Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cf24162-0281-3820-84a6-c98cb60ff570.roa
File:                     5cf24162-0281-3820-84a6-c98cb60ff570.roa (raw, json)
Hash identifier:          r8RqkhkF3WQkBW8htT//ufhPZGEHLMilsaa3/AE8eIY=
Subject key identifier:   3F:AA:11:53:2B:67:D8:06:94:A3:8B:C9:3B:E7:5B:87:10:E9:28:FC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E08663C406B42757D467A0AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cf24162-0281-3820-84a6-c98cb60ff570.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        35.196.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:3c:40:6b:42:75:7d:46:7a:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=7bd497e4-3e62-491c-a22e-2c27b9dd61ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:c8:e9:20:64:23:5b:24:c7:d1:43:ca:5f:
                    e1:7f:7a:5a:e7:62:bd:c1:ab:e0:93:44:10:7a:9e:
                    1c:91:ed:3e:3e:0f:ac:96:44:31:dc:36:c8:b4:51:
                    8b:01:99:56:82:8d:a4:12:4b:20:a8:2d:eb:4e:50:
                    98:88:93:ee:fb:6c:0b:1f:36:6b:8d:f0:d0:59:10:
                    02:fe:89:b3:23:2c:7e:8b:0a:62:4a:41:a1:cc:0a:
                    77:46:bc:d0:ca:ab:3d:f6:54:18:c7:56:92:66:f1:
                    14:4d:74:05:46:a7:f2:7e:cb:8c:f9:54:2e:7b:95:
                    3a:d2:07:28:82:fd:bf:fb:60:39:85:39:8d:69:5e:
                    5d:d4:7d:08:4a:08:70:65:3f:08:82:b2:d0:a9:49:
                    b9:4e:f2:87:8a:8e:c5:69:f2:05:64:f8:2a:88:dc:
                    19:42:82:55:a5:b8:0f:5f:9d:50:95:31:9a:b9:fc:
                    77:68:f7:03:90:2f:63:f9:6c:52:9a:56:0d:b8:7c:
                    1f:0b:75:4f:bd:b5:e6:20:03:48:fc:7b:23:84:a9:
                    22:30:d8:3f:a5:87:de:ad:54:90:75:7c:bc:cf:0f:
                    23:0a:6a:b5:6e:9e:34:e1:a5:be:65:91:bd:fc:b8:
                    34:e5:e1:f6:77:73:66:76:5f:af:54:bd:fc:af:02:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AA:11:53:2B:67:D8:06:94:A3:8B:C9:3B:E7:5B:87:10:E9:28:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cf24162-0281-3820-84a6-c98cb60ff570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.196.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:3b:b7:00:f0:2f:e8:79:61:a8:dd:d6:c0:96:cf:3b:41:
         e7:f4:cf:79:32:34:3f:d6:25:f4:16:60:af:72:4b:29:d4:0d:
         99:81:f8:d5:91:ae:c4:eb:4c:d5:ea:ba:1b:b4:29:52:51:52:
         18:ee:ff:6b:0b:1d:97:35:42:f8:29:f8:10:02:03:4d:bf:cd:
         9a:b9:13:af:40:32:c2:48:d0:e2:90:c6:2c:cd:52:50:5f:d0:
         21:f7:f6:0c:67:d6:95:04:4a:01:24:0e:a5:1d:d2:f4:e4:00:
         d1:4e:06:00:af:1c:5f:ac:42:4e:3c:fc:82:f9:ac:3e:2e:e3:
         12:32:ef:75:cf:e7:6a:18:61:3d:33:5d:c9:84:bd:90:e0:90:
         b9:76:24:1b:83:60:ab:5a:cc:c7:21:b2:a6:10:30:37:39:3f:
         fc:fa:de:b1:d6:0d:ce:3b:a1:83:71:30:28:40:e6:12:55:40:
         74:00:76:28:3d:01:ef:e6:1e:51:09:f2:90:85:b3:f3:e4:c8:
         8b:b8:10:57:ef:48:3f:98:72:aa:04:39:3f:7a:22:f7:22:d8:
         60:58:ca:45:d6:85:bd:20:8d:14:a7:4e:9c:37:6b:72:33:50:
         77:a7:59:1d:de:7b:9b:af:13:0d:02:4c:ce:f7:77:70:01:25:
         0f:46:97:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZjxAa0J1fUZ6CsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
N2JkNDk3ZTQtM2U2Mi00OTFjLWEyMmUtMmMyN2I5ZGQ2MWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY/I6SBkI1skx9FDyl/hf3pa52K9wavgk0QQ
ep4cke0+Pg+slkQx3DbItFGLAZlWgo2kEksgqC3rTlCYiJPu+2wLHzZrjfDQWRAC
/omzIyx+iwpiSkGhzAp3RrzQyqs99lQYx1aSZvEUTXQFRqfyfsuM+VQue5U60gco
gv2/+2A5hTmNaV5d1H0ISghwZT8IgrLQqUm5TvKHio7FafIFZPgqiNwZQoJVpbgP
X51QlTGaufx3aPcDkC9j+WxSmlYNuHwfC3VPvbXmIANI/HsjhKkiMNg/pYferVSQ
dXy8zw8jCmq1bp404aW+ZZG9/Lg05eH2d3Nmdl+vVL38rwI9lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+qEVMrZ9gGlKOLyTvnW4cQ6Sj8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWNmMjQxNjItMDI4MS0z
ODIwLTg0YTYtYzk4Y2I2MGZmNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8QwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9DO7cA8C/oeWGo3dbAls87Qef0z3kyND/WJfQWYK9ySynUDZmB+NWR
rsTrTNXquhu0KVJRUhju/2sLHZc1Qvgp+BACA02/zZq5E69AMsJI0OKQxizNUlBf
0CH39gxn1pUESgEkDqUd0vTkANFOBgCvHF+sQk48/IL5rD4u4xIy73XP52oYYT0z
XcmEvZDgkLl2JBuDYKtazMchsqYQMDc5P/z63rHWDc47oYNxMChA5hJVQHQAdig9
Ae/mHlEJ8pCFs/PkyIu4EFfvSD+YcqoEOT96Ivci2GBYykXWhb0gjRSnTpw3a3Iz
UHenWR3ee5uvEw0CTM73d3ABJQ9Gl0c=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:27 2026 by rpki-client