Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ebdcac-2aaf-3660-b9da-f2e6a7164471.roa
File:                     01ebdcac-2aaf-3660-b9da-f2e6a7164471.roa (raw, json)
Hash identifier:          GMcultMdawf03VloRiQ9CV7c4bxuTNMIL0jUzvqJfb4=
Subject key identifier:   78:56:69:7F:17:6C:BA:A1:19:67:1E:B1:31:70:46:1B:BB:DD:7E:E6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78532AF27E681BED857F680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ebdcac-2aaf-3660-b9da-f2e6a7164471.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.194.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:32:af:27:e6:81:be:d8:57:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=779c458e-0420-4fc2-8ccc-2a481b41aa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:23:02:54:12:04:10:ef:68:27:4d:43:88:
                    2c:04:db:be:c7:58:45:00:0b:4d:60:aa:05:03:c2:
                    c6:eb:af:c2:af:8f:fc:5c:d2:20:8b:a3:4a:74:2b:
                    dc:90:d2:fa:9b:fc:25:73:87:73:b4:6c:15:4f:7e:
                    41:9e:9f:da:e5:71:cd:94:b9:a9:e8:89:3e:05:01:
                    aa:c6:fa:b6:a4:17:22:7f:de:3d:9b:fc:3c:79:dd:
                    3e:55:0e:9e:e0:e8:00:d3:fc:06:0e:56:09:7e:9b:
                    e8:0b:88:89:06:74:78:47:fc:b6:14:34:93:aa:86:
                    6e:e7:8f:d3:42:27:ce:47:c4:6c:e8:70:8d:3f:64:
                    7d:25:d4:60:cc:ae:46:94:ab:fd:8f:81:d9:d8:af:
                    74:f6:3a:d1:1b:92:bf:c5:44:0d:e0:1b:5c:5c:18:
                    72:0e:20:bd:74:b4:8e:5d:ad:48:fd:79:ae:25:c8:
                    9d:fe:ab:4f:16:f5:52:53:e9:9d:2d:ec:aa:f6:e2:
                    6d:06:49:ce:be:35:14:68:a8:eb:84:60:ce:bf:e1:
                    87:aa:45:07:81:f3:4a:0a:59:d1:cb:0a:ce:38:7f:
                    db:58:48:06:3d:6e:5d:e3:09:bb:55:13:5d:69:13:
                    65:05:2f:6e:ed:3d:26:fe:86:f8:13:8f:c1:88:ed:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:69:7F:17:6C:BA:A1:19:67:1E:B1:31:70:46:1B:BB:DD:7E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ebdcac-2aaf-3660-b9da-f2e6a7164471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:a8:c2:b8:5c:36:0d:48:09:a9:7c:6b:d2:01:2a:b1:ab:
         56:0e:dc:39:21:4d:39:09:7c:d6:d6:71:ef:39:ea:86:1e:76:
         cc:42:06:ea:5b:32:6d:f1:65:bf:e1:74:4b:68:b3:6e:62:ec:
         f9:9f:d0:46:81:bf:e7:b9:d9:09:13:78:e8:29:0e:d7:4c:be:
         94:b1:a3:a3:d1:a6:87:21:bb:30:68:66:3f:3b:4b:63:bb:27:
         47:28:39:b8:a0:47:2f:dd:d4:21:f3:37:bc:3f:65:19:a3:7e:
         54:45:75:61:5c:fd:b5:70:8d:59:3e:f3:16:56:f1:0d:29:d7:
         a9:fe:9d:10:3e:08:10:af:5c:df:07:ba:82:07:41:52:31:3e:
         c3:a7:18:3a:da:83:73:ed:c3:90:bf:ff:c7:66:1d:2d:83:65:
         04:39:79:ef:ed:93:31:31:cc:98:39:7b:9e:87:8b:f1:8e:de:
         c7:e5:6e:e9:cc:c5:66:b1:2d:8c:12:4a:1a:ee:e5:65:7c:0e:
         53:eb:3e:95:98:cd:bb:5b:ad:f0:f7:e5:97:75:e5:95:ec:ac:
         1d:8f:56:c9:5d:3e:ec:62:65:52:c4:d7:67:ab:e8:1d:13:22:
         fb:81:b9:2f:61:2e:6c:3d:77:7e:cf:f4:eb:b7:ab:86:4a:d0:
         2a:db:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:38 2025 by rpki-client