Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/30ef6fc6-8762-3fdb-a135-3a06918c1169.roa
File:                     30ef6fc6-8762-3fdb-a135-3a06918c1169.roa (raw, json)
Hash identifier:          hdh0ghG/bAZh8Lnoy510Ov14YWV27/o90R+HvE9elKs=
Subject key identifier:   41:BD:13:5D:52:19:FF:CA:B0:37:6C:A2:D7:6E:D6:D6:CF:01:E4:82
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584CEA5CF1CDD24F56DF86FC2710
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/30ef6fc6-8762-3fdb-a135-3a06918c1169.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     237
IP address blocks:        35.7.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f1:cd:d2:4f:56:df:86:fc:27:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=4492d0ae-895b-49c1-94d6-3db80c138cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:d5:b5:27:eb:43:e5:7a:d6:a7:0f:4b:1a:
                    74:00:2e:82:59:45:64:5b:47:df:51:61:1d:7f:83:
                    84:c6:6a:09:d4:52:ba:c0:a3:19:6b:e7:ec:27:48:
                    cd:13:ff:1d:38:d0:0e:b9:79:4e:62:80:1f:75:60:
                    c8:40:df:75:d3:55:df:d3:6f:25:69:19:56:2e:7c:
                    ba:de:fe:c6:ac:1a:9a:df:5a:5b:c6:c4:a8:4d:39:
                    e6:be:86:fe:38:2e:10:ec:ad:4e:1d:3b:32:d5:ba:
                    42:e5:7a:1f:cf:ad:2f:10:3e:5c:3f:1a:7f:f4:56:
                    12:38:95:72:9d:90:d1:2c:d6:fc:dc:dc:c7:00:80:
                    b2:61:85:96:00:09:41:f8:32:a4:a2:66:59:14:45:
                    62:4e:0d:d0:50:57:3b:f5:31:bf:3b:d1:6d:d3:90:
                    84:3d:4c:84:ab:db:ec:1d:44:ec:d7:d9:b9:8e:fb:
                    0d:e4:84:d7:2d:d3:7a:60:3c:a2:5d:92:82:35:4d:
                    7b:67:32:d4:37:e0:8e:db:51:5e:4e:62:1a:ea:68:
                    37:82:d2:02:3c:11:86:1c:56:a0:26:bc:8e:d0:08:
                    f0:f4:b8:ef:59:8d:5c:c2:00:e0:db:66:eb:3f:51:
                    a3:6d:e4:99:ef:58:7a:1d:99:c3:3e:b3:40:b3:59:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BD:13:5D:52:19:FF:CA:B0:37:6C:A2:D7:6E:D6:D6:CF:01:E4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/30ef6fc6-8762-3fdb-a135-3a06918c1169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:19:da:70:cc:4b:41:c9:aa:1f:69:43:08:5f:dc:10:b6:4c:
         8a:77:94:7c:17:8b:f1:3d:56:af:a4:08:ae:db:6e:c6:2e:ea:
         9d:ce:f1:3a:d0:97:16:aa:47:fd:82:e2:df:7b:5a:4e:4a:07:
         88:77:70:32:c2:9a:aa:79:37:c7:69:5c:dd:61:a5:6b:1f:41:
         14:3b:64:7c:00:8e:e0:9f:12:a4:8b:d9:c5:ba:90:75:48:97:
         78:ca:10:64:37:41:54:ab:ce:ec:b7:cb:8a:0f:0f:f1:ce:5d:
         86:3a:e1:f7:f0:fc:ac:ea:26:af:fa:5a:c6:32:17:80:dd:2c:
         90:d6:d8:cd:2d:d9:ca:ab:c1:ab:ed:3a:5b:20:ad:c2:2e:d3:
         f6:07:3a:b5:cd:1a:3f:33:6f:f8:c5:08:c0:42:0e:3e:89:ea:
         27:9e:c4:2c:a5:66:db:5d:ce:fa:ec:41:a8:72:e8:51:bb:73:
         40:42:5c:76:16:9e:97:ae:bf:50:cf:45:e1:1b:46:5a:21:e6:
         13:be:3e:37:86:dd:ea:c6:96:8d:65:05:18:47:e0:9d:e1:f2:
         9b:ec:90:cb:55:b8:5a:d9:bc:1d:de:fd:ec:95:d7:2c:4e:a9:
         9a:36:13:3e:87:54:7f:1d:5e:0d:46:0c:86:6d:ef:46:c2:24:
         76:9a:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:06 2026 by rpki-client