Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/191b7b72-2bfb-3e14-b791-a5489d912c8a.roa
File:                     191b7b72-2bfb-3e14-b791-a5489d912c8a.roa (raw, json)
Hash identifier:          iS94YmgTMM2JTgKFacDkHfdtwYOycm4Jch9ZaZchH0k=
Subject key identifier:   26:67:06:F1:79:87:AF:6D:A7:19:D9:6C:81:AC:21:11:91:50:02:10
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785232C4393BBAEFA771AA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/191b7b72-2bfb-3e14-b791-a5489d912c8a.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.194.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:23:2c:43:93:bb:ae:fa:77:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=714a7680-01a7-41fe-9e07-b548250284de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:c1:82:8f:e9:a7:32:68:ea:cd:36:e9:37:
                    87:62:d3:50:ed:0d:e2:b0:d4:20:df:6a:01:b6:ee:
                    94:c4:65:3b:eb:88:df:2f:d1:99:b8:bb:4e:26:ac:
                    dd:26:97:4b:ef:ca:88:4d:d2:93:6f:f7:77:44:11:
                    2d:ef:c3:70:4e:ae:2f:c2:4a:66:5b:86:6a:d0:30:
                    a4:61:24:9a:de:4e:95:3a:d0:23:e8:fb:76:ad:1e:
                    52:12:f7:83:71:0c:25:86:7d:b9:3b:0a:ea:4e:ec:
                    9b:2b:44:13:28:3a:2d:48:2f:45:cb:dc:56:4f:f4:
                    e0:e9:ab:dd:c0:a5:66:eb:f7:e7:bd:89:4c:bf:b0:
                    c3:0e:b1:01:a2:a1:a2:79:6e:48:61:19:b4:f2:92:
                    16:a9:be:df:05:ff:60:6b:bd:72:7d:4f:2e:41:92:
                    20:78:91:f9:1f:f9:2b:69:d1:97:da:8d:57:39:24:
                    12:fc:6f:37:d1:d0:03:ab:59:47:45:72:bd:b0:5a:
                    e3:aa:aa:e4:f5:a0:38:e8:5c:51:f4:7c:72:87:7f:
                    c9:d2:9d:42:7e:4f:38:97:24:43:0f:9b:f1:bd:c8:
                    c4:86:35:f4:ed:80:aa:f5:8f:ea:54:8c:b6:d0:6b:
                    38:dd:76:27:36:77:ad:65:19:b6:f7:35:bb:c7:24:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:06:F1:79:87:AF:6D:A7:19:D9:6C:81:AC:21:11:91:50:02:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/191b7b72-2bfb-3e14-b791-a5489d912c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:28:83:ee:0c:aa:ae:db:0f:f9:f9:56:85:9c:10:a2:b9:5d:
         39:0b:f0:62:51:2d:8a:b7:f4:fc:1e:22:10:86:eb:c0:77:86:
         a0:78:d1:17:86:04:91:40:28:a2:10:cd:5c:67:35:93:81:68:
         d1:3f:17:25:48:4b:c1:2d:50:62:76:47:b4:2f:64:ba:bd:ab:
         4f:b0:2d:da:4c:3a:e8:e3:d6:1a:88:67:c1:83:8d:f5:f8:94:
         61:cf:80:89:ad:28:9a:cc:1b:b9:2a:fd:93:5d:66:59:e0:94:
         65:66:bf:ed:63:6e:b2:d2:59:7b:a9:ce:55:bd:23:cd:67:22:
         6e:40:ce:43:82:de:1c:77:06:5d:a4:4b:e4:2b:4f:15:15:d2:
         a5:da:ba:e8:92:59:9c:9b:32:19:31:68:2c:11:1c:87:8d:c2:
         1e:b2:b2:67:07:60:ae:3b:53:bb:f5:4b:a3:28:fd:63:6c:96:
         b5:0e:ed:b4:fa:74:40:28:21:e4:3a:98:a5:29:09:86:81:9b:
         10:7f:0c:65:09:65:50:fd:0a:2b:2b:52:3f:c4:69:de:3d:ba:
         a0:06:7a:72:2f:b7:e9:19:e1:b3:cf:64:58:1f:32:a8:3a:27:
         2c:c2:01:70:05:86:e1:5b:14:7a:00:37:2f:22:c1:0c:b3:12:
         a1:53:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:08 2025 by rpki-client