Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4e03c7-76fd-3488-859b-c8ca03a64dbc.roa
File:                     4f4e03c7-76fd-3488-859b-c8ca03a64dbc.roa (raw, json)
Hash identifier:          6Z2bpjJvR2lMFmrDRxIbegQscKGujhR0oBVbwp06w1c=
Subject key identifier:   60:DE:89:A1:B7:B6:EC:3F:A5:80:3D:F1:BE:63:AA:CB:D4:9A:32:3E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784FEEAF38A6AFBE139A7A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4e03c7-76fd-3488-859b-c8ca03a64dbc.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.243.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:fe:ea:f3:8a:6a:fb:e1:39:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=95480884-9a8a-4cbc-9105-a58d7bc624a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8c:c5:fa:67:08:f7:45:15:62:5e:0a:50:13:
                    25:36:59:40:7f:b5:e1:9c:44:14:eb:ed:40:7c:48:
                    26:a0:f6:39:1e:1c:77:55:3e:49:83:0b:61:8e:4d:
                    ba:9e:95:7b:39:29:9e:e3:63:39:a3:b0:7b:09:5c:
                    75:1d:a3:69:db:0b:98:1f:ce:33:ce:1b:d6:94:11:
                    de:8e:2f:1d:ac:ba:1a:5d:02:13:e0:17:8e:2a:30:
                    89:35:66:49:e0:15:f0:a2:ff:ea:7c:76:e3:54:72:
                    f6:92:e1:9a:ce:bc:3f:ad:3b:58:45:13:2a:26:06:
                    0f:b7:5e:83:bd:90:92:5d:12:65:a8:5b:7b:35:57:
                    55:90:22:7d:2f:c1:a6:76:21:3f:a9:52:1f:91:ad:
                    9c:d6:e1:00:1d:fc:70:fd:1d:3e:1f:42:ff:32:af:
                    3f:ea:33:d7:5c:02:1f:d2:98:2c:fa:a4:54:59:89:
                    e7:c3:13:58:b4:56:77:d2:b2:f1:3a:cf:e0:76:b3:
                    a5:30:d5:0e:18:5d:54:6f:1a:04:d2:0f:01:34:5f:
                    25:55:7c:bb:43:a7:52:d6:c4:16:64:08:98:16:02:
                    51:90:68:d6:55:69:fd:04:7b:28:0b:af:b9:64:0c:
                    7d:d3:9d:ce:d2:ea:a9:ea:9b:e5:70:bf:52:49:20:
                    74:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DE:89:A1:B7:B6:EC:3F:A5:80:3D:F1:BE:63:AA:CB:D4:9A:32:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4e03c7-76fd-3488-859b-c8ca03a64dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.243.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d5:47:79:df:93:ae:c0:6b:2e:f9:12:2c:74:a3:42:39:42:
         23:17:c5:b5:8f:94:f6:05:c7:39:31:8d:6c:90:ee:5f:c3:31:
         bc:df:14:72:62:86:9f:34:23:e8:ba:cc:c6:6a:c8:86:46:d2:
         2b:74:17:66:83:d0:86:4e:be:08:a7:6c:71:97:d4:db:cb:fd:
         16:8d:86:e2:06:69:f4:4b:70:f2:e5:47:b1:9c:63:9c:fd:69:
         53:25:8c:a5:8d:27:87:e5:40:10:03:01:93:92:5f:a5:6c:06:
         d0:e8:a3:3f:e5:73:ec:95:e7:aa:0d:5a:fe:32:d7:17:c9:6d:
         64:5f:0a:ee:38:ac:4a:69:da:d6:13:2b:2a:29:68:2e:db:be:
         1b:e2:23:f1:2a:29:aa:c0:e8:be:55:3d:03:38:00:76:6f:22:
         d8:e6:b3:ce:55:93:90:72:8d:2f:e0:0e:98:cb:c8:9b:76:1d:
         d6:47:c8:c5:b0:38:18:51:c5:4a:f7:0e:aa:44:76:2b:36:cf:
         d1:e2:86:20:bb:19:13:6b:d3:02:60:0c:b4:7e:bc:38:9a:3d:
         d1:1c:95:15:9e:81:c3:a2:fe:6d:cb:71:1a:d2:ce:d2:c2:52:
         0d:60:ab:4a:e7:92:bd:39:f0:ac:c2:56:7c:41:88:81:cf:7e:
         48:a9:ba:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP7q84pq++E5p6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
OTU0ODA4ODQtOWE4YS00Y2JjLTkxMDUtYTU4ZDdiYzYyNGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54zF+mcI90UVYl4KUBMlNllAf7XhnEQU6+1A
fEgmoPY5Hhx3VT5Jgwthjk26npV7OSme42M5o7B7CVx1HaNp2wuYH84zzhvWlBHe
ji8drLoaXQIT4BeOKjCJNWZJ4BXwov/qfHbjVHL2kuGazrw/rTtYRRMqJgYPt16D
vZCSXRJlqFt7NVdVkCJ9L8GmdiE/qVIfka2c1uEAHfxw/R0+H0L/Mq8/6jPXXAIf
0pgs+qRUWYnnwxNYtFZ30rLxOs/gdrOlMNUOGF1UbxoE0g8BNF8lVXy7Q6dS1sQW
ZAiYFgJRkGjWVWn9BHsoC6+5ZAx9053O0uqp6pvlcL9SSSB0xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDeiaG3tuw/pYA98b5jqsvUmjI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGY0ZTAzYzctNzZmZC0z
NDg4LTg1OWItYzhjYTAzYTY0ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI/M4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbVR3nfk67Aay75Eix0o0I5QiMXxbWPlPYFxzkxjWyQ7l/DMbzfFHJi
hp80I+i6zMZqyIZG0it0F2aD0IZOvginbHGX1NvL/RaNhuIGafRLcPLlR7GcY5z9
aVMljKWNJ4flQBADAZOSX6VsBtDooz/lc+yV56oNWv4y1xfJbWRfCu44rEpp2tYT
KyopaC7bvhviI/EqKarA6L5VPQM4AHZvItjms85Vk5ByjS/gDpjLyJt2HdZHyMWw
OBhRxUr3DqpEdis2z9HihiC7GRNr0wJgDLR+vDiaPdEclRWegcOi/m3LcRrSztLC
Ug1gq0rnkr058KzCVnxBiIHPfkipuuQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:58 2025 by rpki-client