Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8102db0a-d8f2-33ad-b3dc-7c92405f7c72.roa
File:                     8102db0a-d8f2-33ad-b3dc-7c92405f7c72.roa (raw, json)
Hash identifier:          AGpWNvOPVVFS003LktEaAc9l7hzSr4xWbzgMRUh3E3M=
Subject key identifier:   55:AC:4D:62:72:D0:5C:0C:FB:A5:71:5E:F3:BA:56:59:C2:C9:BF:C7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784DAFB7CA53EA089774E18
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8102db0a-d8f2-33ad-b3dc-7c92405f7c72.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        35.186.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:da:fb:7c:a5:3e:a0:89:77:4e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=a39ed28f-240e-424f-b0d7-77ab5cf487f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:d2:f4:8b:a3:a9:56:d8:23:15:c1:54:03:
                    fe:3f:8e:cc:3e:a5:f5:89:2e:31:b0:bd:d6:df:91:
                    58:55:c7:c0:38:b0:8c:63:49:df:5d:9f:60:15:0a:
                    34:71:16:29:a8:f2:80:9b:7f:a4:dc:fd:b1:f7:bc:
                    97:06:6f:68:37:4e:1d:2e:73:a9:a6:d5:77:2f:2c:
                    e1:1d:4f:ed:3a:ea:25:0c:8f:ab:c7:79:af:29:27:
                    88:12:5f:66:2c:cc:f9:db:b3:df:11:fd:62:3a:ad:
                    f0:46:16:5e:fd:99:ae:68:71:82:5e:41:12:0e:30:
                    5f:ef:83:14:88:a1:33:cb:a2:9a:c9:ec:4c:fd:44:
                    d5:10:0c:91:50:4f:52:ea:b3:ea:82:e4:0e:c6:03:
                    e0:9a:1c:ce:92:01:0b:3d:d9:0d:0f:c6:49:84:1c:
                    5f:01:be:0c:80:ff:d0:42:28:f9:5a:ef:a4:4c:5c:
                    b9:00:76:7f:cc:6a:be:54:e9:46:36:1a:83:13:d0:
                    68:86:4b:ed:23:16:16:3f:13:9f:0a:5f:de:5b:ff:
                    67:3a:6e:c1:0e:2a:9d:6c:c4:72:44:0e:8e:aa:0f:
                    76:8f:18:7f:fb:6d:0a:cf:7f:ae:b8:ab:e0:c6:72:
                    b9:6b:cc:dc:2e:70:e2:6a:4e:7a:1a:4c:ee:d8:18:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AC:4D:62:72:D0:5C:0C:FB:A5:71:5E:F3:BA:56:59:C2:C9:BF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8102db0a-d8f2-33ad-b3dc-7c92405f7c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.186.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:06:66:d2:34:93:66:2f:73:dc:c8:c9:77:04:a0:32:20:01:
         85:33:5b:a5:92:dd:d8:6c:d8:d3:d6:de:ee:fe:e8:82:26:3e:
         8c:fc:95:f2:02:00:54:ba:2d:b4:dc:90:29:45:d2:c9:0e:71:
         80:82:f9:12:29:62:0e:7e:8e:b2:3b:67:31:26:be:f7:32:75:
         41:45:87:5b:1f:f6:21:5f:6d:84:a0:38:9c:77:0a:87:dc:f6:
         9e:73:9b:e6:cb:fa:c5:d7:0a:90:91:22:b1:ae:6a:f0:f6:62:
         51:ee:93:89:1a:ff:d3:9e:a2:ba:96:1e:53:95:10:7c:57:5c:
         b0:e5:18:ca:dd:cf:2d:d7:76:b1:2d:37:4f:fa:ce:4c:20:b0:
         46:30:23:44:c0:87:08:ec:ff:e9:53:cb:7e:f5:58:f8:69:d2:
         b3:17:01:bf:1b:10:31:a0:58:89:db:9a:4a:62:8f:34:b5:c6:
         62:e1:d0:8d:b2:5a:c8:e2:fa:32:47:07:27:55:92:98:ca:d2:
         99:8c:db:86:c4:14:d6:6e:58:4e:f4:77:b9:f0:bc:3f:aa:f9:
         c8:73:d4:a6:7e:23:de:cb:ca:6f:53:ad:bf:13:5c:8f:70:8e:
         3c:8a:7a:f4:a8:59:ce:b0:ed:46:99:aa:8b:f2:e0:db:f9:80:
         52:e5:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:23:16 2025 by rpki-client