Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9a6adfc-b63c-38f4-bccb-af81ab3d3588.roa
File:                     e9a6adfc-b63c-38f4-bccb-af81ab3d3588.roa (raw, json)
Hash identifier:          gHO+2Yxc636+HGLaRElp+GnC1Os1uQOP6q2t8Vv/rGw=
Subject key identifier:   4D:B4:82:A7:14:A1:A7:8A:58:9F:04:3F:06:DD:2A:02:E7:8E:14:D4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784FF730A74CACB29039600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9a6adfc-b63c-38f4-bccb-af81ab3d3588.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.187.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:ff:73:0a:74:ca:cb:29:03:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=e3f829b1-9a70-46ac-b327-59106eb24dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:5a:ae:40:3b:07:9b:42:50:0e:d8:70:14:
                    1c:e6:bf:0f:f3:23:18:20:03:f9:cc:61:33:67:08:
                    2b:41:86:19:70:b2:1d:21:6d:19:58:d1:ed:52:c4:
                    33:11:31:e6:11:bf:7f:8e:98:85:c6:51:10:2b:4e:
                    3b:0f:8c:7a:7d:47:6f:01:dc:60:e2:66:09:36:7a:
                    fb:c8:7d:e1:23:93:b9:ed:d4:74:ad:28:31:6b:b7:
                    71:14:17:10:87:1f:18:7c:02:22:8c:d3:37:7b:f2:
                    45:9d:4d:2f:72:28:9e:13:4e:8c:a2:41:36:93:7d:
                    67:51:4a:49:45:5a:99:cf:e5:6e:ec:2b:05:e0:b4:
                    14:ba:8d:da:af:51:7f:63:ba:59:46:9c:cf:02:01:
                    2d:9e:f2:2b:53:70:54:4c:8a:75:d8:29:f0:63:11:
                    59:58:c4:4d:31:c2:a8:d2:74:5d:60:27:8e:b8:f1:
                    57:bc:f5:bf:de:7f:1c:2b:3d:e7:6a:7f:95:e3:6f:
                    20:a6:5c:52:f7:08:de:8c:94:f3:aa:71:3e:cd:10:
                    54:7f:f0:61:bc:40:8a:10:68:88:e0:71:45:ec:cf:
                    1f:18:39:91:a3:d5:60:9c:04:a3:0f:f5:33:11:1a:
                    0e:75:bf:5c:b2:9c:0f:3e:a4:6b:ff:68:19:5b:38:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B4:82:A7:14:A1:A7:8A:58:9F:04:3F:06:DD:2A:02:E7:8E:14:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9a6adfc-b63c-38f4-bccb-af81ab3d3588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.187.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:2c:35:2a:7e:2f:3e:5a:2f:64:ae:92:e6:2d:46:3b:dd:
         07:2b:9c:d0:07:ff:38:cf:da:3e:ec:18:62:b6:b6:24:07:21:
         18:60:1e:b0:78:79:88:e0:b7:ca:01:97:c7:5c:e1:48:3c:30:
         8f:b8:d2:bc:6c:46:9e:aa:a7:fa:4c:c9:99:39:c2:ad:fa:55:
         c4:c3:6f:65:51:75:df:6f:5a:84:cf:33:96:1a:70:a9:89:01:
         37:fc:97:fb:a1:74:06:d9:19:c2:0b:99:b3:32:3f:76:f8:62:
         b2:29:62:6b:6a:85:6f:65:60:a3:e4:87:50:ee:1f:c4:c0:60:
         04:98:d6:e8:9c:a9:c8:83:7d:51:ee:99:ec:d5:0e:f8:f2:29:
         c3:52:fa:82:76:f3:5e:c7:66:91:f1:20:d3:2f:ea:19:97:0d:
         91:ee:7f:4f:69:bb:f1:1a:2b:4d:2e:b6:98:ff:24:02:3c:d2:
         4a:20:bb:6a:b4:5b:ab:77:25:17:10:8d:b3:5d:62:26:80:f0:
         88:d1:5d:ad:cc:43:f9:93:0e:23:b8:0f:38:19:d7:c0:77:10:
         b3:38:6b:fc:fb:29:fe:82:7e:0b:a2:f1:05:52:bf:c4:03:f3:
         d5:c4:45:18:ca:e7:87:64:13:b6:bd:6f:ea:64:9a:79:0f:4e:
         04:77:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:25:20 2025 by rpki-client