Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0124ebc0-e6b6-3f89-a257-483260f865e6.roa
File:                     0124ebc0-e6b6-3f89-a257-483260f865e6.roa (raw, json)
Hash identifier:          X+Qp0uc7UiKcZoJAp4EqOatSeH0AjjGdaRNbs7yOsWs=
Subject key identifier:   6B:1C:C5:89:C7:AE:67:4F:8C:13:84:39:9E:E3:68:F1:24:33:C4:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784D66C611015AC5DB89780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0124ebc0-e6b6-3f89-a257-483260f865e6.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.184.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:d6:6c:61:10:15:ac:5d:b8:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=05ea41c6-b0a3-4fd4-8235-0795362cc2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:58:ec:32:bc:ad:79:cf:af:d5:0c:20:87:
                    29:03:f3:94:df:3e:66:4f:65:13:57:91:90:fd:02:
                    42:ba:e5:ae:df:3f:d8:dc:20:31:61:e2:79:bd:0c:
                    b9:da:94:94:a9:96:52:35:56:79:9a:05:11:5b:24:
                    ae:b9:92:fa:d0:ef:e5:b3:c1:66:e7:7b:50:0a:b2:
                    27:00:99:d4:a1:53:55:ce:90:52:84:3a:db:9c:96:
                    69:90:b7:a3:5a:f2:7f:28:9b:62:69:71:86:6b:68:
                    02:f5:09:6a:18:c2:a7:b8:c5:b0:a2:e8:be:09:54:
                    1c:94:97:c7:40:d4:d3:19:44:81:24:7f:dd:91:7b:
                    9a:14:4d:fd:5f:1d:db:5f:58:2f:4f:1a:e2:28:8c:
                    7e:05:8f:d5:3f:68:c7:9f:1d:cc:c9:4d:ed:de:26:
                    e8:12:d4:5d:d2:60:72:2e:d6:bf:e1:8c:ee:c6:4e:
                    4c:5f:31:96:47:95:1b:70:29:0c:1a:99:2a:63:73:
                    33:e3:ea:2e:08:0b:08:41:9f:5b:a2:6a:63:31:6e:
                    ab:7f:0c:d6:db:79:11:8f:95:b5:24:69:a4:f4:77:
                    97:30:f4:6e:e1:43:f7:5b:6f:5e:61:01:df:ca:c5:
                    af:be:5e:93:9c:33:52:62:dd:1c:1e:7d:63:17:5e:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:C5:89:C7:AE:67:4F:8C:13:84:39:9E:E3:68:F1:24:33:C4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0124ebc0-e6b6-3f89-a257-483260f865e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.184.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:15:b2:fd:b9:17:f2:80:8c:c8:f6:f0:7a:bd:16:18:c0:
         71:b5:ab:77:e5:f6:a6:f4:80:95:ac:5c:5d:25:e1:28:5b:2f:
         1a:6b:82:06:a7:27:c3:f8:76:71:99:09:5d:c7:bc:22:6b:f8:
         4a:55:c8:cf:14:f0:6f:a5:91:c8:aa:81:15:57:bc:ff:3d:4e:
         b3:c7:11:c9:c1:1e:35:26:ce:39:31:73:39:01:57:00:88:be:
         c8:c7:c1:36:67:8a:33:20:85:b4:a7:86:50:99:c3:4d:d8:93:
         c2:c2:39:af:79:36:3b:e7:a7:a0:93:ce:72:5b:82:35:96:7a:
         cd:d2:b6:bf:db:b6:cc:80:5d:d6:51:53:1c:a2:bc:15:4f:43:
         db:7d:f1:32:e4:35:75:b5:4a:44:31:17:fd:c6:c2:09:f0:8e:
         3f:4e:be:81:e7:91:9a:47:19:a1:8a:c6:d4:40:d0:b7:6d:e0:
         63:09:58:3b:8b:7b:52:23:97:54:7d:b2:f6:e8:b8:3f:16:09:
         2c:07:9d:27:02:17:f7:90:f3:17:27:5f:d7:8c:7a:39:4a:72:
         00:82:0b:a4:cd:99:5b:54:1d:25:45:43:e1:fd:c0:c6:55:e5:
         08:6a:76:7d:1a:55:9c:50:80:41:b0:0e:63:c6:3d:67:e7:aa:
         9a:e5:29:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNZsYRAVrF24l4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MDVlYTQxYzYtYjBhMy00ZmQ0LTgyMzUtMDc5NTM2MmNjMmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje1Y7DK8rXnPr9UMIIcpA/OU3z5mT2UTV5GQ
/QJCuuWu3z/Y3CAxYeJ5vQy52pSUqZZSNVZ5mgURWySuuZL60O/ls8Fm53tQCrIn
AJnUoVNVzpBShDrbnJZpkLejWvJ/KJtiaXGGa2gC9QlqGMKnuMWwoui+CVQclJfH
QNTTGUSBJH/dkXuaFE39Xx3bX1gvTxriKIx+BY/VP2jHnx3MyU3t3iboEtRd0mBy
Lta/4Yzuxk5MXzGWR5UbcCkMGpkqY3Mz4+ouCAsIQZ9bompjMW6rfwzW23kRj5W1
JGmk9HeXMPRu4UP3W29eYQHfysWvvl6TnDNSYt0cHn1jF17KYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGscxYnHrmdPjBOEOZ7jaPEkM8S7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDEyNGViYzAtZTZiNi0z
Zjg5LWEyNTctNDgzMjYwZjg2NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7iAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEncFbL9uRfygIzI9vB6vRYYwHG1q3fl9qb0gJWsXF0l4ShbLxprggan
J8P4dnGZCV3HvCJr+EpVyM8U8G+lkciqgRVXvP89TrPHEcnBHjUmzjkxczkBVwCI
vsjHwTZnijMghbSnhlCZw03Yk8LCOa95Njvnp6CTznJbgjWWes3Str/btsyAXdZR
UxyivBVPQ9t98TLkNXW1SkQxF/3Gwgnwjj9OvoHnkZpHGaGKxtRA0Ldt4GMJWDuL
e1Ijl1R9svbouD8WCSwHnScCF/eQ8xcnX9eMejlKcgCCC6TNmVtUHSVFQ+H9wMZV
5Qhqdn0aVZxQgEGwDmPGPWfnqprlKfo=
-----END CERTIFICATE-----
Generated at Sun May 4 19:28:32 2025 by rpki-client