Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03b3499-ae88-3bdc-bf42-e19787270eb6.roa
File:                     d03b3499-ae88-3bdc-bf42-e19787270eb6.roa (raw, json)
Hash identifier:          xfLLBFOlE7j8Oblm9jgr/EXq5BAmoQaSdVveVzcA/ak=
Subject key identifier:   B9:DC:5D:6A:5A:0E:2F:1D:7B:4D:26:65:B8:21:2C:9F:76:84:54:9F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784EEC8AFF8B14ECB88C040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03b3499-ae88-3bdc-bf42-e19787270eb6.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.243.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:ee:c8:af:f8:b1:4e:cb:88:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=03be2c4a-9a54-4b3b-a64b-33ac15fb660c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:cf:55:d2:f0:de:67:10:70:ef:ea:ae:b9:
                    b4:ab:d6:6a:6a:78:03:02:09:11:40:f8:6f:74:5a:
                    c4:79:3a:fa:76:57:ce:dd:71:d6:e8:5e:d4:d6:92:
                    8a:f0:96:f5:88:96:50:41:15:5e:5a:03:82:bc:91:
                    8c:46:00:5f:a4:4b:7e:17:2c:6e:54:ec:2a:b2:96:
                    60:2b:82:e8:77:b9:8e:84:85:a8:f6:6f:36:27:e5:
                    b4:40:a1:35:0a:97:17:ae:c8:b5:ec:a7:ea:79:3d:
                    dc:61:d5:83:bd:a0:f8:ce:86:d5:08:6d:de:55:2f:
                    e6:60:90:fe:cb:47:64:fb:a4:51:a1:5d:03:cc:61:
                    d3:62:0b:fd:91:bf:bb:cd:a2:c4:73:de:29:1b:50:
                    7b:be:ef:32:5a:7d:28:90:53:15:b4:8d:3a:ff:0d:
                    bf:8e:fb:c4:d6:90:b4:3a:94:0a:bd:4a:bd:0f:a8:
                    bc:96:dd:2c:d2:12:90:5f:db:e0:a2:77:29:1b:d8:
                    77:62:41:7d:e3:ad:aa:55:bd:89:06:10:34:72:71:
                    a9:ad:f4:17:dd:d9:5f:ac:73:54:7b:a5:91:23:f5:
                    d9:37:d9:ee:79:73:51:72:94:6e:d7:db:d3:a2:aa:
                    d2:66:7e:bb:d4:08:84:82:19:35:3b:c5:ae:a9:86:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:5D:6A:5A:0E:2F:1D:7B:4D:26:65:B8:21:2C:9F:76:84:54:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03b3499-ae88-3bdc-bf42-e19787270eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.243.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:77:9e:66:df:8b:6f:a9:75:04:33:97:49:57:d4:5a:6e:56:
         1a:94:60:cc:1a:2d:85:fc:7c:2e:93:8b:3b:2e:9c:db:3b:40:
         82:a0:39:6d:96:6a:a3:e7:d9:a3:1d:3a:9f:a4:5d:9f:58:32:
         5b:ba:ba:a6:5f:44:7b:3a:a8:24:25:61:4f:51:f6:cb:51:94:
         9b:af:c3:47:ff:2b:3b:3f:ce:14:b0:19:61:c0:c7:2d:12:e5:
         f4:a2:06:dc:91:12:c2:ab:a3:9a:49:9e:3f:b7:0d:62:68:b5:
         83:fb:dd:b0:fd:61:24:82:96:d1:1a:69:7b:5f:ac:48:95:f9:
         0b:f4:77:e5:44:31:a8:9b:80:c9:d9:a0:c7:4f:c3:e2:cb:32:
         b2:bf:17:24:ef:d5:6c:30:f7:e9:d8:ba:80:88:58:e3:71:2d:
         b4:d8:dd:42:7e:9e:af:57:99:d7:33:26:f8:4e:f8:e1:84:88:
         72:25:6b:77:d4:96:9d:08:69:df:fd:4c:b5:a3:e5:7a:07:29:
         47:d7:a9:4e:b7:18:5c:ab:74:5a:aa:f3:60:d7:64:42:ae:e1:
         56:d4:99:9f:e7:df:8d:a6:f8:7a:87:af:75:93:e9:6b:bc:65:
         2c:57:6b:72:43:e1:b4:5b:70:ee:be:39:b6:bc:ae:03:be:f8:
         64:d8:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:59:00 2025 by rpki-client