Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8004692-ece8-3f69-bcfc-96935f2749fb.roa
File:                     a8004692-ece8-3f69-bcfc-96935f2749fb.roa (raw, json)
Hash identifier:          iqKkw7nfoX2k9hDXHLFXxjkkWaqmS0RcH4IEsMBwc8I=
Subject key identifier:   41:4C:A9:10:FF:10:8F:EF:4B:78:1A:27:53:E1:59:BB:4C:0B:77:C4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7852A692B67DFF551DF0840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8004692-ece8-3f69-bcfc-96935f2749fb.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.227.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:2a:69:2b:67:df:f5:51:df:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=1ed34308-56f3-4fe2-b938-d2c32b1e5d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:70:86:8e:e4:c2:25:3f:0e:2c:92:c9:5b:
                    c4:24:17:4d:2e:83:53:45:eb:d3:86:2f:d8:2d:ad:
                    1b:d3:6f:cb:40:63:64:cc:e7:7c:b0:b0:59:cb:ae:
                    cb:63:b8:4c:76:ea:dc:0c:62:8b:b0:f9:cf:47:83:
                    09:01:f7:e4:f9:48:6d:bc:40:87:8b:f1:b3:d1:de:
                    a5:66:e4:ca:1b:4d:c2:b8:f2:96:7c:f0:d9:78:5f:
                    29:00:6f:f3:84:2f:31:fd:1d:20:01:88:73:96:62:
                    2d:f4:1e:6a:0f:7e:1b:f7:40:bf:2d:34:78:be:4d:
                    15:f9:9d:25:ca:f6:51:83:95:69:b9:57:36:08:06:
                    1e:83:9d:05:de:f3:16:48:85:89:4b:d9:8c:4a:8b:
                    dd:bc:ba:2b:78:e6:2c:fe:a6:f5:23:57:5a:b2:96:
                    38:66:fc:01:71:f6:55:f1:a8:65:88:e0:6f:50:0a:
                    68:91:ac:f0:21:ef:5f:22:51:f6:cd:ac:f4:b4:86:
                    04:a7:35:6f:a3:26:9a:a1:03:3e:08:05:c0:06:be:
                    04:24:36:9b:a6:b9:58:16:f1:61:0a:3a:6c:56:f6:
                    e5:a4:f9:26:e1:e8:11:65:c6:13:34:e2:a1:ef:80:
                    fa:48:c7:30:f0:9c:54:90:14:6d:ad:41:9a:cd:b5:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4C:A9:10:FF:10:8F:EF:4B:78:1A:27:53:E1:59:BB:4C:0B:77:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8004692-ece8-3f69-bcfc-96935f2749fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.227.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:fd:1b:60:ac:b2:a6:34:05:77:26:11:6c:f2:98:3b:20:
         fa:82:58:46:62:2b:23:c0:72:3b:f6:54:66:dd:50:4c:02:54:
         21:93:8b:7a:d5:b2:28:01:da:a6:eb:ae:a7:43:4e:bb:01:3e:
         1b:57:76:6c:be:dd:b6:ef:12:2a:95:89:b8:bd:4a:82:d8:59:
         9d:11:33:6f:c3:b8:0b:c5:56:af:78:71:df:54:21:9e:1f:5c:
         f3:f6:ec:8c:0d:d7:20:3c:5f:6d:75:7b:47:34:6c:0f:ea:ea:
         24:3f:9e:d7:f3:a0:72:d8:ca:e6:7c:39:a2:e8:0d:5d:6d:c6:
         ce:12:c6:a1:11:03:e7:47:a6:b6:70:9a:ea:ae:a7:3d:c0:9a:
         d8:c4:f4:b4:d0:f2:22:7f:10:ac:cb:a6:a4:0a:51:ba:90:a3:
         3d:6e:ce:ac:d3:4e:de:2a:4e:6c:f4:b6:6a:f8:49:f6:d2:74:
         09:2a:3a:92:1d:29:76:1d:7e:96:d4:77:94:a4:5a:eb:9e:3b:
         87:a8:a5:27:f3:c7:b9:9a:6a:19:da:48:27:a7:02:4d:10:d8:
         82:f0:ed:5c:51:dd:50:ab:aa:3e:fa:a7:f0:35:86:69:b8:5f:
         08:c8:a6:a3:ae:ec:62:34:c9:db:eb:18:3d:25:d5:e8:8b:b4:
         04:0e:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:54 2025 by rpki-client