Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbbf0b60-b438-3080-b186-60dc3c01b006.roa
File:                     dbbf0b60-b438-3080-b186-60dc3c01b006.roa (raw, json)
Hash identifier:          WnKXhSN6oeKTducY5Xbxt17bv2Cfh5aKi2q4s+DJvHE=
Subject key identifier:   BE:84:E6:70:C8:92:EA:8E:E4:EA:85:14:2C:85:31:0D:A7:13:3B:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785307087C601A5CDAA2E60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbbf0b60-b438-3080-b186-60dc3c01b006.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.188.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:30:70:87:c6:01:a5:cd:aa:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=e521f231-00f3-4802-ba0a-e1ad23aa8d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:77:cf:10:ac:ba:5a:71:04:56:ad:ac:a3:
                    b6:66:e2:13:90:9c:e8:d0:04:58:e9:38:6b:a6:3a:
                    ec:24:d4:4e:9e:a8:81:00:69:68:3c:05:15:93:fa:
                    09:a2:35:27:29:67:d5:64:4b:d9:96:cd:00:4f:71:
                    c4:ba:25:37:b8:6b:74:ce:17:0c:58:2c:66:27:58:
                    13:33:c8:fc:ca:22:8c:d4:11:cb:7e:3c:b3:03:e9:
                    84:55:81:ad:4d:a2:86:80:94:6c:ad:87:02:d1:b9:
                    ce:f0:1e:df:ba:e1:72:0c:2a:03:30:40:ef:3f:e2:
                    93:01:c4:fd:14:24:ae:fa:b1:e0:65:bc:d6:48:07:
                    45:df:27:f6:58:69:97:ce:05:ee:38:81:44:26:98:
                    2f:aa:d5:b8:90:c3:e1:43:23:22:67:33:36:f1:82:
                    2b:0e:df:1e:7f:6c:04:68:45:5c:13:f6:30:44:f5:
                    cd:8b:7c:90:fb:38:26:71:e5:51:9c:b6:89:e6:3b:
                    d0:f5:93:eb:6f:cb:c8:c8:a4:fd:b9:76:d7:4b:95:
                    32:90:a3:12:74:53:34:1a:83:a4:1e:4a:0f:66:70:
                    84:1e:ea:81:c8:b8:29:83:9c:cc:87:9f:b0:15:bc:
                    10:e7:75:85:41:30:51:38:7a:df:57:f2:d6:fd:c2:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:84:E6:70:C8:92:EA:8E:E4:EA:85:14:2C:85:31:0D:A7:13:3B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbbf0b60-b438-3080-b186-60dc3c01b006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:bc:ed:a5:80:30:47:16:33:b9:91:db:cb:e5:3e:f2:b9:
         49:c0:60:bc:c9:79:2a:94:a9:52:dd:79:a0:e2:55:1d:e2:85:
         6d:f3:ad:6f:7c:bb:6c:39:1c:f2:78:8c:76:bf:e9:f1:92:f0:
         51:99:4a:9a:a1:b5:d8:18:78:bb:c3:91:b2:21:4a:28:27:17:
         6e:a4:2b:2c:ad:c0:ec:3c:9c:64:c4:48:0f:9d:9e:b4:5d:a9:
         93:31:bd:29:5c:4e:87:4b:60:92:ca:a9:65:e8:74:b6:5a:64:
         8f:c7:ec:60:eb:88:70:ba:ad:07:80:71:cc:aa:b1:3c:89:49:
         16:12:15:8d:6c:0d:97:89:4f:3e:a7:a4:76:00:00:ea:5f:1d:
         7c:e5:f7:57:7c:2a:68:f7:76:01:b1:bf:89:f5:46:b3:3f:b3:
         e2:98:a8:92:8f:79:89:14:1d:08:14:a0:a4:34:ad:87:45:3d:
         9d:be:be:05:a5:47:46:db:d2:3b:44:d2:d1:80:f8:32:4f:95:
         9b:42:ad:1c:b8:45:3b:73:14:2e:51:08:dc:66:6a:25:c3:97:
         91:48:d5:38:07:c6:6b:8a:cf:66:c1:1d:82:d2:d3:d3:58:5a:
         27:db:3e:64:2f:12:4a:16:d7:9c:51:a1:20:ca:f0:45:e5:5b:
         1b:ac:92:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTBwh8YBpc2qLmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
ZTUyMWYyMzEtMDBmMy00ODAyLWJhMGEtZTFhZDIzYWE4ZDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZF3zxCsulpxBFatrKO2ZuITkJzo0ARY6Thr
pjrsJNROnqiBAGloPAUVk/oJojUnKWfVZEvZls0AT3HEuiU3uGt0zhcMWCxmJ1gT
M8j8yiKM1BHLfjyzA+mEVYGtTaKGgJRsrYcC0bnO8B7fuuFyDCoDMEDvP+KTAcT9
FCSu+rHgZbzWSAdF3yf2WGmXzgXuOIFEJpgvqtW4kMPhQyMiZzM28YIrDt8ef2wE
aEVcE/YwRPXNi3yQ+zgmceVRnLaJ5jvQ9ZPrb8vIyKT9uXbXS5UykKMSdFM0GoOk
HkoPZnCEHuqByLgpg5zMh5+wFbwQ53WFQTBROHrfV/LW/cKn+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6E5nDIkuqO5OqFFCyFMQ2nEzveMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGJiZjBiNjAtYjQzOC0z
MDgwLWIxODYtNjBkYzNjMDFiMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7wQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7SvO2lgDBHFjO5kdvL5T7yuUnAYLzJeSqUqVLdeaDiVR3ihW3zrW98
u2w5HPJ4jHa/6fGS8FGZSpqhtdgYeLvDkbIhSignF26kKyytwOw8nGTESA+dnrRd
qZMxvSlcTodLYJLKqWXodLZaZI/H7GDriHC6rQeAccyqsTyJSRYSFY1sDZeJTz6n
pHYAAOpfHXzl91d8Kmj3dgGxv4n1RrM/s+KYqJKPeYkUHQgUoKQ0rYdFPZ2+vgWl
R0bb0jtE0tGA+DJPlZtCrRy4RTtzFC5RCNxmaiXDl5FI1TgHxmuKz2bBHYLS09NY
WifbPmQvEkoW15xRoSDK8EXlWxuskqA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:53 2025 by rpki-client