Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa
File:                     672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa (raw, json)
Hash identifier:          0unPGYQESag1W81Kuh7f5I0O5+Fx4nHk8nnCYFuW1hk=
Subject key identifier:   C3:4D:6C:60:44:DF:EF:4A:E1:8B:50:98:6C:1D:C2:D5:F4:F4:8C:E9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78503539891F76FA5C72D50
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        35.190.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:03:53:98:91:f7:6f:a5:c7:2d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=d33dd143-53cf-4cbc-b8c1-7292b57d6c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:93:d7:de:94:b4:64:15:3e:52:d1:7f:bd:
                    6c:22:dc:a5:95:aa:9d:d2:f0:08:c0:13:47:55:4d:
                    73:b8:83:7a:11:3b:6c:e1:1b:04:bb:2c:b8:4a:5d:
                    87:b7:c5:c2:a2:5f:e7:eb:60:59:f0:38:aa:ab:f0:
                    d6:78:02:61:f8:38:42:26:b3:85:d1:7f:5e:26:2f:
                    69:97:d8:0f:0d:b9:84:4e:8d:d6:31:8f:03:01:8d:
                    f1:d8:0e:a1:2c:51:17:d3:58:2e:ec:84:47:a8:6c:
                    91:b1:4c:d3:97:0d:72:dd:32:a8:12:99:ac:e5:8f:
                    32:09:65:ee:c4:34:5a:83:87:fe:5d:45:f3:be:45:
                    d8:ae:61:0d:52:07:74:da:e9:1e:72:7a:a6:2c:db:
                    d3:0f:8a:c0:0c:36:99:79:c8:15:40:a2:c9:87:e0:
                    1d:51:53:ff:80:35:8c:4f:93:31:a9:a2:68:46:9f:
                    ef:7d:a0:cf:4f:7d:2b:f8:e4:55:4d:a6:14:47:ce:
                    40:62:18:49:7c:6a:a8:96:09:f6:a2:14:31:67:5c:
                    66:34:da:d5:94:6d:b6:d6:c2:ba:ab:b7:55:50:2a:
                    f9:ec:40:c2:a6:77:9f:de:b8:24:60:46:ed:09:59:
                    11:1e:66:3c:eb:bc:44:66:4d:22:4e:18:d5:81:7c:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4D:6C:60:44:DF:EF:4A:E1:8B:50:98:6C:1D:C2:D5:F4:F4:8C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.190.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:57:b3:11:77:cd:ee:8a:92:22:7a:b4:4a:b8:94:8f:34:
         72:e8:e3:1e:4a:01:9c:39:39:6d:97:5a:d7:a7:5b:60:62:c3:
         4f:ae:54:9a:b6:6e:b0:a8:9a:79:27:9d:cb:ad:86:9f:38:85:
         0e:08:85:e8:8e:48:1e:b8:ad:49:fd:0c:d3:3a:1e:a3:52:6a:
         79:61:4c:fb:d5:71:a9:69:d3:66:d0:a3:c0:c3:78:2d:f7:f5:
         a2:90:f5:b8:bf:a6:55:e2:2d:6d:82:e1:c8:39:5e:ca:55:93:
         63:ce:1e:68:18:f9:25:db:96:03:ff:41:ca:ca:79:3f:5b:d8:
         bc:32:1f:21:cf:45:33:9a:4a:38:61:b2:a1:f0:75:7b:d2:b0:
         0a:b3:71:9d:cc:f9:e0:ba:2e:86:37:57:fc:fc:b6:9d:4e:f7:
         cf:c4:e9:90:03:96:e5:3e:cf:69:bf:3a:2a:c4:fd:ff:4e:06:
         6f:6b:52:4d:16:4d:25:0f:80:91:0b:67:d0:53:a4:23:97:6e:
         9e:d3:9d:d1:d2:fb:8b:6f:a6:e3:c5:a9:a2:2e:a7:7e:8d:f5:
         56:3c:7a:10:a0:e1:13:2e:55:e4:9d:2f:32:89:5d:3d:d5:fb:
         60:53:3e:36:31:98:03:38:c5:41:bf:9d:ec:13:af:9f:d5:29:
         18:79:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:19 2025 by rpki-client