Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63423fe3-f910-32f9-b02f-2326291dcaba.roa
File:                     63423fe3-f910-32f9-b02f-2326291dcaba.roa (raw, json)
Hash identifier:          Mt6vi4YUf6fdQ2GZpExG9KSRlw96Mcl0jc3+zLO/HgA=
Subject key identifier:   44:56:7D:84:74:39:5F:AE:23:DC:7E:F8:66:96:09:65:0B:49:23:96
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78511466A16A6FB32C583B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63423fe3-f910-32f9-b02f-2326291dcaba.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.228.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:11:46:6a:16:a6:fb:32:c5:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=8494ae1e-9530-45af-b325-9272d2d90a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:53:b5:76:79:fa:8a:34:75:bb:68:d4:0e:
                    39:2d:36:91:75:f8:05:42:e1:fb:81:41:ca:c0:6c:
                    01:1c:e0:8d:a7:ee:eb:5f:14:2b:07:e1:05:e0:8d:
                    e8:87:07:28:d4:a6:64:12:93:a6:43:82:33:81:8b:
                    0b:ae:28:ba:a8:cb:63:ca:aa:6b:00:8b:5b:42:bd:
                    ee:bd:43:14:01:7e:db:54:9a:31:69:93:bf:01:10:
                    4c:93:ea:f8:94:45:d0:24:0e:4e:50:8f:cb:bc:36:
                    cf:5d:50:e9:e7:1d:ca:8a:bc:ff:d7:51:43:f7:eb:
                    f5:3e:3b:47:14:7c:c0:3c:98:c3:7d:7f:f9:a9:94:
                    3f:cb:c2:2a:7f:2f:61:49:57:99:eb:c6:99:0a:6c:
                    58:43:34:50:80:bb:46:60:58:a4:77:b6:a0:ab:ce:
                    6c:64:f3:9a:7f:9a:c6:c6:24:02:0e:e8:53:20:90:
                    fe:e5:58:1e:76:51:51:eb:9a:c5:4b:fe:0e:61:7b:
                    b1:6e:0a:6f:72:67:c4:5a:a5:8f:9d:05:f9:16:1c:
                    e2:f1:dd:82:2b:a2:23:b7:f7:ad:48:a8:b3:d1:47:
                    bf:d5:a2:ab:82:af:db:1c:37:1b:35:4a:0a:f1:00:
                    d7:1a:46:d9:4c:b2:ec:6e:a6:4f:ab:08:86:04:0c:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:56:7D:84:74:39:5F:AE:23:DC:7E:F8:66:96:09:65:0B:49:23:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63423fe3-f910-32f9-b02f-2326291dcaba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.228.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:11:0f:e4:56:03:f2:26:e6:a7:6a:95:2a:28:b9:82:b0:db:
         b2:32:20:ca:16:1f:7d:3f:59:1f:2e:63:54:4f:a6:1b:1e:00:
         73:71:e7:d5:7b:3c:77:28:0c:5f:79:ab:00:12:15:e0:bc:32:
         4b:35:ff:1c:d4:05:a8:90:5f:c4:b8:17:5f:ed:23:a5:b7:f7:
         f2:10:ee:aa:1b:bd:f4:9c:10:89:47:31:24:18:03:1a:82:67:
         11:9b:20:de:2e:7f:35:e5:74:4b:97:6b:e5:98:47:d4:39:e9:
         c1:be:9d:82:04:51:32:cf:57:9d:02:d9:a5:53:68:6b:71:59:
         6f:38:ad:13:e4:f9:72:47:ea:dc:1f:5a:9f:b1:2d:00:17:7b:
         4d:a8:ff:3f:96:5c:18:69:f6:4c:ff:88:a3:7a:86:8f:64:ea:
         8c:e8:40:36:e0:0d:2a:44:3a:47:02:80:05:8e:b9:e4:eb:14:
         7e:7e:71:cd:ce:3d:4a:cf:c4:51:6c:41:72:78:54:af:5b:1c:
         92:9f:cc:a7:33:28:f1:3b:a8:cd:38:99:48:ea:1d:f4:93:c5:
         6a:9a:4f:b4:e6:52:b0:eb:67:2e:cd:b4:9b:61:9a:f2:4e:30:
         03:c4:df:10:54:3b:d9:80:cd:79:52:10:26:db:69:6f:e1:a5:
         f6:f3:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:02 2025 by rpki-client