Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa
File:                     f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa (raw, json)
Hash identifier:          gt4KeXgrMy/+ukn+h+WPPXMN7UJpevRk0C6Svj5c8fI=
Subject key identifier:   E1:9B:0B:2C:A2:12:85:A3:49:8D:3C:11:30:68:8E:A7:C7:CC:F3:D4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7854031C40FA94645A6EB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.203.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:40:31:c4:0f:a9:46:45:a6:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=5616cd9e-791d-499a-bde2-47262842c87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:c7:8f:06:9b:77:7d:f1:bd:0d:09:70:ab:
                    4c:e1:b8:6f:1b:e6:a2:92:e6:16:02:01:05:16:86:
                    61:a2:05:f0:d1:3f:c2:f3:6e:c7:55:e5:56:3b:e1:
                    7c:19:f8:ae:79:dc:06:8e:e5:42:b0:70:06:06:e6:
                    b9:b8:41:26:e8:78:5a:0b:78:ed:73:a2:94:a6:c4:
                    03:bf:4f:01:44:f9:99:15:bb:ee:46:ba:98:46:7c:
                    6e:9a:be:7e:02:4c:60:28:7e:c8:a8:7e:2c:9e:1d:
                    f0:85:cd:bd:3e:61:9b:03:d0:78:6d:2b:28:ad:2e:
                    ae:39:9b:e1:06:0d:0d:93:83:ac:b8:d9:cf:1b:5a:
                    ab:7f:63:84:52:4a:4c:ab:95:2e:75:35:08:87:cc:
                    18:ea:66:95:21:f5:50:9f:03:e3:be:56:9b:20:ed:
                    90:99:25:c5:91:d0:b8:c7:06:d2:94:9a:49:12:cf:
                    35:54:3e:6e:c1:0d:e6:17:0d:48:57:d7:14:6d:a8:
                    78:45:70:aa:83:d9:64:b7:7d:93:98:86:4c:e9:cb:
                    c4:2e:d5:a3:f0:ff:65:29:3d:95:77:e9:d3:2c:4a:
                    bb:d7:99:e7:e8:8a:dc:0c:fe:91:a5:0a:27:fc:bc:
                    62:58:19:e2:15:d1:8c:5d:d9:a8:f5:47:96:74:25:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9B:0B:2C:A2:12:85:A3:49:8D:3C:11:30:68:8E:A7:C7:CC:F3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ae:ec:d1:2a:30:4f:27:b7:c8:69:ed:c3:57:ea:05:fa:4d:
         74:56:c1:bb:67:e2:22:40:a5:e2:31:ba:e7:04:ed:49:70:ce:
         bc:10:be:60:f7:72:2d:60:5d:03:e2:b4:d2:6f:45:c6:e4:93:
         f8:86:67:df:1a:3a:1d:9f:9b:3a:56:0f:2a:1b:fe:32:98:8d:
         67:19:22:cf:1a:5f:66:5c:03:b6:79:87:2b:2e:62:7c:65:07:
         43:9d:f0:35:72:4d:7e:d6:3f:5e:aa:89:b5:ca:0d:c0:16:51:
         9d:1f:9c:18:57:22:32:94:53:69:b8:24:a9:66:16:87:b3:e8:
         d1:39:d7:1b:0b:d6:c2:da:1b:12:c9:ab:9d:97:f9:ae:f1:97:
         62:3b:fa:83:12:db:ab:7d:71:63:8c:10:ea:19:a3:68:8b:9b:
         59:a5:4a:d8:d4:1c:e3:db:50:cd:35:90:67:c6:12:87:29:b5:
         5f:73:8e:02:a3:a1:75:28:ac:8b:54:93:77:82:b2:fa:9a:25:
         25:28:f4:57:71:cc:29:c0:38:60:0d:92:99:7a:02:53:10:b6:
         a0:d3:39:3e:b9:83:d1:dc:e3:92:b2:5a:b9:22:8d:82:1a:9b:
         e3:8c:12:6d:61:a6:d0:0e:fa:23:26:7a:7a:b0:7b:e5:83:af:
         27:56:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:09:37 2025 by rpki-client