Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa
File:                     c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa (raw, json)
Hash identifier:          EE92Mm4JKOqoYQ4yl2lX4hHgM9VQefFchTFvjYT2EWc=
Subject key identifier:   3C:2F:C1:4E:FF:82:DC:CA:80:10:DF:80:F5:D7:3B:B0:1A:91:9C:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E0865F2CD1B360A141EF75600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     19527
IP address blocks:        35.216.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:f2:cd:1b:36:0a:14:1e:f7:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=023bb858-f0d4-4305-b23c-4b51db1cad06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:c1:3a:d1:5f:04:d2:f2:72:cb:4a:ad:31:
                    ac:06:5c:4e:70:37:18:79:f9:53:1b:51:11:c6:bd:
                    f2:a2:f6:c3:c9:ea:c0:ce:6e:58:49:ae:8f:7a:09:
                    f7:25:c0:c9:1c:0b:36:67:d3:f9:81:ea:c0:c7:1d:
                    43:cc:56:18:c2:fc:f5:3f:50:ac:d0:00:da:8a:bf:
                    57:f2:09:84:9f:f7:57:d5:64:b9:9f:33:09:ee:f9:
                    66:28:ae:e2:03:84:7c:11:30:f4:93:ff:14:c2:1f:
                    43:d8:08:81:28:a6:a8:d7:44:44:bb:57:fb:d1:19:
                    7b:f3:64:a9:9a:91:27:80:0e:93:46:06:f7:62:01:
                    07:67:09:46:a3:09:c1:7e:bb:7e:b7:74:c0:75:62:
                    d0:e5:9e:d7:00:78:73:75:c5:a4:e2:ae:a8:43:59:
                    2c:e3:7b:5a:55:f2:80:fe:06:a3:8a:8c:1f:28:6a:
                    64:48:b6:a1:20:27:51:f1:ce:4f:aa:99:4b:f2:4e:
                    ee:df:d0:4f:ae:d5:33:19:5b:47:48:e1:92:16:e0:
                    8d:97:05:46:4e:c8:67:64:03:c6:46:7c:da:1c:83:
                    e0:01:83:ef:67:a2:ac:4f:62:4f:fd:d2:82:4e:ce:
                    0b:de:1d:88:77:69:f8:d5:ac:2c:82:81:72:5a:02:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:C1:4E:FF:82:DC:CA:80:10:DF:80:F5:D7:3B:B0:1A:91:9C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.216.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:85:af:47:50:18:0e:10:81:7d:ba:1c:a6:5f:b3:ae:39:
         40:d1:93:10:89:1d:60:c3:33:f0:5f:f5:09:d6:23:ca:10:ae:
         d3:32:c5:d6:30:8a:63:fd:51:4c:c1:38:53:5b:9e:84:e1:de:
         1f:98:84:35:16:43:b8:74:81:c5:1d:58:f7:f1:0e:29:70:80:
         6a:30:cc:6f:5a:45:6d:9d:95:75:e3:dc:aa:70:fc:ad:90:a8:
         75:d6:60:eb:5f:6b:80:36:9e:44:12:7c:55:4d:c1:7b:d4:ad:
         ca:fa:6e:73:04:81:ec:32:3f:c9:4b:cf:52:32:7f:c6:9f:7c:
         81:89:f5:23:b3:3c:cf:33:5d:96:b5:0f:88:7b:59:d9:e1:a9:
         b7:19:b3:38:34:81:85:e3:8b:be:ce:78:62:dc:73:23:32:16:
         fd:b3:9d:c2:29:78:bf:1b:c7:c5:19:a4:6d:f0:93:dd:5d:4c:
         19:ca:7d:f1:96:fa:72:00:1c:a7:da:2a:81:61:80:92:49:ad:
         19:b3:af:7f:48:13:f6:1c:2d:46:04:a7:78:fa:0c:7f:36:45:
         cc:bf:3f:e7:77:9e:3f:52:54:57:b2:21:87:10:2f:69:f4:d0:
         fa:7e:8d:4c:fb:31:70:f1:5f:c9:5a:6a:6b:78:2c:ff:6b:bd:
         1a:41:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:31:31 2026 by rpki-client