Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa
File:                     16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa (raw, json)
Hash identifier:          35Pfi9m/LsKNCW2Nd2cLMKJNbtIjIfEXb6hfFGbHWxA=
Subject key identifier:   20:23:5A:6E:FD:7B:E9:A2:3A:24:D4:E7:94:21:0D:B6:76:9F:68:97
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285849ABB4A9ADD7B9B227499FA480
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     237
IP address blocks:        35.25.0.0/16 maxlen: 16
                          35.37.0.0/16 maxlen: 16
                          35.62.0.0/16 maxlen: 16
                          35.63.0.0/16 maxlen: 16
                          35.64.0.0/14 maxlen: 14
                          35.68.0.0/15 maxlen: 15
                          35.70.0.0/16 maxlen: 16
                          35.71.0.0/18 maxlen: 18
                          192.122.181.0/24 maxlen: 24
                          192.122.182.0/23 maxlen: 23
                          192.122.184.0/21 maxlen: 21
                          192.122.184.0/24 maxlen: 24
                          192.122.192.0/21 maxlen: 21
                          192.122.200.0/24 maxlen: 24
                          192.203.195.0/24 maxlen: 24
                          198.108.0.0/14 maxlen: 14
                          204.38.0.0/16 maxlen: 16
                          204.39.128.0/18 maxlen: 18
                          207.72.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a9:ad:d7:b9:b2:27:49:9f:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=869a798f-ed51-484c-a21c-2053f7bff4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:eb:fb:f4:ad:e3:6f:6a:58:3b:e6:2e:b7:
                    05:ea:43:8a:82:1e:d1:a2:22:b2:06:f7:30:ed:03:
                    a2:b5:e0:e4:e8:73:a7:68:f7:b3:08:ee:ee:23:38:
                    f1:35:05:68:6d:3e:9f:cd:63:08:64:2b:9b:57:7f:
                    87:f3:a4:de:69:16:84:da:fd:a0:25:0b:aa:4e:93:
                    9c:21:e0:b9:73:80:25:99:7d:59:59:86:f8:d2:39:
                    f5:af:9c:47:2d:0a:f8:aa:09:26:c1:ef:fc:29:3c:
                    f7:8c:b5:7f:1b:d1:e2:4f:ac:04:62:8a:8a:ec:b1:
                    5b:4c:ed:1f:5a:1f:6a:14:bc:7e:bc:c7:91:32:71:
                    d0:bf:12:7a:ce:e2:e2:fc:64:a4:d1:90:8b:6f:80:
                    87:35:fc:e6:fd:8b:64:48:3a:a5:c9:ee:af:1a:d4:
                    4c:84:9b:0a:c3:57:0d:46:de:2c:31:da:54:e3:0b:
                    58:5e:69:d9:11:01:f2:d1:03:d2:0a:e1:a5:70:b6:
                    03:a5:37:bf:5d:8f:89:6c:5e:ee:bb:c6:7a:6f:d4:
                    8b:41:63:7d:a0:33:3d:fa:2c:22:a5:b1:ae:e9:92:
                    76:49:1b:2d:35:0c:02:42:24:74:0b:6d:03:44:25:
                    27:60:1f:59:51:31:4e:db:35:a9:81:b9:f6:d8:d7:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:5A:6E:FD:7B:E9:A2:3A:24:D4:E7:94:21:0D:B6:76:9F:68:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.25.0.0/16
                  35.37.0.0/16
                  35.62.0.0-35.71.63.255
                  192.122.181.0-192.122.200.255
                  192.203.195.0/24
                  198.108.0.0/14
                  204.38.0.0/16
                  204.39.128.0/18
                  207.72.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:71:6e:0c:22:96:26:6e:57:93:5c:f0:73:4d:7b:78:f2:91:
         35:d1:bf:37:d6:c2:07:6f:bb:42:1e:dc:bd:90:c1:62:a6:1d:
         a3:68:f7:56:21:08:88:83:26:15:9e:3c:6f:74:e7:ee:08:a4:
         19:78:de:30:ab:79:2c:69:5d:9a:ac:95:9e:3c:eb:03:08:4f:
         92:73:d3:44:bf:f7:e7:4b:6d:31:23:7e:3e:f9:24:1f:6c:63:
         da:01:40:15:ba:f9:5f:44:3a:b6:3f:91:02:48:3e:1c:9e:5f:
         ad:97:1f:fb:39:5b:05:34:70:8f:a5:cc:08:bd:e5:9d:eb:26:
         a3:f1:5a:9a:fe:e8:b9:29:c5:49:49:fa:42:34:de:19:11:f7:
         1b:71:71:b5:20:5b:d5:9a:d1:65:f2:fd:23:41:22:14:0b:82:
         80:ae:b3:9f:84:60:e0:37:4f:fa:58:bc:15:2f:8d:b3:c8:ca:
         6a:0e:41:f5:6a:ac:51:e9:02:75:cd:90:86:72:4a:d1:e3:9a:
         cf:5b:65:90:62:58:41:62:b3:73:40:c5:bd:e2:3a:02:7c:a8:
         6b:b4:dd:57:1e:a6:64:97:7f:48:83:34:27:80:05:96:a9:98:
         f2:34:01:0b:ab:cf:a8:72:47:94:18:8c:72:c2:85:ff:0a:d8:
         21:0e:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:05:08 2025 by rpki-client