Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa
File:                     fd3c689e-2c7d-3a88-b382-65c29503a941.roa (raw, json)
Hash identifier:          6owMukpVBI6I0zOREb6hTn+UlSwZBzXAMGH3+U19owA=
Subject key identifier:   6D:AA:EE:7F:13:D7:D0:F0:DA:DE:1B:DA:83:73:A6:03:85:61:C4:22
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E08663AC3DD972269079DDE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        35.238.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:3a:c3:dd:97:22:69:07:9d:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=da63e0ed-97de-4055-be73-1a4e25d408a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:11:3a:df:76:f9:ad:a8:c9:df:2e:48:fd:
                    82:05:29:bf:b1:7c:9a:de:b9:b5:ed:e6:c0:f3:6a:
                    93:33:fa:c9:e7:93:96:66:b9:a0:a5:a0:4d:68:af:
                    b8:50:e0:ee:23:57:8c:a9:d1:bf:74:32:95:d4:1f:
                    b5:96:97:ba:f1:8c:a1:87:1d:62:b9:91:0f:3f:ad:
                    2e:dd:fa:24:b9:24:84:13:96:d7:28:67:a4:f0:ba:
                    7f:7d:f8:e5:f7:87:af:f2:e3:6c:44:3b:55:07:cb:
                    df:3b:e4:9c:24:65:b2:13:97:60:bf:96:f5:23:36:
                    6e:de:8e:19:32:9e:ee:cf:99:19:97:2c:1c:54:1a:
                    b3:99:5e:5c:1a:d7:20:da:2e:93:12:ad:7c:90:2d:
                    b4:91:42:f6:c2:37:49:23:86:66:a7:fb:4d:4a:ea:
                    2d:b7:27:17:13:73:1f:ff:5d:a8:cf:be:27:d8:67:
                    d8:12:7a:d9:63:b8:66:9b:19:48:f9:45:0c:17:6f:
                    b3:7b:78:22:ee:5e:41:74:9d:a8:18:03:5f:b6:3e:
                    bc:04:db:21:0c:28:c9:23:93:62:f1:57:27:8d:bd:
                    3e:1c:45:94:76:8d:9b:11:45:e7:38:99:64:44:df:
                    b5:2a:91:5e:89:0b:38:03:41:9a:ff:5a:d1:a3:d9:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AA:EE:7F:13:D7:D0:F0:DA:DE:1B:DA:83:73:A6:03:85:61:C4:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.238.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:1f:e4:b7:4f:2f:86:fb:ec:4c:12:ca:1b:a4:ea:86:30:
         0b:f0:88:3d:b2:91:8a:02:f9:ef:6a:f7:aa:d0:95:a0:ce:02:
         d5:d3:a4:fc:0c:84:a5:28:bc:b4:cb:d1:e0:e4:a3:bd:a1:36:
         f0:a1:d8:63:1f:93:0e:d2:90:46:06:21:fb:9f:cd:18:fe:43:
         77:ab:4a:a6:ef:e6:04:a7:7c:0a:12:fd:5d:d0:f7:ef:fa:24:
         2f:d6:28:9b:c2:68:dc:97:9a:6d:d8:26:a9:14:21:19:20:fe:
         dd:c1:eb:31:72:45:07:3b:5f:d7:20:7d:a0:0b:51:4e:65:ff:
         aa:99:81:8e:bf:2d:b8:24:dc:97:df:b5:6e:e9:7f:1b:af:ac:
         10:22:d2:8f:74:9d:62:bf:ee:7f:db:fd:d3:99:aa:0c:60:f7:
         ab:89:a4:88:cc:04:4c:23:6e:78:32:92:e6:61:c6:0e:26:74:
         9f:f8:ec:59:6c:c3:e9:44:90:98:6f:97:21:b8:2b:1e:78:30:
         bf:c6:57:90:e6:41:e3:a2:21:d0:43:b1:6d:a7:b0:7e:06:a3:
         e7:26:18:72:b1:5c:a1:b3:da:72:d9:87:66:4c:dc:80:69:c3:
         35:8c:7c:22:ff:77:99:93:12:df:e4:eb:5a:4a:cf:c2:ba:55:
         b6:22:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:45 2026 by rpki-client