Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d86529dc-f062-3766-98b6-ebc6232a14e3.roa
File:                     d86529dc-f062-3766-98b6-ebc6232a14e3.roa (raw, json)
Hash identifier:          vyfaEFLgfS1K/4lTRaYoeIj1g+fYR7Ur0yrENXC7nPc=
Subject key identifier:   C4:E6:AD:CA:A5:ED:BA:C5:13:B3:1A:33:91:F8:49:9F:2F:66:2C:22
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E086637E5DED60C80404C7D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d86529dc-f062-3766-98b6-ebc6232a14e3.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        35.224.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:37:e5:de:d6:0c:80:40:4c:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=b934a15f-5290-4a03-b003-997f2c8c4e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:f8:87:31:bf:d7:33:2b:4a:4d:bc:b7:22:
                    1a:a5:52:4a:08:38:b0:81:f2:62:b0:e1:ab:12:1d:
                    25:32:e8:54:39:13:e6:c7:ed:7a:3b:a9:53:b1:e5:
                    43:49:97:e8:fe:54:3e:e5:e7:06:78:5c:e6:9b:d6:
                    a2:ca:5e:a0:c3:9f:6d:24:58:f1:c8:48:19:c7:ff:
                    88:79:c8:d4:36:62:8c:dd:23:95:76:76:f7:f1:8e:
                    35:19:1b:05:7e:4f:0b:4f:6c:6f:a1:46:68:93:28:
                    ca:30:0c:13:58:92:3a:65:1e:ea:43:94:66:57:a3:
                    1f:5b:2f:91:8b:d0:a4:db:90:ce:24:02:d9:7f:e9:
                    94:95:01:fb:e1:86:4c:40:f6:c9:26:b6:ad:9d:d9:
                    22:87:61:2f:aa:88:db:a9:96:50:a9:f7:95:32:1f:
                    87:66:55:16:ec:3a:54:d7:ed:12:e6:d4:1b:bd:90:
                    54:0d:63:3c:d9:28:2b:50:f8:22:cb:37:a7:26:f7:
                    3c:e3:6a:6a:27:76:e8:0f:21:e3:76:6e:33:83:60:
                    31:45:a9:e0:32:31:46:72:6e:d9:7e:80:10:60:5f:
                    a2:5e:e1:15:2a:f8:ce:7d:f9:50:94:b4:b7:9b:44:
                    c4:bb:68:14:fd:6d:8c:73:17:34:c3:47:ea:64:e1:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E6:AD:CA:A5:ED:BA:C5:13:B3:1A:33:91:F8:49:9F:2F:66:2C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d86529dc-f062-3766-98b6-ebc6232a14e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.224.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:7c:3d:fa:69:9c:6b:b4:3a:5c:87:c3:03:a3:c4:2d:76:40:
         ad:91:ad:ac:40:43:d6:ca:2e:3e:9d:bf:94:5e:ff:79:8d:35:
         37:da:b7:7b:cd:fe:8e:30:78:dc:8e:3d:ee:ba:b6:1b:1a:bb:
         f4:77:8e:7e:ba:39:58:f4:06:5c:16:da:07:d5:6b:e6:c1:e0:
         fb:99:80:da:62:ec:9d:50:f2:c8:b0:ff:f4:f8:be:54:7e:af:
         5f:64:26:00:f5:a4:23:ca:3b:c1:15:ff:d5:5e:30:3e:95:d7:
         39:66:67:bf:a0:41:ac:95:36:06:0b:3a:25:23:86:1e:1e:26:
         00:03:0e:26:f3:55:22:03:e2:44:2b:75:ba:e8:98:bd:35:73:
         7b:82:dd:29:ba:87:a6:ae:ba:c3:90:b1:90:03:84:72:0d:6e:
         e3:15:62:50:83:c7:06:17:45:9c:00:8b:67:6f:03:61:02:80:
         4a:05:99:f3:60:4b:b8:96:57:e7:78:f7:18:e1:50:56:dd:d3:
         ff:9b:97:2a:fe:ed:10:70:d8:90:ab:2e:65:f1:f9:34:1c:1c:
         df:3a:a2:d3:07:5e:3a:c9:38:27:09:ac:08:c8:49:5f:b5:fd:
         8f:56:fa:a0:e7:84:b6:9d:d6:f3:4b:46:f0:a9:a6:e2:fe:47:
         9d:f7:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:38:58 2026 by rpki-client