Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa
File:                     42e27d57-82e5-3480-beac-4835f1b4b65a.roa (raw, json)
Hash identifier:          oj61RYwIUPjYtAwNbL97rp0/UMr50IC5zQ+1F0btCdw=
Subject key identifier:   44:77:1B:EA:83:97:2B:85:AE:25:78:46:17:7D:A8:0D:FB:94:7D:36
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78507EC835DFCC24C674640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.243.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:07:ec:83:5d:fc:c2:4c:67:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=cebd6231-564b-471d-bea3-dc778fbbaaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:05:69:23:75:d4:9d:f5:5b:7c:cb:3e:bd:
                    8c:e3:b5:8a:cb:13:25:d5:c5:cd:7d:05:59:3c:d2:
                    42:33:b5:dc:d1:38:73:3d:a0:c5:36:ed:33:69:d5:
                    8b:21:db:85:2a:be:70:d6:b7:c7:90:b6:fb:90:a6:
                    11:1a:df:6d:60:8e:ab:b1:26:c2:e6:fa:4c:c6:3a:
                    41:19:1b:c5:79:c6:71:41:a7:d9:51:9d:1e:5a:94:
                    92:e9:f0:fc:ed:5b:02:c8:8a:2d:27:97:04:f6:44:
                    3a:1e:04:52:5c:52:66:28:2d:3c:ae:da:54:a8:04:
                    e2:73:f1:67:d0:2e:98:19:8d:ab:43:dd:59:9a:c2:
                    ed:03:5e:f2:69:a1:9d:1d:b3:5c:45:1e:60:9f:5a:
                    ab:29:ba:8c:4b:ee:3d:1c:a4:81:97:df:a4:03:bf:
                    16:42:bc:d4:aa:f9:60:93:11:3e:de:90:32:d8:a6:
                    8e:4f:d4:ad:b6:c0:ad:ac:20:6b:80:67:46:88:d8:
                    bc:57:de:cd:97:e5:be:83:96:4d:f5:d2:4b:c3:7f:
                    cf:e1:19:e0:2f:4e:76:11:55:34:55:28:e7:ee:30:
                    f3:09:b7:82:1c:e9:b2:2f:e9:e7:23:6e:38:ea:73:
                    f5:98:05:b3:4f:86:b4:19:88:ba:71:ab:13:94:c3:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:77:1B:EA:83:97:2B:85:AE:25:78:46:17:7D:A8:0D:FB:94:7D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.243.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3e:dc:cf:8a:2e:31:29:82:e4:62:bb:ef:00:7f:a3:7d:34:
         b7:1d:60:a4:1c:ca:90:f8:7f:ee:a9:66:58:24:24:32:e3:cf:
         66:97:25:ae:2b:cf:dd:21:fa:85:90:81:c3:54:9e:6a:32:ea:
         9b:45:b1:61:b5:00:fb:17:63:fb:82:5a:2e:6e:89:e1:44:74:
         34:77:70:0d:b4:bb:e5:a2:28:9a:f4:38:14:c5:43:11:16:02:
         e5:ac:3c:77:50:12:84:17:83:7b:80:42:b6:26:86:31:fe:c4:
         45:b6:6e:67:97:51:12:15:09:fb:5e:7c:9a:71:c4:68:09:6c:
         e3:2a:b4:dd:2c:f3:e1:22:94:c1:1c:54:cc:8c:3a:9d:4f:04:
         d1:33:74:34:87:96:1d:a4:27:49:53:89:dd:6a:89:62:d2:ee:
         e3:54:d6:9b:ae:7c:c5:4a:dd:3a:44:4a:69:c3:b7:c9:58:23:
         b3:60:ad:8c:0b:f0:bf:54:01:5a:3b:d8:ce:86:3f:df:4d:2a:
         f1:53:53:eb:e4:73:79:c2:64:14:cc:41:d0:2c:69:58:f9:b6:
         69:d5:91:4a:fd:24:f3:0a:63:03:a0:07:aa:30:2b:c6:23:41:
         28:94:07:cf:4f:07:9d:d0:e6:58:7d:a3:01:dc:e3:d5:80:67:
         39:42:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:35 2025 by rpki-client