Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa
File:                     3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa (raw, json)
Hash identifier:          xLBe58XJq1kP6l9ox6ZK7MmP9LPPw0qk8G3ZKHo9A+g=
Subject key identifier:   F4:35:98:01:84:DB:73:3C:2D:47:CD:26:41:D0:AB:8F:15:98:42:BD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E0866046341CFB3634ED6D400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        35.188.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:04:63:41:cf:b3:63:4e:d6:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=2f366e7a-eac4-4d81-aa14-5194d9bd2241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:8d:b7:ce:cc:80:ae:76:30:ce:95:d4:b3:
                    46:ca:7d:dc:07:5d:1a:d2:cc:03:bf:ec:88:67:b2:
                    d8:b6:b0:ea:dc:64:ae:03:f9:65:04:dd:a0:c3:2b:
                    83:51:64:34:46:29:c0:2a:54:db:22:0e:b9:aa:6e:
                    e2:3e:ed:f8:0a:5f:e2:b8:b5:ce:57:f5:67:26:16:
                    a1:7a:6c:8e:3b:d5:a1:ac:ba:09:95:01:d7:ae:b8:
                    69:c4:4e:91:5b:a0:02:92:35:9a:cf:b3:77:a2:80:
                    db:5b:92:01:31:f0:0a:be:7a:40:13:40:a9:e1:8a:
                    a7:9d:2f:7c:7a:ae:35:19:9b:73:9d:69:89:08:4d:
                    03:48:70:c5:61:83:2b:a9:c1:5f:33:cf:37:8b:4c:
                    d2:31:c4:79:b8:4a:b9:0c:b1:3f:f3:d2:6a:fa:e8:
                    fb:db:78:cd:ac:81:f9:90:75:12:76:cc:08:76:3b:
                    62:01:92:f6:96:39:33:a5:d3:29:4d:f1:5f:99:bd:
                    1a:b8:41:03:e3:67:63:bf:e6:11:a1:1b:17:f0:d5:
                    88:24:96:c0:d1:30:35:4a:b1:e8:2e:27:c9:6f:2d:
                    45:2d:40:28:fe:a7:68:e7:a9:b5:9c:84:29:37:fa:
                    3d:e4:47:73:04:03:e5:2e:eb:29:6e:f2:8d:9d:af:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:35:98:01:84:DB:73:3C:2D:47:CD:26:41:D0:AB:8F:15:98:42:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:c2:6e:fc:e1:47:ff:bd:de:97:be:86:a7:1b:a7:be:df:
         04:ff:c6:3c:b7:55:4a:25:9e:fc:70:76:d2:65:c5:2a:af:0c:
         68:96:88:b7:69:4f:ad:85:cd:04:2b:a3:e8:e8:d6:93:9a:e2:
         df:c4:61:e7:85:64:ed:9e:8d:b4:7e:0d:50:d3:61:2d:bd:5c:
         14:6d:6d:e2:57:83:54:06:84:e3:e3:ee:2d:f5:32:a3:62:58:
         c2:be:ce:d6:29:b4:7a:39:c2:a8:3a:0a:70:84:42:6e:03:de:
         8b:47:ff:8c:27:d9:c8:87:b2:cb:45:67:1d:c0:3c:a5:3b:31:
         a6:5e:d0:3e:99:ee:fb:6c:cf:83:3a:6d:b4:fc:5c:ff:86:e6:
         9f:26:29:5a:34:02:e4:a4:15:a1:03:68:1c:6c:50:cf:ab:61:
         39:58:09:95:a3:86:5f:2f:3a:95:2e:e9:e3:82:62:73:6b:2e:
         87:96:80:08:f6:0e:52:85:8e:9b:9a:73:65:b1:f7:b5:a6:68:
         2a:ee:be:b2:de:45:44:11:6a:00:58:82:af:f2:af:0c:30:ab:
         a3:80:c4:5d:ef:5a:f4:20:d0:c4:89:4b:33:44:48:89:61:f8:
         0a:49:f4:77:be:ee:b2:75:19:ac:d8:50:72:23:96:02:c3:6a:
         88:99:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:50 2026 by rpki-client