Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
File:                     bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa (raw, json)
Hash identifier:          tjtJFs5wsuYNPSMXR6kncU0Iz+GiWYkdjRm3ML5Z/0U=
Subject key identifier:   98:0C:78:96:E6:E0:AE:D7:83:B8:81:D2:94:27:D0:A6:2F:3F:87:FF
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584DD4C07457726C0440787AAF00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     237
IP address blocks:        35.38.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:74:57:72:6c:04:40:78:7a:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=a66a64f4-7105-43ea-9f86-a81f12ad300a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:9d:e2:78:47:08:75:bc:7d:7e:d5:39:82:
                    37:ca:b7:81:b7:4c:b2:c6:f9:73:7d:f7:93:a4:b8:
                    50:67:b6:2e:3d:68:7c:e8:90:56:f7:2b:d5:f2:ea:
                    6a:a2:e3:98:b5:36:6a:c4:cc:d7:b9:a1:39:71:89:
                    5f:36:ee:6a:1a:9c:45:9f:16:ba:73:16:a0:0f:35:
                    c9:2a:cb:14:a8:b6:74:c6:e3:2a:0c:a2:97:67:a3:
                    4a:d8:7a:95:c2:9a:ff:29:96:b4:d0:30:36:20:f9:
                    5c:d7:ac:b6:c3:bb:3a:39:f6:d8:92:4e:57:67:85:
                    04:35:9c:eb:2d:3f:30:b3:1c:be:fa:96:15:55:b4:
                    92:87:34:56:6d:11:4b:39:c8:88:a0:06:37:0b:5b:
                    07:d4:4b:8d:11:3c:ed:b4:51:2d:99:82:58:e0:e8:
                    24:2a:6d:c3:b9:4e:33:a6:92:19:e3:cb:67:dc:be:
                    c8:66:a5:70:85:ab:ab:d6:ea:3e:01:c1:6e:8b:a9:
                    7b:fd:88:c7:7e:cd:b9:a1:f9:60:00:09:d2:ae:aa:
                    c8:ae:a1:c7:62:3e:46:97:d1:b2:12:60:6d:8b:18:
                    59:13:59:5a:be:18:f5:f4:b7:d5:04:b8:96:00:7f:
                    2e:dd:2a:bd:f1:9b:47:ee:0f:7a:87:7b:cd:25:07:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0C:78:96:E6:E0:AE:D7:83:B8:81:D2:94:27:D0:A6:2F:3F:87:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:85:c0:63:4d:fd:57:13:fc:ca:0a:83:6a:4c:9f:67:f3:ed:
         5b:58:be:e2:4c:e2:83:f8:82:b7:c9:b8:6f:51:0d:3d:85:f6:
         5a:20:2a:bc:d8:32:30:5d:e6:25:3d:9d:03:96:1e:5f:ca:ca:
         bd:09:f3:27:b1:79:d8:78:29:c2:7e:f9:a4:74:60:83:a6:de:
         3f:f0:c6:84:31:9c:ab:08:40:8b:ab:81:c3:3b:e8:ee:12:40:
         89:50:90:7a:7f:3f:ce:41:c1:fd:87:16:20:42:fe:62:d2:aa:
         36:95:32:33:9b:d1:a5:a5:a3:35:c4:ae:65:13:92:36:53:5e:
         92:3d:9a:c6:04:9b:b1:45:80:60:a5:dc:f2:cb:c2:81:6d:78:
         10:73:c2:ad:4d:27:58:5b:44:69:91:70:ca:fc:c6:3e:dc:54:
         b5:c6:bd:47:e4:38:e9:4a:a1:1b:1a:c1:43:6d:93:09:e9:44:
         81:d6:b9:d1:b3:3a:aa:6b:79:51:87:4e:74:83:bb:2d:9b:77:
         b2:8b:ed:7a:af:09:d3:0d:79:2f:58:28:30:93:45:d3:07:89:
         ac:c3:c2:6d:59:f3:e0:ca:0a:53:51:88:38:23:4b:fe:e9:a7:
         83:30:59:1e:b0:f7:d3:08:a7:65:2b:a6:43:51:78:7a:d7:37:
         7e:c5:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:23 2026 by rpki-client