Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddaa503c-ea92-39bc-8e21-ebc956e3d6ad.roa
File:                     ddaa503c-ea92-39bc-8e21-ebc956e3d6ad.roa (raw, json)
Hash identifier:          dpmOHgYb3ZgpzKgu6AUCXv4uDYT4Qb4ItnTESBoYVtg=
Subject key identifier:   A9:E9:A4:49:97:E3:22:2C:55:58:FF:D1:AF:0F:FF:A2:DB:28:5B:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797D92E2320DE3EEAC31960
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddaa503c-ea92-39bc-8e21-ebc956e3d6ad.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.229.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:d9:2e:23:20:de:3e:ea:c3:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=2df90304-b608-4f54-970e-c2cae11e90cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:20:6b:40:c8:03:9d:28:e0:31:e4:45:9a:
                    10:18:08:58:62:a7:69:c4:3f:50:32:22:c2:f9:4a:
                    e9:99:3a:ab:12:1c:f2:fc:e8:ba:39:4a:f2:53:68:
                    49:d1:af:3b:a5:08:1f:90:27:24:ef:ed:56:7e:ef:
                    4c:1a:eb:fc:08:28:8c:65:18:f9:ce:7c:28:86:85:
                    5e:b3:22:63:d9:46:7a:c4:7d:46:fd:79:0f:e3:b6:
                    51:cf:78:81:71:14:12:ab:22:a9:98:bf:59:19:94:
                    dc:77:65:55:ba:1d:e8:ba:53:c1:c6:1a:d0:e2:a8:
                    4f:5e:42:f9:c3:77:16:be:f1:b5:f4:8d:52:7b:75:
                    7b:90:e7:0d:5d:38:4e:51:bc:ff:e3:8d:24:cb:b7:
                    cf:ce:d5:bd:e7:54:b8:a9:29:36:6f:f8:bc:dc:53:
                    37:c4:14:3f:0c:f8:c4:21:7d:a7:e7:f8:8e:da:b3:
                    aa:a3:bf:27:f8:6a:8b:1c:55:e3:4a:f6:04:bc:8f:
                    cd:46:12:81:dd:08:9c:c0:a2:99:5f:15:61:bf:c4:
                    f1:47:4e:fa:e3:b3:9c:54:9f:e1:9b:7e:8e:6c:3a:
                    7c:44:26:55:e5:77:ac:aa:84:30:18:55:47:ad:bc:
                    b5:bb:0b:2d:27:9d:9a:74:a9:43:f2:66:ff:9c:18:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E9:A4:49:97:E3:22:2C:55:58:FF:D1:AF:0F:FF:A2:DB:28:5B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddaa503c-ea92-39bc-8e21-ebc956e3d6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.229.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3b:fb:38:2a:03:10:57:ce:09:8a:10:d9:82:e0:69:0e:56:
         6f:7a:37:15:1b:5a:88:53:a3:5a:d8:ba:c1:23:4b:54:4b:de:
         b3:00:8e:41:13:6e:78:50:92:ab:41:4c:6a:34:bf:53:43:6d:
         88:10:f8:a8:8c:80:8e:ef:7c:be:df:ac:8f:76:ef:23:a2:bd:
         8f:dd:ff:61:7b:b6:cb:41:43:ed:77:96:8d:e3:9a:ad:df:c2:
         a5:d5:79:48:25:d4:91:ea:4b:31:30:af:d5:0f:c0:f1:33:9b:
         00:d2:61:b7:8e:34:81:ba:37:1a:91:cc:bd:9f:1b:79:b8:77:
         88:52:ac:90:13:58:cd:be:2a:99:83:fe:5e:64:8a:ae:9f:49:
         2f:aa:39:10:8a:57:44:ef:02:16:f4:b7:4c:ff:fb:2a:cf:75:
         46:16:c8:07:c5:fe:41:00:fc:31:be:76:44:ba:ba:76:48:a4:
         ba:42:eb:58:ac:db:3a:65:38:2a:42:87:c3:54:de:f8:96:da:
         75:58:e9:14:da:71:99:cd:e2:2e:5f:7c:28:3d:ea:71:1b:dc:
         26:5a:50:a0:35:6a:0a:ff:02:ee:81:8b:c5:79:a9:f4:42:d9:
         52:68:ef:5b:7e:b7:3d:d4:09:42:df:3f:22:25:e2:b7:7f:d1:
         91:c7:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:28:52 2025 by rpki-client