Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f49516b6-5b79-3eff-ba3c-2538bbdc0994.roa
File:                     f49516b6-5b79-3eff-ba3c-2538bbdc0994.roa (raw, json)
Hash identifier:          0X8wsX7G3Omz+UyjmlKqUl5iV2bZkkCAIVnkPWB5kVg=
Subject key identifier:   CD:10:10:2B:B9:BE:83:06:0B:81:71:19:47:30:C1:7B:53:C1:69:D9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784FF26983F4950AEC9E3C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f49516b6-5b79-3eff-ba3c-2538bbdc0994.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.237.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:ff:26:98:3f:49:50:ae:c9:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=e8408229-08d1-4c02-b813-968b07fd1e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:3e:e1:90:e8:1d:ca:0f:4a:ec:a3:00:4b:
                    be:24:7d:c3:ab:a5:5a:db:bc:5f:3e:9d:74:c9:c3:
                    30:75:61:a1:13:38:67:77:87:e7:26:0d:1d:a8:f2:
                    90:c8:50:ff:ae:ce:b1:f8:e5:45:69:84:12:76:f7:
                    f4:32:05:40:6d:ce:2b:79:0e:ae:ff:9f:76:a0:ff:
                    7b:b2:55:5b:d1:76:f2:c8:33:50:68:9f:e7:78:82:
                    76:94:5f:a5:9c:eb:25:99:05:98:a4:b7:4f:ca:8b:
                    42:16:3a:05:03:2f:a9:0a:ba:da:1d:e6:81:69:36:
                    1d:de:eb:72:76:c5:a9:74:70:ae:7d:7b:7f:04:ac:
                    35:cb:34:94:6e:85:1e:25:e5:59:27:c3:dd:c3:fa:
                    76:b4:81:df:63:91:cb:64:fe:6c:fb:0d:c8:42:7d:
                    00:f4:dd:ac:d4:5e:5a:2f:fb:c9:b7:87:94:e7:88:
                    3c:bb:df:f5:87:e9:1f:da:61:6a:05:b7:38:7c:11:
                    98:69:ba:d4:68:2b:fa:f4:b0:19:5b:5a:d8:f7:da:
                    73:c8:85:95:b0:d6:65:de:c8:f0:84:66:2f:9f:0f:
                    25:5a:a5:9a:c0:d0:f1:59:73:67:fc:2a:5c:80:63:
                    6f:2d:6e:ad:b7:cd:a0:f9:76:fb:5a:04:d8:c8:3e:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:10:10:2B:B9:BE:83:06:0B:81:71:19:47:30:C1:7B:53:C1:69:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f49516b6-5b79-3eff-ba3c-2538bbdc0994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.237.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:08:d2:7c:dc:58:19:70:f6:ce:1a:df:a2:04:f3:5d:f7:66:
         4e:e9:4b:ef:c6:95:2a:1d:80:78:3b:bd:eb:73:5a:a2:6b:ed:
         0d:f1:d8:20:dd:2c:65:77:c3:27:4b:1a:2a:f3:c5:3b:a3:32:
         ff:35:b8:de:52:c0:af:55:13:5f:fb:23:5c:b0:5a:3c:27:9e:
         9f:ba:37:ac:b3:51:24:f7:05:54:e8:12:6a:5a:20:2d:3a:7a:
         76:67:2a:eb:15:76:bd:f6:d3:54:1d:99:ca:8c:4f:e3:8a:8b:
         9a:5a:f5:67:cb:f1:4f:1a:7b:a8:8d:91:af:4f:16:b5:01:9c:
         8a:04:63:68:76:7d:4a:04:e7:cf:72:23:cd:fa:b8:01:6f:f7:
         51:cf:7f:c8:f6:83:92:63:9f:03:03:f8:12:21:5e:5f:ee:08:
         a1:09:d4:2a:48:1c:81:16:cd:5b:23:bf:e8:82:9a:22:58:09:
         b0:99:84:8e:fc:d5:74:e7:06:d1:01:f1:69:36:32:30:28:86:
         f5:a0:ea:ab:ef:e2:ba:fb:4f:b4:b0:e2:55:8d:0d:0d:32:0d:
         d2:ef:cf:80:08:2c:5d:ab:e4:da:c0:77:a9:98:31:0a:02:6c:
         de:8e:8c:93:69:a0:af:f6:a9:69:10:48:61:26:6b:28:70:e0:
         85:19:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:21 2025 by rpki-client