Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659796a6-75e5-3e13-ab55-1acd69555b91.roa
File:                     659796a6-75e5-3e13-ab55-1acd69555b91.roa (raw, json)
Hash identifier:          UBrIM42Ks+Hnv39HNaJ3V4mhdYr5q+XA4CbX7lvozg4=
Subject key identifier:   3B:F8:94:E2:25:61:93:FE:87:54:05:19:D9:19:E1:6E:4B:DC:99:7E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7851CF98C6ADA48EE5D5300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659796a6-75e5-3e13-ab55-1acd69555b91.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        35.213.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:1c:f9:8c:6a:da:48:ee:5d:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=2ee40a5c-d084-47ae-890e-5e9803c7737a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:9d:76:aa:e4:18:39:5f:76:af:1a:24:80:
                    8f:71:57:bc:34:1c:dd:f9:6b:73:aa:66:23:83:b6:
                    2d:f1:0b:ee:7d:f1:fb:22:e9:18:cc:cb:11:f6:c2:
                    31:0d:a9:ea:7b:e8:b7:65:e1:00:db:36:bd:8d:ca:
                    5b:bf:2c:8d:4e:9d:9f:00:00:31:44:38:cf:bd:1a:
                    80:37:4b:a8:c8:b2:01:27:9f:e7:96:1a:53:6e:19:
                    e0:cc:d5:aa:39:e2:84:8b:e5:76:1b:df:92:e9:20:
                    a2:77:14:4c:8d:8f:a2:b5:f9:93:bd:2e:4e:23:bb:
                    2c:e1:42:bd:25:2b:06:3f:5d:83:da:c5:2d:42:13:
                    fa:79:0a:9e:60:98:3c:8e:94:b6:c5:3b:a8:b9:05:
                    51:0b:fb:2a:e1:d5:b2:89:93:08:42:4a:75:ae:5a:
                    7d:ef:3d:dc:cf:a6:5b:08:46:43:fa:5e:ea:9f:36:
                    96:2d:79:12:7b:7e:49:28:4f:82:ae:07:02:65:7c:
                    7c:5f:db:57:d8:29:89:ff:6a:64:e8:19:68:2f:22:
                    29:2a:40:64:9e:cf:f5:58:ef:0f:ae:2b:6b:41:77:
                    33:3b:66:d3:ed:4d:c9:1f:ce:66:c0:aa:4f:09:af:
                    08:6e:f8:8c:27:9e:24:60:7e:19:7d:8a:b6:81:bf:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:94:E2:25:61:93:FE:87:54:05:19:D9:19:E1:6E:4B:DC:99:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659796a6-75e5-3e13-ab55-1acd69555b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.213.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8e:44:a7:a1:f8:4c:20:f0:51:42:d7:95:32:3f:d5:39:6a:
         6a:0e:ca:81:eb:ee:43:d8:4c:09:b0:91:50:2d:d3:6e:0c:0b:
         79:42:16:e2:ce:81:78:08:75:bd:0c:d3:77:eb:90:a8:df:f2:
         f0:a4:09:4f:53:5b:68:b5:1c:cc:a0:5a:a5:9b:16:4c:6b:ef:
         37:31:e1:6f:3b:fd:00:38:b4:8c:96:c0:68:84:a2:b1:db:b6:
         a0:af:49:8a:b1:67:f9:29:bb:cf:e7:de:66:3f:91:ac:dd:50:
         ee:ef:00:cb:6b:c4:3d:44:09:99:8c:40:60:5a:93:f5:e4:8c:
         d5:8c:15:43:9d:13:74:55:b8:c4:1f:f9:82:25:30:56:56:6a:
         d0:be:69:26:42:f9:a7:65:f2:76:dc:69:6c:02:07:4f:47:30:
         ae:41:78:9f:b6:dc:50:4c:5f:70:b7:40:ed:39:27:cb:e0:90:
         dc:f8:c6:6e:7d:88:f2:c2:c7:83:bb:4a:d0:1a:69:9b:0c:14:
         c0:a2:2e:13:6e:f1:08:de:cd:35:12:2d:f9:c7:0e:67:d0:83:
         bf:a6:42:45:75:08:37:ef:0a:ca:61:99:39:c9:43:00:8a:b4:
         9c:d2:e9:4e:d7:8d:9c:86:53:c1:b0:03:08:f5:2c:c1:3b:87:
         11:ca:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:52:38 2025 by rpki-client