Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa
File:                     fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa (raw, json)
Hash identifier:          DKZU4cbXkRAvkwyc3Kom8xjZirGsEavjPS2ARiuHbgM=
Subject key identifier:   94:FF:F2:B3:38:0F:57:4D:70:81:C0:E3:9B:2A:97:23:80:5C:9A:7C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784D531654B19396C5E1880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.234.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:d5:31:65:4b:19:39:6c:5e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=199bbb49-5b85-400a-aea2-109da47d0b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:1e:71:6b:a1:50:b2:39:c7:c6:ad:09:23:
                    a9:d0:49:97:c8:fb:63:a8:e5:b8:a0:17:0e:00:d5:
                    02:1a:2e:06:c4:17:60:49:ce:18:7b:10:e4:a5:0b:
                    31:47:d5:79:40:d9:e3:e4:0e:f1:ca:47:c7:00:82:
                    a9:48:5a:d2:5a:e4:4a:c5:52:26:2a:ea:8b:e4:7e:
                    89:6f:1c:c6:62:23:45:e3:c7:89:06:01:3d:d7:e6:
                    0f:47:ce:57:11:93:2d:d3:9f:c3:1c:98:65:6c:94:
                    f8:74:68:43:d6:36:c8:9a:2b:4d:15:7d:73:ce:84:
                    55:bf:43:74:93:3f:93:1f:f3:02:08:31:8e:76:a9:
                    1c:ed:5a:41:f3:bd:7f:58:b1:11:e4:71:d3:22:8c:
                    83:bf:ad:96:29:c6:2d:7c:6d:69:82:a1:6e:9b:9e:
                    65:fa:f0:db:eb:a5:05:f2:db:6f:f5:d5:4a:10:d5:
                    87:f5:da:10:59:19:a2:6e:24:dd:a3:2d:4d:8b:78:
                    0a:33:d7:4c:db:08:2d:2b:e8:4b:ef:16:f3:67:5c:
                    3d:9c:5a:17:0c:23:1b:a4:04:ff:bc:82:ef:90:26:
                    1e:68:f9:bd:8f:19:b0:a8:0c:3a:98:24:fa:8a:5a:
                    9f:17:85:fd:10:1e:79:ac:44:6d:5c:2a:50:dd:90:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FF:F2:B3:38:0F:57:4D:70:81:C0:E3:9B:2A:97:23:80:5C:9A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.234.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a2:09:9a:04:f0:fc:ec:23:4c:fd:7f:8e:c3:89:b5:3a:4f:
         76:0c:0b:87:ec:ae:f9:1d:ff:41:1a:a1:5b:75:40:c7:d5:db:
         db:a9:ae:47:76:3e:6f:2c:52:2c:1b:72:50:82:e9:8b:9e:a7:
         13:d6:20:84:5d:ed:18:3b:c6:53:77:fb:b1:6c:2e:3a:44:3e:
         13:ee:49:a8:65:d9:02:07:65:78:5a:9a:28:80:ed:b7:68:26:
         b1:3b:21:bf:99:f9:66:73:85:a1:5f:2e:3d:b0:43:61:f6:2b:
         b0:6e:3c:ab:55:5a:9e:d3:60:b8:6e:23:1d:2f:1e:2b:70:c4:
         d1:7d:b6:dc:18:3c:49:f5:28:29:e9:44:af:74:f8:fe:c5:03:
         00:28:b4:69:3c:5e:f1:53:d8:60:5f:30:e5:47:37:80:a9:a5:
         9a:66:a2:8f:d4:81:6f:e2:96:4d:7a:fb:8a:01:06:16:d7:a5:
         04:4a:ff:91:8f:4f:3d:6a:e2:0f:d7:83:15:68:88:6c:29:df:
         40:8d:d3:2d:e2:e8:e8:d7:59:54:50:bf:12:5e:33:f0:54:6f:
         30:dc:3d:ca:19:d7:1e:eb:16:40:4e:e0:1b:17:8f:31:6c:77:
         a1:2b:2f:c5:51:e2:0a:7e:eb:31:db:de:eb:f0:34:70:59:85:
         6a:01:66:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNUxZUsZOWxeGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MTk5YmJiNDktNWI4NS00MDBhLWFlYTItMTA5ZGE0N2QwYjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw0ecWuhULI5x8atCSOp0EmXyPtjqOW4oBcO
ANUCGi4GxBdgSc4YexDkpQsxR9V5QNnj5A7xykfHAIKpSFrSWuRKxVImKuqL5H6J
bxzGYiNF48eJBgE91+YPR85XEZMt05/DHJhlbJT4dGhD1jbImitNFX1zzoRVv0N0
kz+TH/MCCDGOdqkc7VpB871/WLER5HHTIoyDv62WKcYtfG1pgqFum55l+vDb66UF
8ttv9dVKENWH9doQWRmibiTdoy1Ni3gKM9dM2wgtK+hL7xbzZ1w9nFoXDCMbpAT/
vILvkCYeaPm9jxmwqAw6mCT6ilqfF4X9EB55rERtXCpQ3ZCv3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJT/8rM4D1dNcIHA45sqlyOAXJp8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQ1YTUyNTgtMWU0Zi0z
ZTMyLWI2OWUtOWEzYTNjOGU4MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+qgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOiCZoE8PzsI0z9f47DibU6T3YMC4fsrvkd/0EaoVt1QMfV29uprkd2
Pm8sUiwbclCC6YuepxPWIIRd7Rg7xlN3+7FsLjpEPhPuSahl2QIHZXhamiiA7bdo
JrE7Ib+Z+WZzhaFfLj2wQ2H2K7BuPKtVWp7TYLhuIx0vHitwxNF9ttwYPEn1KCnp
RK90+P7FAwAotGk8XvFT2GBfMOVHN4CppZpmoo/UgW/ilk16+4oBBhbXpQRK/5GP
Tz1q4g/XgxVoiGwp30CN0y3i6OjXWVRQvxJeM/BUbzDcPcoZ1x7rFkBO4BsXjzFs
d6ErL8VR4gp+6zHb3uvwNHBZhWoBZuM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:51:40 2025 by rpki-client