Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10550312-4a33-3ef5-8db6-64cf13bab74e.roa
File:                     10550312-4a33-3ef5-8db6-64cf13bab74e.roa (raw, json)
Hash identifier:          HMz346dG7KMKgJJ6RtIBLy2LyzKTHo1NnF1pdfcjhIU=
Subject key identifier:   DC:07:BF:04:E6:75:40:C1:02:2F:F3:79:1F:42:44:7C:69:B5:02:23
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA787B600E234EADFA23DFD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10550312-4a33-3ef5-8db6-64cf13bab74e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        35.214.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:b6:00:e2:34:ea:df:a2:3d:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e1c36ff9-b851-438f-a342-6d0f879b7410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:3a:80:c4:ef:da:c0:9a:91:6f:c7:6d:2a:
                    ee:d3:24:b4:dd:83:0e:21:2e:4b:18:4d:28:78:06:
                    29:a0:1d:a6:55:18:70:3b:6d:9c:cb:da:cf:b1:b4:
                    da:52:99:eb:c8:9c:d8:c5:93:c9:3f:de:75:23:97:
                    c1:f6:9d:69:44:df:3d:48:7d:1b:48:53:b9:33:ae:
                    b2:7d:2b:1c:e2:a3:f6:cb:ef:22:a5:58:7b:ab:f3:
                    58:4a:15:22:a8:d9:29:8f:af:c3:a6:d5:21:51:e4:
                    de:43:4d:ab:2e:5c:d4:bc:de:ab:88:f0:ea:86:48:
                    b4:66:41:66:aa:3c:f2:92:73:9c:fe:6b:09:f9:fc:
                    2f:dc:ca:81:e0:02:00:b4:74:59:0e:cd:d2:e2:db:
                    f4:6a:95:ac:1a:cf:3d:b5:03:f0:39:d7:ea:2f:fa:
                    9b:1f:1e:84:a8:78:5d:d6:84:23:a7:c2:fa:7c:00:
                    60:a2:1a:6f:da:18:05:97:aa:c4:28:70:c1:02:3d:
                    70:c7:c8:ce:bc:e4:60:cc:e9:0c:31:c4:fe:f8:18:
                    77:55:51:88:c7:72:ad:2e:47:0b:46:00:27:8b:e6:
                    f5:6e:9a:f0:52:42:cd:61:a2:e5:ca:84:a3:c1:50:
                    2f:9c:00:fd:8f:90:08:e5:0d:17:77:14:8d:25:66:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:07:BF:04:E6:75:40:C1:02:2F:F3:79:1F:42:44:7C:69:B5:02:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10550312-4a33-3ef5-8db6-64cf13bab74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.214.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:e2:6f:46:31:18:d8:c4:fa:d7:4e:33:e6:fa:44:a2:0d:
         4c:7a:f9:b8:91:f6:a4:66:f5:81:06:76:1e:b2:ac:55:fe:60:
         31:a1:68:fb:74:b7:a9:35:bf:7e:a5:50:c0:24:9f:ac:a0:e9:
         19:38:8f:42:45:1c:31:a2:57:be:5e:45:1c:4d:44:4d:e2:5b:
         a4:4b:c0:83:0b:a7:89:34:c8:dd:c7:14:d6:26:36:64:a1:68:
         ad:a6:53:b9:c2:e6:d9:62:96:ae:91:be:20:7e:50:b1:60:45:
         f3:4c:a7:bb:7e:6c:fa:df:0f:d9:15:8d:aa:3c:0d:40:35:fb:
         b5:7d:a1:c6:f4:42:b0:2a:2e:f2:cf:c1:ee:56:60:8d:45:72:
         eb:ed:e6:96:89:33:93:0b:c2:77:a1:17:9a:f2:52:92:d3:4e:
         a5:e8:ec:52:66:49:40:c4:d4:69:c3:2d:1e:d3:5e:08:2e:77:
         0c:5c:f8:4a:98:1d:33:52:8f:e3:3e:6b:97:08:40:45:78:14:
         d5:fd:90:bd:20:2d:93:15:84:74:2a:5a:b8:80:e0:65:bf:ed:
         92:c3:18:2b:e3:62:94:b7:ef:ee:65:3d:63:2b:8a:f8:7b:1d:
         69:bb:16:0a:fc:81:1b:9c:90:21:cc:9e:85:ae:e3:e0:14:2a:
         37:27:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:25:06 2026 by rpki-client