Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa
File:                     33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa (raw, json)
Hash identifier:          6GhjvRzHjWT6/+ICIduOOqodsEUjvn92gs+1Z8ZZVHw=
Subject key identifier:   AF:26:C1:CA:3A:02:55:EF:4B:FB:C8:DF:B3:08:84:2B:8F:C6:6F:A6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7851DD37DD384FE44DB4F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.245.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:1d:d3:7d:d3:84:fe:44:db:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=6861defe-6ade-44a8-b53d-b8c8510da810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:d9:3d:06:df:9a:57:9e:80:10:21:c6:cf:
                    d4:a7:59:34:dc:7b:4f:96:40:67:25:6a:5b:c3:5a:
                    d4:f1:10:28:fe:51:59:88:10:07:27:7c:97:2a:a4:
                    8e:86:21:39:9f:c6:db:66:31:15:52:b8:93:09:2c:
                    e2:66:22:51:ea:7f:29:14:c3:9c:e0:83:da:dd:a1:
                    0e:12:04:00:3e:11:03:f6:cd:84:f5:bf:87:22:37:
                    1c:27:df:c1:91:8b:b2:66:6a:97:5f:e3:8d:28:f9:
                    cc:88:0a:53:23:f3:58:ea:df:7d:f8:91:43:02:b5:
                    39:38:f0:2d:06:07:8b:e6:69:65:b7:c2:1d:a7:95:
                    79:b7:0c:07:e1:7d:82:e0:8f:f3:c6:81:38:0c:e1:
                    9a:1c:73:f6:bb:27:6f:e9:fe:0d:ea:6a:4b:a4:b7:
                    69:db:ef:c6:51:57:b0:8d:d5:c0:8f:a3:8e:79:cd:
                    40:d3:fd:a4:06:02:f3:8b:79:5f:19:69:1f:8a:ab:
                    5e:17:fb:e1:15:04:16:b6:b6:aa:1a:3b:8b:37:85:
                    8b:95:0b:39:d8:51:21:02:34:dd:2f:84:b7:a0:aa:
                    6d:9f:f6:a2:56:a6:f9:a0:56:56:ce:52:4f:bf:aa:
                    af:bc:f7:78:25:3f:2c:0a:7e:54:35:64:f9:38:4c:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:C1:CA:3A:02:55:EF:4B:FB:C8:DF:B3:08:84:2B:8F:C6:6F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.245.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:19:1b:c0:7f:e3:69:a0:4b:dc:2d:f4:f0:5f:49:8c:3d:
         92:b0:9c:96:f3:df:fc:13:bc:1d:b7:66:b0:28:eb:60:f8:ff:
         59:fa:6a:4a:50:ce:e3:39:66:49:ce:7e:79:e1:38:d3:1e:f5:
         9d:7c:6a:4f:7a:f5:7e:17:fc:59:e2:5b:e7:ff:a1:cb:92:05:
         3b:78:5f:07:1e:65:84:00:b0:e4:2c:3a:a6:55:44:6a:84:93:
         ed:7e:f7:1f:d6:f1:b7:13:47:49:c5:87:d4:9a:16:77:b1:9c:
         70:54:b4:e3:92:fc:a7:53:f1:42:98:ef:c0:7c:c2:0c:d0:f1:
         2f:6b:dd:82:31:1a:80:92:1c:18:65:f0:81:df:dd:cc:22:ef:
         df:59:ca:2f:f2:0e:7a:6f:08:a3:34:a7:eb:09:7b:c3:16:cb:
         04:a7:40:bd:2d:37:a9:4b:40:c3:76:29:e4:02:8c:fb:da:b7:
         c9:ba:e3:a8:58:57:47:41:fb:20:e5:16:fa:f2:2b:25:73:54:
         83:b1:99:ba:a2:33:b0:60:e7:60:5c:4f:f9:68:d3:13:c4:7f:
         85:2b:6e:05:7d:a2:4e:02:be:10:25:6e:02:a8:37:c0:94:34:
         46:69:4d:b7:8d:70:d1:17:b5:c9:15:c5:fa:91:1c:77:ce:7f:
         52:2d:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:47:38 2025 by rpki-client