Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
File:                     3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa (raw, json)
Hash identifier:          Pg5IGI8C2aQrHG7SW5HWuqjbsF9I9R600O3xlfjojpo=
Subject key identifier:   41:CE:A6:9B:78:B4:5E:CC:F1:B7:E7:54:B4:D6:82:B1:2C:D9:24:F5
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584F49752CDC726098F316190080
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     237
IP address blocks:        35.33.0.0/18 maxlen: 18
                          35.33.5.0/24 maxlen: 24
                          35.33.6.0/24 maxlen: 24
                          35.33.64.0/19 maxlen: 19
                          35.34.0.0/18 maxlen: 18
                          35.34.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:2c:dc:72:60:98:f3:16:19:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=84d8b5a7-840d-469c-a6d9-f8570bd6451b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:dd:64:3a:22:d6:5c:bb:4a:28:20:c6:0c:
                    c2:ee:c0:97:34:80:f9:3e:88:76:f0:65:3f:e1:c1:
                    23:55:94:8d:ea:f1:17:6e:22:ac:2b:71:03:5c:8b:
                    b8:a1:de:9f:32:0b:3a:09:53:cb:ce:0a:99:21:bc:
                    ac:ad:2d:ec:c9:ca:72:d8:22:30:28:cd:0f:68:1c:
                    28:19:f1:e2:92:60:55:e1:79:bc:18:6b:b5:89:fa:
                    48:ae:fe:f5:27:70:45:60:c8:8e:fe:45:67:a1:0d:
                    cb:27:87:3c:0f:0c:d4:19:ba:72:13:6f:d2:a8:dd:
                    1c:fd:e8:bf:08:4b:ca:49:5d:29:4f:54:9a:7c:af:
                    e4:2b:9b:b0:d2:f5:71:11:f3:80:eb:00:02:b4:07:
                    0d:4f:93:ab:9b:f9:52:a9:c3:00:14:1e:0e:f9:d4:
                    bb:a0:f2:ab:54:32:87:6c:c8:a9:28:e5:94:a2:f0:
                    ff:91:ba:d1:c6:1f:69:b2:e6:79:81:a1:a6:3a:e0:
                    74:c2:2e:e6:55:2a:97:0d:f6:0b:0a:cb:5b:30:7a:
                    69:c2:d2:c6:fd:fc:6e:bb:0e:a4:71:db:ff:1d:ed:
                    22:80:ab:c4:e8:5d:ff:0f:26:4c:cd:28:94:44:ae:
                    32:b1:b0:f4:58:47:1e:5b:fa:a0:57:23:49:22:b8:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CE:A6:9B:78:B4:5E:CC:F1:B7:E7:54:B4:D6:82:B1:2C:D9:24:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.0.0-35.33.95.255
                  35.34.0.0-35.34.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:91:e8:04:0e:d8:22:b0:18:9b:4a:3b:70:94:2b:10:9c:11:
         06:bf:69:71:e6:94:1d:bd:08:1a:c4:29:30:07:6b:e9:14:d9:
         83:aa:19:7e:43:54:90:29:dd:3b:31:95:62:40:c6:6c:90:50:
         69:e6:8a:e6:a3:2a:21:c9:23:13:21:40:e8:b9:7e:c7:c8:da:
         c9:32:d5:73:ef:37:8f:7a:27:dd:8e:f0:44:93:2a:9c:af:ff:
         68:40:b8:2d:06:a8:c6:bb:e6:52:00:ba:45:ec:32:17:f1:aa:
         71:bf:7d:dc:86:52:8f:4d:6b:2a:1d:b4:61:d2:8e:05:90:10:
         4a:5c:49:5b:16:76:da:a1:64:61:5c:7f:7f:1e:0f:43:ab:e5:
         72:d3:06:8c:7a:cb:56:31:6b:89:ae:80:66:80:69:4f:ab:44:
         5f:93:6b:b9:dd:90:e5:59:4b:18:5e:43:6f:29:89:97:ad:88:
         f2:a1:a5:57:b0:d0:cc:3f:8e:07:73:03:bf:30:7d:ea:51:11:
         3d:38:f0:19:65:d0:96:fc:1f:36:b2:af:48:51:58:76:1c:65:
         31:3a:55:c3:69:b2:c6:99:29:d0:4b:f8:aa:88:a1:8b:0e:df:
         12:cf:3d:4c:20:03:97:8d:d4:74:f9:20:f9:ed:0d:19:9c:23:
         26:59:ad:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:42:53 2026 by rpki-client