a0:33:43:
                    1d:f6:b3:10:df:20:5b:7f:f1:67:0a:c0:97:a3:83:
                    78:b7:e5:1b:02:d3:b9:7a:9c:b6:b0:fd:c3:d2:15:
                    ed:dc:0b:7b:32:04:1f:8a:2d:97:74:3e:d6:47:5d:
                    fc:b3:48:8a:86:50:6a:2e:d6:eb:f1:32:9d:b4:33:
                    d9:64:0b:41:a7:54:a6:fc:35:5e:ac:96:b2:c4:01:
                    59:48:2d:d6:a9:d6:55:97:18:40:b9:a4:d8:26:38:
                    73:c9:a6:09:72:b9:d0:70:97:c9:f9:a1:18:4a:0e:
                    dd:39:96:17:f3:fd:6a:58:36:35:13:11:cd:4f:11:
                    32:ae:be:be:e4:01:19:82:15:44:61:e6:5e:22:48:
                    3d:71:f8:1d:a2:3d:29:3c:9f:e8:4f:66:ca:6a:da:
                    3c:70:62:5d:f7:ac:3e:3c:a1:ea:89:49:6b:ec:88:
                    08:47:18:fd:c6:e6:c0:ef:92:02:ae:0d:01:51:7c:
                    e3:dd:a9:f3:47:12:df:25:5f:9b:d5:fa:1f:15:72:
                    e0:68:96:bb:62:97:4b:41:81:b8:d2:61:29:b0:33:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:41:F0:AF:83:6C:33:AE:77:7E:F8:69:87:F2:1A:6C:30:01:92:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.239.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:73:7c:82:07:57:67:dd:6f:0a:49:3d:97:57:fe:57:ce:93:
         d1:06:29:58:41:f3:d8:ea:0b:10:ef:f2:9c:88:98:8b:fc:30:
         99:7b:81:6f:2f:c4:3e:9a:ba:6c:21:50:97:bd:16:f6:ce:f1:
         a9:08:33:29:1e:76:43:cb:d5:88:f8:d1:5a:b0:f4:f2:57:60:
         d7:b5:71:d7:70:2e:34:ae:82:0f:0d:0f:12:c9:95:5b:e6:21:
         40:9c:b3:50:5f:1d:40:84:40:e0:05:00:51:ab:96:6e:17:f7:
         cd:6d:c1:ac:6e:41:b8:c5:c5:3c:b4:52:35:c0:de:41:97:c8:
         93:f3:68:17:56:e1:c1:d0:43:25:6e:6b:2a:36:20:49:d9:f8:
         bb:42:dd:f3:0c:bd:91:7f:98:0f:43:cb:6c:6f:7f:14:7d:cb:
         6f:79:74:40:80:94:d2:d3:39:7b:04:b3:e1:0f:32:16:8e:69:
         a7:46:31:39:f5:49:c9:f4:02:7d:6c:da:02:35:c6:b2:3d:56:
         3f:20:de:b9:04:21:0e:ec:c7:34:20:14:dc:35:84:6a:b6:cd:
         a5:91:b2:52:45:57:b2:0d:e1:8d:51:61:2d:6b:4c:49:2c:08:
         c8:27:83:b7:2e:8c:95:56:df:43:85:e8:d5:56:c5:be:82:83:
         8f:46:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:04 2025 by rpki-client