Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432e9dd4-22c4-3fcf-905f-779748d700f5.roa
File:                     432e9dd4-22c4-3fcf-905f-779748d700f5.roa (raw, json)
Hash identifier:          xTd9yrMY6EeJZtYrYKNjLbigR7lkTvYSBI38/IwCcQE=
Subject key identifier:   DF:BB:CC:29:71:0D:BC:BA:9C:EE:1B:11:E1:7F:52:C4:FF:9E:4E:52
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7853BE776DB506AF38992E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432e9dd4-22c4-3fcf-905f-779748d700f5.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.231.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:3b:e7:76:db:50:6a:f3:89:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=a7f912d7-8d44-42c7-9b5b-105677a8f741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:a2:84:68:43:fb:5c:7f:64:e4:f7:2b:30:
                    33:85:1a:ea:41:8d:5f:99:41:d5:a6:b2:dd:ef:e4:
                    33:1c:c1:4b:04:84:0d:38:72:50:ea:61:5c:6a:3d:
                    8d:7c:bd:4f:f0:bc:3c:d9:e9:01:d7:e1:a3:cb:ea:
                    9d:ea:16:6d:7e:0a:3a:28:e1:5a:bb:0b:db:2d:a0:
                    45:58:79:34:1a:2c:f3:4e:88:89:0a:a1:88:b0:df:
                    a0:1d:fa:f0:59:ee:4a:47:5f:31:56:62:f2:67:a6:
                    60:6a:21:4c:f4:e4:48:06:2f:e1:49:87:d7:e3:63:
                    2e:96:16:c0:d1:ac:7a:a5:26:d7:af:d8:07:6d:cc:
                    1c:c9:60:b4:3e:21:c5:5b:0d:cc:ad:db:a3:5a:9f:
                    00:1a:58:7f:84:e6:18:97:35:09:71:01:40:0c:63:
                    51:d6:b4:c4:9f:4e:d3:07:ac:e5:07:b1:8a:eb:16:
                    b1:09:bf:93:92:5f:93:87:cd:81:5a:b5:b3:8d:41:
                    40:e8:06:15:9c:67:44:cc:0d:ab:c8:c8:a2:66:b7:
                    58:e1:83:42:ba:51:07:0d:f1:60:4b:86:71:c6:8f:
                    33:6a:91:08:69:b5:e0:ec:7e:1c:37:6d:7e:01:ea:
                    2b:a6:d5:a5:91:18:31:1e:7e:55:54:4e:d2:1a:ad:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BB:CC:29:71:0D:BC:BA:9C:EE:1B:11:E1:7F:52:C4:FF:9E:4E:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432e9dd4-22c4-3fcf-905f-779748d700f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.231.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:ee:9c:c5:97:34:09:88:d0:8b:26:84:44:a9:2f:9f:33:
         2c:b0:3c:20:c8:6d:d8:cd:f8:66:bd:2d:7f:b4:13:91:d6:89:
         90:c2:73:2f:c6:ce:0c:68:e6:eb:6e:6f:39:40:cc:14:d3:11:
         08:83:8b:fb:41:5c:7e:28:52:a1:4e:f2:7e:9f:ea:f3:c1:c5:
         b4:3c:ce:be:61:df:ad:16:2b:29:b8:a9:7f:38:6a:65:07:d8:
         e7:a6:2b:d7:a1:70:c0:2a:e6:a6:97:ee:81:b8:20:a1:b5:b5:
         17:d4:53:a1:42:2d:55:e5:cb:86:cc:e5:66:1c:82:d7:e0:cf:
         ce:4d:60:09:c0:b2:06:fd:ba:e9:01:fb:fe:05:24:b7:67:87:
         ec:7f:06:7f:4c:e6:16:a3:56:c4:3a:03:73:f1:ed:47:5a:32:
         87:43:82:7d:0b:3a:76:06:e5:3d:06:35:2f:14:8a:ad:40:26:
         98:f6:d9:41:55:61:06:ba:17:a8:f5:4a:eb:fc:6f:d8:a6:94:
         a1:b3:f6:e7:5c:b4:15:8d:e2:94:52:85:59:b8:60:7e:a7:8f:
         e6:94:3b:af:28:ef:06:ce:ad:74:37:b9:e9:b6:f1:d7:d5:f3:
         1e:a2:fd:66:5e:d3:79:86:61:5a:12:07:85:ae:90:d6:e0:9f:
         d6:0c:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:25 2025 by rpki-client