Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14d651bd-49b9-3123-b683-12fe6b38f610.roa
File:                     14d651bd-49b9-3123-b683-12fe6b38f610.roa (raw, json)
Hash identifier:          0CflNWahl+mIHoZqIEYeu2GNwfK/OM462nEtJloV6Os=
Subject key identifier:   37:83:32:A7:01:39:47:3E:9B:DA:74:5F:F8:BA:77:95:B1:A2:BF:0B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7851E7505965CF93ADF82C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14d651bd-49b9-3123-b683-12fe6b38f610.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.186.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:1e:75:05:96:5c:f9:3a:df:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=111059f1-caea-4ba7-b340-a36032fa4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:3f:30:bc:91:51:6a:8d:f2:db:ed:22:37:
                    8b:e5:52:ae:97:87:d3:e6:31:2b:46:b9:32:57:2e:
                    83:a9:53:79:31:c6:4e:f9:38:e8:4f:34:e2:ba:99:
                    24:92:74:32:bc:ee:42:02:de:30:c1:ca:ef:66:8c:
                    da:f9:61:d1:65:aa:d2:df:6f:15:e8:a8:f2:86:e3:
                    fa:92:ea:66:2b:f4:12:b7:c4:7e:78:a4:ed:ed:1e:
                    05:67:cf:de:26:ab:f3:81:1e:ea:05:f8:ca:d0:8b:
                    29:d4:ac:12:09:55:f8:65:23:d2:36:55:7e:9f:4c:
                    5b:01:04:80:4a:6f:b2:31:98:00:cd:b8:3a:65:78:
                    8a:48:06:25:78:a6:84:05:59:56:42:5e:59:76:6e:
                    2e:04:97:ed:5f:0e:7e:c2:07:c0:5f:a9:77:06:7c:
                    e8:4d:17:48:5d:49:12:8b:21:3e:48:ee:ed:b0:ce:
                    9f:4b:9c:88:f5:67:b8:d0:30:ea:3e:06:57:68:de:
                    a4:6a:23:1a:d1:6c:aa:0f:81:76:1e:29:2a:2d:50:
                    1d:26:98:43:c1:45:67:c8:fa:8a:a1:e5:b2:d1:39:
                    e6:c9:c6:ec:b4:47:5a:c9:a1:94:31:2f:fd:45:ed:
                    5e:38:4c:4d:17:1f:e1:67:1b:57:85:43:4e:68:7e:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:83:32:A7:01:39:47:3E:9B:DA:74:5F:F8:BA:77:95:B1:A2:BF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14d651bd-49b9-3123-b683-12fe6b38f610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.186.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:d6:1f:10:2a:0b:59:dd:e0:e0:8b:70:56:57:2f:8d:88:
         5c:f4:2f:a4:83:75:f0:f2:73:06:76:d4:be:06:7c:04:91:0b:
         ea:69:86:47:3c:0a:6b:a3:09:c3:b5:44:59:9e:78:0e:dc:93:
         0f:f4:b0:66:40:ef:d4:21:9d:ea:88:b8:f2:a7:2f:38:15:df:
         a3:d7:06:18:74:59:60:b3:f4:f5:e5:e6:82:af:96:4e:06:f4:
         43:48:1f:4a:cc:31:86:47:ea:38:31:70:1e:3b:3c:5d:8d:1c:
         f7:23:c8:f9:54:5a:fa:b4:cd:5d:1d:91:8e:62:bd:69:32:94:
         da:08:8d:c5:1d:a3:34:a3:13:92:79:90:be:af:62:a5:01:38:
         3f:e0:e9:1b:50:a4:98:7e:ef:ca:a8:27:c4:ed:63:a6:5b:63:
         db:8a:7f:81:c7:af:65:50:92:81:bd:52:32:65:35:68:36:0d:
         1b:0a:24:2c:fb:66:79:9b:5e:80:a9:f8:93:88:de:01:01:e5:
         54:0a:58:e8:9c:bf:0d:17:32:84:d0:2e:a3:c9:09:5e:07:c3:
         c0:c9:1f:c1:c2:fb:16:41:fb:f5:c1:52:2f:19:5c:f2:22:7d:
         2d:d0:da:d1:fc:fb:aa:f6:0b:38:e9:aa:c3:2e:c1:0a:a6:b0:
         87:de:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:32 2025 by rpki-client