Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4705013-fea2-3c11-8973-e4b65b58ffdd.roa
File:                     d4705013-fea2-3c11-8973-e4b65b58ffdd.roa (raw, json)
Hash identifier:          XvFemXwzs5fn7w7czZ7rk/r33BuJNvcMsgXqq3mWGbQ=
Subject key identifier:   9D:B2:0A:80:84:AB:12:F9:49:34:4F:AB:1C:14:BA:6E:10:11:02:51
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E0865EFF6A8AF736B68B48C43
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4705013-fea2-3c11-8973-e4b65b58ffdd.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        35.194.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:ef:f6:a8:af:73:6b:68:b4:8c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=56560abb-1696-4f05-8005-125505f5512c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:66:35:72:09:c2:02:03:17:47:55:ab:82:
                    d4:d9:89:91:4d:b1:72:8c:40:3f:28:7e:93:4c:f1:
                    7e:f7:8a:c2:5e:bc:58:19:5c:e8:ab:42:5a:b2:2e:
                    71:b9:cc:df:46:e7:c2:a7:03:23:c6:3f:5b:43:8b:
                    41:78:4f:c5:c5:65:c1:07:0b:0f:a4:5a:55:3b:dd:
                    c7:bf:02:8c:d3:64:d1:1c:c9:2d:50:44:5b:b4:0a:
                    81:31:08:25:68:ed:0d:b0:81:e8:9b:13:1f:1d:87:
                    c4:02:9a:6b:ac:e0:51:72:4b:ee:df:7f:0f:dc:d3:
                    18:13:89:0b:ea:e6:ba:21:0e:c1:a9:aa:c5:9f:e0:
                    5e:ce:46:d8:f0:ec:a9:c5:19:1f:a6:24:d6:c6:7a:
                    3a:4c:71:c1:ce:5c:c3:00:f1:d2:1e:2f:04:54:3a:
                    8c:0a:2d:cb:15:74:0e:d3:26:01:c5:2f:0b:b5:7a:
                    e2:ae:bb:a3:97:12:12:d7:3f:31:c5:b5:64:5b:e9:
                    18:62:4f:27:af:cf:15:c1:69:ba:80:60:b0:de:ae:
                    d9:93:b8:8e:a9:71:d9:ff:6e:c0:22:ce:9c:d5:7b:
                    b5:f7:15:52:99:a5:12:7a:53:a4:25:6b:76:a6:cd:
                    d1:7e:66:38:85:56:c3:1f:38:9b:9a:fd:eb:18:c6:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:0A:80:84:AB:12:F9:49:34:4F:AB:1C:14:BA:6E:10:11:02:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4705013-fea2-3c11-8973-e4b65b58ffdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:ab:bf:7f:09:7c:8f:c0:9e:41:53:89:26:1d:5e:ca:d9:
         50:21:c7:95:59:d5:84:4f:65:3a:50:ab:33:17:2f:a0:4c:19:
         9f:36:9e:9a:76:8a:1b:e1:94:40:cd:5f:62:c2:dc:a3:04:89:
         e4:54:3b:86:9a:d1:51:9e:61:43:68:25:8b:9f:24:0a:fb:c0:
         2b:7e:8f:36:b9:f0:b7:fa:34:f0:6e:5f:65:39:18:20:74:c3:
         01:47:89:31:56:64:28:3a:c0:c7:c5:0d:75:cd:13:e9:63:06:
         4e:88:15:c3:65:92:cb:9a:66:68:60:f4:46:13:70:1d:a6:d5:
         9d:0d:fb:9f:5e:41:62:e1:f8:6f:8d:69:46:91:43:1b:4a:5e:
         ff:91:8e:3b:2b:06:e5:62:d2:e1:b4:f6:dd:1f:88:66:4d:a6:
         ea:90:e4:a8:d4:54:66:4d:a8:38:96:8f:90:ec:fa:95:77:c9:
         98:93:db:8d:cf:a8:e3:55:e9:0c:52:d4:f3:f1:11:1f:3b:21:
         6b:92:57:0a:16:4f:0d:52:82:44:04:b0:fc:a9:d0:20:70:03:
         2d:53:97:eb:d4:a9:f8:8f:9f:82:33:a6:d1:b5:2a:b0:ca:5d:
         5a:7d:60:b7:72:5c:f8:53:f4:76:98:93:a6:21:d9:d5:4b:74:
         97:e9:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:10 2026 by rpki-client