Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa
File:                     e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa (raw, json)
Hash identifier:          VTkmwihpuDI9BjWX4/Qo1CB7vmvCSqRBukD/UVUN2bU=
Subject key identifier:   8A:20:4B:EE:8B:1E:6B:9F:D5:29:49:BA:5D:49:15:BF:0B:57:F8:C6
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584A49ECC06A8096D109BCD24D00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa
Signing time:             Mon 23 Jun 2025 17:11:48 +0000
ROA not before:           Mon 23 Jun 2025 17:11:48 +0000
ROA not after:            Sun 21 Sep 2025 17:11:48 +0000
asID:                     395945
IP address blocks:        35.62.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:ec:c0:6a:80:96:d1:09:bc:d2:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jun 23 17:11:48 2025 GMT
            Not After : Sep 21 17:11:48 2025 GMT
        Subject: CN=70c55200-cc50-408e-a954-fc8b54db4135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:5f:a3:64:e0:06:fd:10:b6:7f:4b:ad:26:
                    45:db:17:6d:a2:dd:d1:01:29:03:e9:20:2b:ad:41:
                    98:08:76:7a:cb:da:c7:43:9c:c4:f8:a2:13:ba:9b:
                    09:47:27:d6:02:59:b2:86:f5:75:43:2e:d4:20:a3:
                    34:93:21:36:e8:9c:7c:2a:29:ed:4a:fe:c1:9d:a4:
                    3c:31:ec:7b:b6:58:d0:f6:d9:af:78:34:f2:e5:95:
                    29:cd:5a:b2:51:64:9f:ce:af:01:bb:b8:f6:c1:9b:
                    96:b1:da:68:68:f7:21:fa:09:52:e5:86:5f:0b:c8:
                    2d:c3:81:b7:9e:fc:71:b4:30:70:78:8c:b2:53:40:
                    27:1a:cc:53:84:53:ad:90:ee:39:ca:3d:5d:40:2b:
                    74:40:5a:e7:85:de:a4:eb:65:6e:db:8f:22:ad:b1:
                    f6:72:d9:b5:91:06:8f:1b:63:d5:f2:93:ad:b6:cc:
                    aa:47:35:55:16:a8:7c:8f:2e:c4:07:47:e2:3a:87:
                    0b:5a:db:db:89:77:88:bf:03:55:35:e1:13:72:f2:
                    1e:d0:26:2f:98:ca:7f:7d:e7:cf:2d:05:a0:19:37:
                    48:78:27:d6:3e:d2:f5:90:8a:1a:b2:9b:72:d5:02:
                    90:1e:b5:71:9f:1d:37:de:d8:a7:61:0c:ac:8e:c9:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:20:4B:EE:8B:1E:6B:9F:D5:29:49:BA:5D:49:15:BF:0B:57:F8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e2248a04-31f1-3af2-af5f-0b109aa3a27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:fd:b1:96:31:5d:c5:c3:7d:98:c4:3a:1f:a6:c9:43:64:6b:
         29:fd:88:72:cd:bb:f4:c1:59:61:dc:d7:fb:61:7d:d3:37:b1:
         42:18:81:f5:3c:e4:a9:fd:bc:07:ed:11:48:35:8c:4d:d0:74:
         6e:c6:06:7a:91:1a:e0:76:42:f8:a1:f5:ce:2a:05:b8:ff:8e:
         81:ec:03:b9:8e:c9:eb:72:46:76:79:74:41:9e:d1:e2:44:5c:
         a3:67:a4:3e:c8:44:62:32:9e:2c:7b:9d:8b:8d:78:91:d5:5f:
         50:bd:e2:62:28:80:99:5e:86:97:21:7e:47:40:f9:f7:1d:95:
         fa:01:8d:1b:30:3a:b5:89:e8:bc:82:76:1a:dd:fb:05:f3:26:
         8f:53:a3:0a:58:ce:36:ca:e1:74:a6:84:63:78:74:33:cb:a6:
         ef:fb:07:91:59:73:0b:84:64:e0:c9:da:05:c1:9b:a3:51:6f:
         1c:b6:bb:cd:71:09:19:57:fa:87:2d:af:92:2e:ae:63:54:9e:
         64:fc:ec:ea:28:91:74:45:cd:f3:60:ff:26:57:88:dd:f5:36:
         b8:cc:60:21:f0:95:f8:8f:52:18:12:57:ff:97:ec:9e:c1:77:
         2f:69:c6:c8:e4:21:bc:90:94:5e:be:fc:18:4e:a7:bd:fb:96:
         99:aa:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:41:04 2025 by rpki-client