Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e97569c6-5960-3db4-b8d6-b2d8d5967fad.roa
File:                     e97569c6-5960-3db4-b8d6-b2d8d5967fad.roa (raw, json)
Hash identifier:          Lr3FEupsKP2k8RKhjhbYhKippguwdC/1YxCuQjy9yRs=
Subject key identifier:   6D:46:F3:D0:92:48:01:7D:EA:F4:D2:81:A7:50:3C:31:88:67:FD:6A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784D4D90CAC00D283BAD600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e97569c6-5960-3db4-b8d6-b2d8d5967fad.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     19527
IP address blocks:        35.219.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:d4:d9:0c:ac:00:d2:83:ba:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=9f46c0f8-b706-4a61-a7e3-ca055f47a28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:7b:d7:49:c1:6f:60:0c:6e:5f:e8:df:2f:
                    f7:dd:97:dd:db:72:77:fc:a3:5e:bb:9e:0c:b6:36:
                    1a:91:0b:8e:e9:44:42:af:84:67:4a:23:7f:6d:56:
                    98:fb:39:15:3b:59:48:1d:31:39:61:67:27:08:27:
                    1e:09:c3:db:2a:91:3e:4a:c4:ed:de:7f:86:fe:63:
                    92:0c:a5:68:25:7e:fd:19:59:5d:b9:8a:db:04:26:
                    6c:e2:7a:6a:c3:f5:43:96:02:d9:63:5f:fe:5e:58:
                    ef:46:85:37:75:8f:72:c0:b5:75:9d:c2:99:0d:dc:
                    de:24:82:c7:98:66:58:2b:5f:3f:ad:4b:7c:ac:f6:
                    40:cf:9c:d2:8b:b0:fb:cb:80:fc:b1:58:f4:01:78:
                    37:15:b2:7f:21:02:d1:67:cf:b3:82:c8:08:85:c4:
                    6b:3c:9d:95:12:3c:0f:50:c7:d0:1d:9c:42:7a:06:
                    9d:02:30:50:31:05:49:b4:cd:18:42:0f:7f:c7:76:
                    c0:48:a3:c3:bd:5e:d2:1d:fb:5b:d5:4d:ea:fc:00:
                    aa:0a:fe:31:16:3a:4d:2d:69:bd:ff:48:d4:43:43:
                    23:89:52:18:1d:8e:91:6a:2e:50:b6:3d:7f:89:71:
                    a3:c9:1e:ff:a1:5f:14:31:f8:e4:7d:d6:5b:c9:43:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:46:F3:D0:92:48:01:7D:EA:F4:D2:81:A7:50:3C:31:88:67:FD:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e97569c6-5960-3db4-b8d6-b2d8d5967fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b2:e2:5d:66:42:9c:8d:29:95:ac:66:c5:72:87:c5:96:93:
         36:d9:6b:ed:af:1c:84:30:5c:9d:7e:a1:3b:81:94:74:0c:2e:
         4e:32:e7:dc:2d:c8:d2:a1:f9:f7:dd:03:30:ba:31:25:15:56:
         87:11:67:f0:1a:8f:73:66:02:d3:4f:e9:27:18:02:d2:80:51:
         4d:00:22:44:d5:89:23:56:76:b4:9e:68:b7:f8:86:e9:a9:5f:
         d1:d1:fa:6f:89:e4:d6:0b:8e:f1:a8:94:61:74:c4:b1:1c:9c:
         d9:6b:ea:48:f9:b1:5b:f8:80:b5:99:c0:3c:b1:e9:52:26:bc:
         d6:0d:a1:fc:88:aa:08:c7:0f:8f:80:41:47:09:1f:53:b8:34:
         e3:a9:b9:48:dd:0e:32:12:19:9c:13:9f:c5:82:ee:e9:62:82:
         aa:03:03:18:b0:4d:9a:0c:64:68:17:70:69:f7:32:d5:11:3c:
         9d:3c:95:fa:86:ee:b3:cc:78:57:a5:4b:a6:6e:2e:a7:b9:12:
         77:6a:76:09:39:c4:ab:cb:18:49:4b:bd:07:19:88:7a:d6:a2:
         1f:d5:26:2a:e4:44:dc:c0:66:cd:cb:0b:04:01:83:45:22:9a:
         d2:87:2c:4d:58:7e:6f:09:2c:3c:82:61:96:e2:8e:07:44:40:
         76:c1:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:31:59 2025 by rpki-client