Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa
File:                     238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa (raw, json)
Hash identifier:          s5D2XLjJAZZV4xzshSDO/BlGCpG5v0ceeFpMO8HxILQ=
Subject key identifier:   0B:4F:85:1B:AF:6C:86:D4:9C:47:73:0E:6C:F9:52:0A:A9:26:08:37
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E0865F0020E3765947630B660
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        35.204.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:f0:02:0e:37:65:94:76:30:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=20a6ac5d-6bb8-4ef2-af67-46e942d94cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:52:cc:0f:9f:0e:a0:58:15:e5:a7:f8:26:
                    d8:5c:16:75:35:9b:36:ee:5d:4d:96:cb:61:96:64:
                    94:dd:a8:f4:cb:9d:f5:a9:ac:78:49:15:26:df:fd:
                    92:68:d6:41:97:e2:c8:db:62:c5:c8:65:7d:94:61:
                    52:4d:7b:44:9f:37:b9:db:0f:9e:ce:09:91:c8:c0:
                    4a:5e:8e:2c:f0:88:87:ba:50:3f:78:fa:fb:7b:1b:
                    b4:54:c4:0e:e2:75:7f:73:c7:e3:97:a6:3d:f0:84:
                    a3:45:2e:38:e0:21:b6:67:72:2d:90:8a:41:1b:c5:
                    cf:b5:d0:e6:ec:56:0c:f6:50:eb:73:b5:50:de:37:
                    a3:a9:2d:67:d3:cb:d2:43:ab:b3:a1:1e:d2:94:94:
                    37:5a:e0:02:f9:2b:a8:13:b6:5b:28:b5:00:f5:3c:
                    c9:b2:d2:c9:0a:ea:95:f4:fb:ec:53:f1:b4:53:b5:
                    25:79:e5:2c:12:ac:04:01:5e:7f:8a:96:1c:79:ca:
                    6f:2f:fc:2d:6b:03:ed:bf:64:1a:85:38:09:e5:ca:
                    bf:5e:92:1f:ca:fc:0d:98:ec:13:70:21:bd:4c:48:
                    c3:d8:b1:90:36:57:32:67:cf:96:a9:78:ea:e9:95:
                    ff:07:3b:7c:e0:0f:c2:45:25:4e:6b:40:03:07:95:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:85:1B:AF:6C:86:D4:9C:47:73:0E:6C:F9:52:0A:A9:26:08:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2b:99:3b:f3:4b:7e:53:92:07:1c:ac:aa:96:79:37:c2:13:
         0f:1b:a8:87:71:0e:86:69:1d:47:8c:17:9e:71:c5:cd:37:a0:
         08:10:36:f6:4d:44:92:28:99:1f:40:40:b1:66:cb:43:b5:2f:
         d0:1d:9f:ac:5c:bf:bc:f3:3e:04:60:68:1e:2c:34:ec:b6:9b:
         14:f9:fe:47:8c:65:91:02:48:45:3e:40:56:bc:8f:cc:2f:be:
         e7:28:91:af:c5:3e:39:64:72:93:ab:38:67:3a:10:f9:5f:8d:
         e4:05:cd:de:87:76:24:9d:02:67:15:1c:77:fc:13:a2:a6:52:
         dc:72:3a:91:b4:38:ba:18:e2:60:ab:44:1e:c9:40:a5:77:7e:
         61:00:47:75:56:a0:98:7b:1c:5c:7f:22:f5:3a:8c:26:b9:02:
         da:6d:be:70:7c:80:6e:90:93:ac:cd:2f:72:51:dc:9b:7c:32:
         6c:99:7d:7a:7f:f3:84:66:92:f5:6e:fd:1a:53:e3:21:5f:52:
         67:1f:67:fa:ad:dc:3b:b8:c3:16:26:b2:f4:4d:be:33:e5:7c:
         d8:ff:dc:3d:97:c4:06:0e:2a:41:62:f1:ff:da:43:d7:25:c1:
         e9:8b:bd:2a:7e:81:3b:66:39:ef:44:31:58:f0:75:48:df:7d:
         e4:99:e3:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZfACDjdllHYwtmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
MjBhNmFjNWQtNmJiOC00ZWYyLWFmNjctNDZlOTQyZDk0Y2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRVSzA+fDqBYFeWn+CbYXBZ1NZs27l1Nlsth
lmSU3aj0y531qax4SRUm3/2SaNZBl+LI22LFyGV9lGFSTXtEnze52w+ezgmRyMBK
Xo4s8IiHulA/ePr7exu0VMQO4nV/c8fjl6Y98ISjRS444CG2Z3ItkIpBG8XPtdDm
7FYM9lDrc7VQ3jejqS1n08vSQ6uzoR7SlJQ3WuAC+SuoE7ZbKLUA9TzJstLJCuqV
9PvsU/G0U7UleeUsEqwEAV5/ipYcecpvL/wtawPtv2QahTgJ5cq/XpIfyvwNmOwT
cCG9TEjD2LGQNlcyZ8+WqXjq6ZX/Bzt84A/CRSVOa0ADB5VgRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtPhRuvbIbUnEdzDmz5UgqpJgg3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM4MzI5Y2MtOWQ3Yy0z
M2JkLTljYTEtNmVlYWEzOTM5ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8rmTvzS35TkgccrKqWeTfCEw8bqIdxDoZpHUeMF55xxc03oAgQNvZN
RJIomR9AQLFmy0O1L9Adn6xcv7zzPgRgaB4sNOy2mxT5/keMZZECSEU+QFa8j8wv
vucoka/FPjlkcpOrOGc6EPlfjeQFzd6HdiSdAmcVHHf8E6KmUtxyOpG0OLoY4mCr
RB7JQKV3fmEAR3VWoJh7HFx/IvU6jCa5AtptvnB8gG6Qk6zNL3JR3Jt8MmyZfXp/
84RmkvVu/RpT4yFfUmcfZ/qt3Du4wxYmsvRNvjPlfNj/3D2XxAYOKkFi8f/aQ9cl
wemLvSp+gTtmOe9EMVjwdUjffeSZ418=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:30 2026 by rpki-client