Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef72e6ae-f3e6-3ecc-9b80-1e6c8c622c6e.roa
File:                     ef72e6ae-f3e6-3ecc-9b80-1e6c8c622c6e.roa (raw, json)
Hash identifier:          uvrcb1bIVQAeNS/JSpCug+k6FbSnZMza0weKdnmUoMs=
Subject key identifier:   C5:A2:8A:33:03:3C:E9:39:4D:45:A5:6E:5B:9B:E6:18:3F:89:78:80
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B679747E40A7AF722D0F252C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef72e6ae-f3e6-3ecc-9b80-1e6c8c622c6e.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     19527
IP address blocks:        35.219.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:47:e4:0a:7a:f7:22:d0:f2:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=f6dc30ae-02e3-4da6-94ae-fe2d4722acba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:1a:21:d3:ee:35:23:97:72:a5:1b:e9:33:
                    1f:54:36:0b:da:95:0e:5d:b1:b5:06:8f:8c:e2:1e:
                    18:ab:8e:f0:b0:14:b1:4b:24:69:97:63:79:af:e9:
                    0b:c9:f3:c1:d3:cf:57:1c:73:0d:a2:b9:ef:b0:8f:
                    3f:7f:00:a9:78:31:6a:2d:7f:db:b3:47:79:f7:82:
                    e3:90:97:ed:ec:bf:08:2e:53:36:5e:17:0d:f1:b3:
                    de:94:10:c9:01:3e:e8:da:18:a7:50:a7:7f:6c:3b:
                    c4:5c:eb:1b:bb:d9:17:3b:fc:52:0c:1c:93:6b:91:
                    68:9f:32:e9:ac:64:9c:9f:a1:e6:07:c6:82:08:16:
                    c2:b4:e0:12:13:a2:fd:5a:6b:71:f0:db:c0:ca:2f:
                    db:02:64:d1:95:7b:15:d6:e1:e8:67:ba:4b:cb:9d:
                    e4:a3:9c:be:ce:10:7e:1b:0b:17:39:a0:46:f8:c5:
                    82:cc:d5:60:5d:f0:fd:e7:a9:5c:31:60:dc:a1:29:
                    2e:83:08:0d:38:87:58:b2:c0:1e:df:34:5e:a2:ca:
                    97:34:45:05:73:db:a3:71:5d:a0:b6:f1:d1:f0:e0:
                    20:24:16:ee:f6:ed:3c:a9:df:89:4c:1e:0d:6a:00:
                    b5:fb:ca:8f:b4:e9:62:fb:9e:21:56:e5:ab:bf:2f:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:8A:33:03:3C:E9:39:4D:45:A5:6E:5B:9B:E6:18:3F:89:78:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef72e6ae-f3e6-3ecc-9b80-1e6c8c622c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:a9:49:fb:cd:70:a1:de:31:36:93:70:a2:91:aa:29:a1:
         6f:7d:da:83:7a:7d:af:44:ca:83:83:97:fb:0e:c6:50:66:e8:
         4b:b6:80:2b:3b:55:6f:59:34:41:86:a9:cf:5b:64:5b:e6:67:
         8c:b1:34:36:d1:51:d2:52:5b:d3:42:de:de:13:de:3d:95:31:
         a8:ed:1c:1f:dc:9c:b7:35:24:b5:4d:a9:36:f1:10:fc:11:b3:
         ca:50:d7:27:6c:35:51:29:f5:51:71:6e:d8:c1:42:2b:a4:0d:
         f1:e7:a4:f4:a1:98:ec:1b:e2:88:4e:9e:66:33:a9:21:fb:f4:
         91:36:1c:ee:e9:93:71:5b:db:2e:5d:a0:d3:22:76:4e:0c:c1:
         35:9f:54:13:f9:8d:3c:5e:7a:3e:a4:3d:06:25:6d:01:56:1e:
         05:4a:97:a6:af:21:f1:b3:04:05:a3:80:1e:2d:2c:37:5b:3f:
         69:85:9a:1e:f5:4f:e4:21:29:a4:a0:bc:03:6a:aa:fe:15:4f:
         fe:5b:f7:d0:8d:10:6e:a4:78:7e:a7:f1:95:16:fa:f0:19:4c:
         c7:ef:aa:41:9a:d6:a8:b0:b9:2e:09:3a:d5:a6:08:02:06:c9:
         4f:f9:f9:02:94:b5:83:1a:66:c1:52:95:88:37:a3:59:f8:27:
         a9:73:03:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0fkCnr3ItDyUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZjZkYzMwYWUtMDJlMy00ZGE2LTk0YWUtZmUyZDQ3MjJhY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuUaIdPuNSOXcqUb6TMfVDYL2pUOXbG1Bo+M
4h4Yq47wsBSxSyRpl2N5r+kLyfPB089XHHMNornvsI8/fwCpeDFqLX/bs0d594Lj
kJft7L8ILlM2XhcN8bPelBDJAT7o2hinUKd/bDvEXOsbu9kXO/xSDByTa5FonzLp
rGScn6HmB8aCCBbCtOASE6L9Wmtx8NvAyi/bAmTRlXsV1uHoZ7pLy53ko5y+zhB+
GwsXOaBG+MWCzNVgXfD956lcMWDcoSkugwgNOIdYssAe3zReosqXNEUFc9ujcV2g
tvHR8OAgJBbu9u08qd+JTB4NagC1+8qPtOli+54hVuWrvy8XSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWiijMDPOk5TUWlblub5hg/iXiAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWY3MmU2YWUtZjNlNi0z
ZWNjLTliODAtMWU2YzhjNjIyYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI9vBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4BqUn7zXCh3jE2k3CikaopoW992oN6fa9EyoODl/sOxlBm6Eu2gCs7
VW9ZNEGGqc9bZFvmZ4yxNDbRUdJSW9NC3t4T3j2VMajtHB/cnLc1JLVNqTbxEPwR
s8pQ1ydsNVEp9VFxbtjBQiukDfHnpPShmOwb4ohOnmYzqSH79JE2HO7pk3Fb2y5d
oNMidk4MwTWfVBP5jTxeej6kPQYlbQFWHgVKl6avIfGzBAWjgB4tLDdbP2mFmh71
T+QhKaSgvANqqv4VT/5b99CNEG6keH6n8ZUW+vAZTMfvqkGa1qiwuS4JOtWmCAIG
yU/5+QKUtYMaZsFSlYg3o1n4J6lzA/s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:25 2025 by rpki-client