Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b1d1713-bedb-3d1a-bbb3-a7a855ae3400.roa
File:                     4b1d1713-bedb-3d1a-bbb3-a7a855ae3400.roa (raw, json)
Hash identifier:          Eu0b1lbTBzVf3KcikB4mCyyzLb7W70ot+Btcd9Ix0wU=
Subject key identifier:   5F:79:00:CC:24:6F:13:BB:45:31:67:00:FE:89:3D:E1:E2:1C:21:DF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78513A1C85E3AB658224E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b1d1713-bedb-3d1a-bbb3-a7a855ae3400.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.205.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:13:a1:c8:5e:3a:b6:58:22:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=68e2971c-797f-4f55-8019-e252fe816e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:99:26:2c:87:46:8d:3e:f8:07:e3:e6:b5:29:
                    6f:a6:ce:77:cb:04:4b:b4:a3:ec:bb:30:a1:3b:1a:
                    b8:b2:3f:5d:b4:91:2a:7b:11:e0:32:11:46:e8:de:
                    b7:4d:ba:ba:ef:a1:31:d5:ec:24:7a:1d:3a:78:92:
                    a0:98:e0:5e:ee:ab:0c:32:03:72:20:b3:c7:be:b3:
                    e8:94:61:f1:ba:8a:bf:e5:c1:01:42:b8:b5:8c:18:
                    db:58:de:d5:5c:c1:10:49:ce:75:3f:f8:05:16:de:
                    d2:3b:d5:a0:20:10:5c:37:3a:75:f1:8d:98:ab:23:
                    61:ab:1a:e6:44:93:18:02:32:1a:0c:71:34:41:87:
                    9d:f4:cb:85:ae:b6:2a:d9:c3:4c:f6:41:f1:8c:70:
                    9c:63:3e:2f:0e:23:17:48:e8:73:8a:53:4e:77:13:
                    d5:62:2b:29:32:7a:99:20:ff:c9:19:26:7a:2a:ff:
                    8a:d1:db:9d:11:54:50:54:ff:8d:96:7b:c5:fe:ae:
                    13:61:fa:5a:cd:a3:36:45:73:3b:96:f9:9d:f5:09:
                    09:6a:6e:09:b0:a0:9f:58:c3:4b:b7:39:88:ce:43:
                    e6:34:f9:98:f5:fe:fc:91:16:87:ca:a8:cb:88:e1:
                    30:fe:ee:07:26:bc:1c:bc:1b:e5:a9:26:77:29:ce:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:79:00:CC:24:6F:13:BB:45:31:67:00:FE:89:3D:E1:E2:1C:21:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b1d1713-bedb-3d1a-bbb3-a7a855ae3400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.205.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7e:4a:49:61:4f:69:37:0f:cc:d3:9c:c3:a7:f7:81:24:f1:
         e2:4f:11:54:02:f6:30:e5:50:fa:80:be:d9:1f:4e:2a:11:ea:
         0d:27:ee:78:9d:76:35:ef:05:b0:78:c8:c4:94:a4:45:b7:80:
         cf:00:cf:e3:1e:7a:44:43:1e:32:ab:c0:d4:85:21:82:7c:a1:
         ff:4a:fb:71:d7:0a:75:be:b9:b4:b5:29:8f:1a:73:27:ae:91:
         52:32:27:f5:b4:27:14:61:3b:b0:e3:54:09:15:85:d4:61:e0:
         9c:d7:80:3b:2b:fc:dc:d8:85:38:0f:b3:56:fd:e6:9e:9f:ec:
         79:c0:0f:de:18:66:85:af:ba:6c:30:3f:7b:aa:b9:5f:a2:24:
         61:bf:cd:00:dd:39:2d:36:37:2d:98:41:b5:da:40:0f:ed:02:
         bf:66:97:a1:5d:a9:9f:54:c4:1a:79:59:0a:a3:e4:3e:af:5e:
         2f:b4:34:c9:e6:a8:dc:bb:fa:88:46:1a:1b:75:69:7f:77:58:
         ca:d3:83:8c:69:a2:2f:9b:36:68:27:00:a9:d3:ab:af:c7:49:
         99:cf:34:9d:05:97:f4:1e:4b:38:fa:0e:4d:9c:00:df:8d:59:
         ab:be:63:c0:7a:15:70:d1:fe:55:4b:4b:c6:a4:78:1a:3a:bb:
         99:5a:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:08 2025 by rpki-client