Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/30ef6fc6-8762-3fdb-a135-3a06918c1169.roa
File:                     30ef6fc6-8762-3fdb-a135-3a06918c1169.roa (raw, json)
Hash identifier:          3WGDKRK9tZ6r+07Pv/8zUDDZkoOyCeruqnj9J+1n27k=
Subject key identifier:   E3:2E:17:C1:B4:70:8A:CA:A5:AA:E4:55:5E:2A:6C:78:0A:8C:73:C1
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584A497071B90C66DE2361AF6A00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/30ef6fc6-8762-3fdb-a135-3a06918c1169.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     237
IP address blocks:        35.7.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:71:b9:0c:66:de:23:61:af:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=e21a9844-eace-404c-bc6c-6a25a01417a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:eb:e1:52:39:13:4d:43:af:3a:e2:cd:51:
                    d2:7c:2f:cf:49:6a:2d:58:d8:4f:4f:24:46:70:fa:
                    18:2d:36:81:e0:8d:45:02:90:86:eb:c2:34:b7:4b:
                    b7:9e:70:68:e9:f7:83:3d:cb:ad:c3:f8:ae:e1:c7:
                    22:91:d6:56:f9:f7:b4:50:a0:98:3a:9a:27:fc:0f:
                    6a:70:bb:42:cf:8d:84:fd:c5:06:be:96:1a:9a:3d:
                    83:a1:90:ee:c1:e4:cd:d7:00:61:c6:4b:d2:9f:4a:
                    64:6f:20:62:34:69:85:f1:d4:b9:46:82:bb:82:6d:
                    99:65:5d:f5:c5:25:1a:6f:be:01:e7:6b:08:f3:df:
                    c5:bb:fc:fe:55:d5:ba:4a:f0:ed:b2:07:c6:59:7b:
                    c7:b4:5e:79:c1:c3:19:ec:c5:e7:4c:1a:27:39:34:
                    d1:67:e8:0f:2a:a6:0a:b5:2a:3e:7f:4f:08:ef:7c:
                    5d:bb:56:0a:1a:db:73:59:76:18:00:32:cf:f4:c2:
                    ed:0f:62:97:4a:ab:c5:18:79:f0:dc:2d:8b:16:2d:
                    20:79:ec:e0:95:86:40:cc:01:88:3d:f6:1c:f3:4a:
                    29:2a:e1:f1:fa:c9:ae:1e:fa:8d:d2:63:06:cd:bf:
                    26:a8:1f:b5:64:a1:2a:a7:2c:19:6b:04:af:af:bc:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2E:17:C1:B4:70:8A:CA:A5:AA:E4:55:5E:2A:6C:78:0A:8C:73:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/30ef6fc6-8762-3fdb-a135-3a06918c1169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:75:bd:f0:d5:14:04:d5:40:71:d4:9d:48:a4:13:3b:ed:
         19:e0:07:7e:0b:85:e0:ff:fe:d9:58:d9:7f:09:cd:b5:a6:b2:
         fc:80:29:42:a6:c7:1b:2b:d8:02:d5:10:40:80:6b:97:93:ae:
         0d:58:35:5b:d5:05:33:d4:fe:6e:06:5c:ec:9c:cc:99:53:29:
         83:24:90:e7:01:b5:6f:42:99:e4:19:0b:5c:f7:79:11:6f:8b:
         25:9d:bc:33:55:45:15:0e:be:a7:df:80:54:5e:cd:1c:5c:e3:
         a7:f5:03:2e:19:4e:e0:00:6f:c5:47:cf:82:12:63:fb:8c:76:
         06:78:ee:2e:03:49:53:fc:9c:b8:6e:0d:9c:7d:3b:83:82:31:
         47:a4:29:6e:4f:56:53:df:82:65:57:7d:55:b9:7b:e2:21:bb:
         9a:56:f0:7e:73:99:b9:b0:5f:40:50:5e:63:ca:16:b2:3b:ff:
         4b:89:05:3b:5b:9d:9e:9e:f1:04:cb:61:a4:64:d5:50:01:da:
         f7:9f:24:6e:e8:97:dd:57:2d:3a:6c:3b:ec:63:93:2e:2a:8b:
         c8:b2:93:5d:de:f2:2b:e9:29:38:c3:e1:b6:8d:f7:26:d1:e5:
         75:35:33:a6:40:70:9a:49:ed:85:00:eb:20:e2:f1:a1:d9:87:
         44:9c:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:31:58 2025 by rpki-client