Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5c44251-d5a4-33a8-8c91-3ba9edc09cc5.roa
File:                     a5c44251-d5a4-33a8-8c91-3ba9edc09cc5.roa (raw, json)
Hash identifier:          LsDFx04IDC7+wcGSDg75q/TIP+VEW1O1ePAZcPv0qmk=
Subject key identifier:   D6:C5:A4:87:44:E2:B3:C6:4F:4F:DF:7D:33:8D:E8:73:B2:F9:90:1F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785070DBDC4EDFB0DAA7380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5c44251-d5a4-33a8-8c91-3ba9edc09cc5.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        35.187.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:07:0d:bd:c4:ed:fb:0d:aa:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=3004d98f-82d8-4de8-966e-5129a934c227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:f5:45:56:bb:33:7e:d3:1a:d0:a2:e1:f8:
                    62:42:1b:7c:00:51:3b:64:3e:87:25:f1:3a:a2:68:
                    c7:50:4f:af:78:0f:39:92:1b:0c:7c:ce:63:4c:71:
                    28:15:5e:bf:05:a9:8d:d0:ac:a9:7a:d2:57:88:ba:
                    c9:62:a6:2c:a7:f3:0b:ec:f7:e1:aa:34:81:6a:92:
                    88:e4:f1:7a:a1:fb:d6:9e:3d:b0:03:0c:54:16:59:
                    a0:4d:92:f7:12:3d:5b:85:56:c3:20:dd:1d:2a:e4:
                    6d:25:74:57:aa:51:f2:53:d2:be:7e:ff:e6:94:bc:
                    30:71:19:5d:77:00:0b:5c:71:92:8c:94:f3:06:7e:
                    50:b7:fc:75:d3:9a:6d:94:46:f3:3c:70:cf:0a:db:
                    51:b7:11:5f:26:d8:0c:3a:e5:a6:64:f8:43:3d:d4:
                    62:bd:17:2c:78:7f:f2:22:d0:8e:a1:8b:8e:ef:1f:
                    c2:7f:6c:41:86:ff:f3:0e:b5:8e:fb:06:81:cb:0c:
                    f2:79:5e:ab:34:d5:bd:d6:49:f8:a7:7b:06:0b:64:
                    a1:cd:4d:cb:e0:f9:57:d5:b7:2d:e6:61:84:22:01:
                    bb:3d:67:87:5f:ef:b5:fa:b5:97:11:f9:90:81:d8:
                    7b:5e:c0:34:dd:c4:d0:65:42:0d:73:3b:d5:b3:c5:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C5:A4:87:44:E2:B3:C6:4F:4F:DF:7D:33:8D:E8:73:B2:F9:90:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5c44251-d5a4-33a8-8c91-3ba9edc09cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.187.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:60:34:d7:f3:b0:e6:7f:5c:36:54:1c:68:b8:08:b1:1b:c8:
         f9:31:55:56:64:a0:28:39:a2:6f:4e:d3:23:be:08:5c:61:f8:
         eb:68:58:d4:cd:44:55:f7:4e:b9:08:92:28:4f:57:b0:c1:e3:
         97:f5:6b:06:ad:c4:65:72:eb:0a:e2:ee:7a:fc:9b:1f:b6:f3:
         fa:2e:d2:02:a7:5f:0c:91:87:ac:45:90:f2:22:fc:99:f8:05:
         3b:1d:a3:a4:3f:cc:4d:a5:12:aa:c8:a0:5c:41:6e:d8:a0:a7:
         2a:c8:49:2f:ed:79:5d:6a:fe:bf:e1:46:3d:c5:c8:f0:2a:96:
         3e:fa:9c:04:cb:c6:f7:d7:fe:0f:f4:a1:62:d1:1b:f2:5d:13:
         1f:1d:a9:b9:fd:af:04:b1:e1:76:ce:ff:d3:bf:08:1b:88:47:
         9b:f6:75:ef:7f:7a:ce:e0:9a:a8:04:45:53:33:4d:dc:f5:4e:
         53:a5:c8:46:ec:6a:41:6d:44:c4:7a:0f:d7:c1:b7:56:e5:0a:
         00:88:4e:97:c7:11:cd:e1:aa:3f:85:82:01:e4:3e:67:7f:68:
         fa:58:cc:73:39:12:be:41:c0:c1:38:2d:6d:a1:30:7b:e7:bb:
         eb:7a:7c:3a:9e:8c:a0:ad:78:b1:24:d3:9c:bd:61:67:c6:88:
         a1:26:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:45 2025 by rpki-client