Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25380437-7ed8-3a81-afc7-d1a451b303c2.roa
File:                     25380437-7ed8-3a81-afc7-d1a451b303c2.roa (raw, json)
Hash identifier:          AiGbHYv8MfdQQ/PoV8m4i4tdgjyvABqtyij0Mu8d3Ko=
Subject key identifier:   3F:A2:E9:92:FB:8D:C1:D0:D3:C7:D6:BC:FB:3D:30:B3:C3:36:5A:73
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E08664EC14F766E589A36C280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25380437-7ed8-3a81-afc7-d1a451b303c2.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        35.241.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:4e:c1:4f:76:6e:58:9a:36:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=24fbac23-d06f-4a70-86b5-f9855a01ffab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:78:d0:0d:d7:c2:b1:05:fc:35:c0:1b:5a:
                    1b:70:4e:6a:12:19:c6:84:62:ee:53:76:2c:92:b8:
                    90:84:f9:6e:ff:06:67:d8:18:61:d6:ad:eb:14:09:
                    27:88:97:eb:cf:35:ed:56:06:83:8e:3a:7f:61:ed:
                    31:b9:2d:c6:d0:65:39:20:26:fc:38:6e:37:aa:65:
                    da:93:48:f8:44:50:56:79:96:20:8a:6d:dc:15:44:
                    2a:16:f1:57:b6:6d:3b:7e:74:d8:a7:8f:d8:8d:d7:
                    f0:a0:c2:2c:2f:99:f1:68:65:bf:3f:2a:fa:23:0e:
                    f9:0e:0b:a4:63:39:ca:3c:f1:72:bf:72:4e:e9:5e:
                    53:61:46:26:74:95:ef:19:11:c2:21:07:4e:93:39:
                    28:68:81:b3:ea:ad:c3:5a:97:6e:d4:9a:e8:2f:93:
                    50:06:15:8c:4f:33:cc:97:60:f1:41:2a:78:03:b4:
                    b5:fb:21:21:7f:54:9a:95:dc:ff:3c:87:89:8c:12:
                    ed:52:78:df:7b:c3:83:1d:54:67:e6:2f:a7:a1:12:
                    2f:fe:6c:fc:1d:52:a7:83:88:5a:6e:da:75:bc:ea:
                    50:14:07:68:1d:ae:8e:00:83:2b:d6:2e:93:20:fe:
                    17:68:46:a0:db:6b:71:0e:2e:50:75:d6:09:13:d4:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:E9:92:FB:8D:C1:D0:D3:C7:D6:BC:FB:3D:30:B3:C3:36:5A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25380437-7ed8-3a81-afc7-d1a451b303c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:45:d6:79:8b:35:5b:a2:a1:05:93:78:68:2c:37:4c:11:00:
         de:67:87:86:3b:61:28:bf:cb:ba:1d:b2:bb:71:b2:19:9f:71:
         9c:ad:ca:04:45:73:7e:7a:e5:35:6b:90:95:cc:02:06:c9:63:
         b9:3c:59:a2:15:a0:ee:de:68:67:21:35:ee:bf:a7:f4:61:7d:
         24:8f:e0:42:a7:56:00:9d:6a:25:bd:d0:81:0d:1f:68:6b:ba:
         70:42:5a:7d:01:36:0d:bc:b4:4a:f1:e6:32:f9:83:f8:3f:78:
         c3:c4:0b:0c:0f:ea:a2:af:ab:ce:2b:f4:06:62:a2:c6:bd:23:
         c2:e2:22:54:70:0f:9b:75:1b:fb:64:65:f1:86:e4:6c:8e:a4:
         b3:28:1d:0c:b8:36:94:4a:41:af:56:90:33:07:26:1c:fb:ae:
         a0:2a:03:3a:3d:d4:a4:fe:ba:ff:d7:c9:85:0f:8e:63:e3:09:
         0d:75:9f:90:57:d0:7b:ed:8e:95:b1:77:ec:08:b3:4d:c3:b3:
         00:c1:95:5b:39:09:45:7f:c3:90:dd:ae:4c:eb:5f:f7:d1:99:
         da:49:ee:bc:fd:e2:2e:30:2e:7c:b0:d6:56:a9:ab:32:d3:47:
         02:af:aa:6c:64:a1:00:e5:63:d6:69:7a:89:fd:2b:b3:09:6b:
         01:de:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:48 2026 by rpki-client