Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
File:                     884763ea-5eee-3437-a700-182a36503d81.roa (raw, json)
Hash identifier:          Rrg3CCiavRqVcIQqqCXAvclf4T0m20hWtgUFeDQXh/I=
Subject key identifier:   65:08:27:9C:7E:9A:3C:82:73:5B:54:49:01:0A:89:38:C0:AD:3C:BB
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584A58CB024F132E25FA31D0A020
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     36375
IP address blocks:        35.7.64.0/19 maxlen: 19
                          35.7.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:02:4f:13:2e:25:fa:31:d0:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=c4f507fc-23cf-440b-a65b-40e3a148931b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:dc:64:7e:19:dd:ab:e2:b9:b7:00:f7:22:
                    b8:9e:c6:25:76:1c:61:51:30:57:29:4d:bd:af:a0:
                    ef:66:b0:04:97:9b:38:b1:0d:53:06:7a:cc:e4:f7:
                    50:1a:7b:88:75:c2:91:9b:c6:44:f5:b9:79:49:65:
                    0b:52:cd:73:10:7b:88:05:31:ee:54:37:ae:80:21:
                    4a:37:ac:47:ba:fe:2a:aa:70:bf:21:3d:06:4e:7d:
                    52:8d:f7:da:f3:dd:c3:80:c7:27:73:39:de:bb:23:
                    d7:d2:5d:f9:8b:c4:a6:46:31:cb:77:cb:d6:dd:54:
                    97:e2:d6:28:11:bb:ee:8b:be:de:fc:d9:4c:1f:d2:
                    ae:e7:93:9f:a9:90:c2:13:1b:6d:e2:52:d0:b6:70:
                    13:31:7b:fd:22:01:84:8a:5f:20:93:b7:76:a2:8e:
                    4d:e3:98:cf:0c:fb:0e:ab:52:a1:39:7b:5b:f1:47:
                    cf:97:26:6f:36:51:24:ae:c4:89:e3:41:bb:c8:cf:
                    eb:7b:08:a4:75:30:c7:34:6b:d4:32:69:5e:43:fd:
                    7e:a8:06:cb:87:58:a6:5a:d7:b4:0c:89:5f:3b:05:
                    4e:1f:f8:f5:e4:9e:78:1f:bc:f7:45:ee:23:1d:e5:
                    43:8f:11:7f:81:75:a8:ac:83:2d:b1:a3:3c:f4:e8:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:08:27:9C:7E:9A:3C:82:73:5B:54:49:01:0A:89:38:C0:AD:3C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.64.0-35.7.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0a:54:ed:96:29:3f:c5:ac:77:47:4e:b3:e9:5c:f6:91:a3:
         42:35:c2:8e:75:99:f3:a9:e8:aa:5a:f4:66:1b:c2:51:15:c1:
         cb:78:43:f6:ae:3a:90:2e:c6:69:5f:e6:26:99:75:57:d5:30:
         88:60:f8:af:b1:39:25:8e:1b:cc:8d:bc:a2:98:cc:7a:5d:48:
         83:20:71:a3:5e:67:81:51:cc:2e:0e:6d:18:88:fa:12:c7:82:
         82:c9:58:6e:aa:6d:94:13:56:7f:a9:8b:1f:01:09:b6:ab:f5:
         98:1a:95:36:5f:2c:47:2f:9e:e1:d6:9f:2e:eb:8c:03:3c:e4:
         4b:7b:9f:bb:08:82:f4:c5:37:15:f0:d9:6e:88:aa:11:da:8e:
         21:e9:d9:a2:3c:bd:e5:6b:79:4e:35:a6:d5:4d:61:32:f9:33:
         41:4e:29:6f:20:ba:35:ac:db:a3:45:9c:96:fa:5e:a7:e5:96:
         52:1f:6c:b2:7f:f3:b2:d3:dd:24:e0:3a:1e:7b:67:64:5a:2c:
         99:39:fa:12:b0:23:ce:9f:93:80:e2:81:63:73:17:08:4f:64:
         a6:2d:9b:60:fe:60:1f:b1:0a:47:e6:5d:d1:96:35:c8:c3:94:
         45:5d:4e:79:2b:55:96:c9:8e:9c:40:0b:e5:33:bf:e6:01:eb:
         47:4e:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:37:20 2025 by rpki-client