Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa
File:                     3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa (raw, json)
Hash identifier:          tzDkp47RNZIVku5vgI8rU1bvGJgZBDIUheUOAZAlnuw=
Subject key identifier:   65:99:7C:25:F8:7C:C8:E5:89:4D:E5:76:4E:37:F1:B3:AA:6A:BD:7E
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B1AD175B006F591C70BE4CB00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     62676
IP address blocks:        35.7.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:75:b0:06:f5:91:c7:0b:e4:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=02c3edd8-e460-4d5c-88a1-709bfe109dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:bd:b7:35:1d:47:13:04:4d:a5:0e:f8:43:
                    0b:7d:0f:aa:c2:56:69:e1:62:00:da:af:21:07:1d:
                    0c:d5:37:6c:97:c5:57:73:a3:c6:b0:1c:56:ca:8a:
                    f7:24:3b:21:f8:c0:d6:35:56:74:34:c9:c2:9d:5f:
                    78:b1:0c:f1:0d:81:72:bd:2a:1c:94:2a:1d:4f:21:
                    cf:4e:6c:96:3f:a8:4a:7a:22:d4:12:e5:eb:3d:3f:
                    0c:98:47:dd:99:a5:a8:fe:09:54:4e:b5:62:3f:b6:
                    16:3c:b0:f1:74:1a:e8:4a:7f:e3:c0:63:19:a2:3c:
                    c3:2b:b1:d3:e7:71:d3:6d:c5:e2:09:16:a4:87:2a:
                    83:5b:eb:1e:31:4c:5c:cc:78:95:50:34:19:09:33:
                    dd:29:f6:32:a7:63:40:43:2d:92:1f:79:9f:57:96:
                    d8:76:bf:75:2c:6e:2f:fa:14:38:a6:89:0c:22:fa:
                    af:6f:54:68:82:6d:3e:c8:67:22:77:0c:0a:45:e6:
                    29:2d:d1:0e:b2:53:5f:52:3d:f2:24:40:7f:97:53:
                    44:0e:5f:0c:cd:09:a0:c3:f0:4f:cb:c5:ae:c1:45:
                    74:8d:aa:ea:db:01:be:01:1d:c8:07:94:93:f5:75:
                    14:e0:d7:a0:7b:41:ed:dd:91:6f:10:23:34:52:dd:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:99:7C:25:F8:7C:C8:E5:89:4D:E5:76:4E:37:F1:B3:AA:6A:BD:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:66:0f:78:b0:12:86:05:4f:2e:4c:5a:65:dc:10:4c:01:be:
         77:98:76:09:87:52:b4:0c:f3:c9:7f:da:0c:fd:e5:8a:d6:8e:
         52:f4:7e:4f:32:24:1a:88:f0:8b:8d:3a:0c:b9:17:b7:8d:26:
         5d:18:21:90:9b:87:27:4e:3b:e6:02:fd:ba:9d:b6:71:79:88:
         a4:30:db:b8:d0:e3:d2:61:8b:08:e9:5b:0b:1e:45:72:dc:72:
         ea:c6:f0:cd:b0:1b:85:6f:1d:c5:d5:68:86:f6:68:dc:77:60:
         f4:ea:cc:8c:2c:99:aa:ca:56:bc:04:4f:54:82:b6:57:17:31:
         e6:94:95:37:e9:66:2e:b4:a0:26:65:2b:17:4e:88:05:1f:dd:
         41:34:17:73:39:e4:e2:7b:19:73:04:39:62:03:b4:16:9b:e8:
         a3:22:f8:64:64:d0:8d:32:55:d0:98:70:8a:1d:89:53:6e:cc:
         96:c8:ec:8c:3f:83:ad:fe:0c:f5:c6:0f:1f:cc:db:02:c4:9e:
         dd:d0:71:c6:22:b2:e4:d3:ed:df:4c:90:cc:b4:eb:a4:58:db:
         62:8c:80:ec:da:b1:6f:01:8f:a7:1d:09:26:59:03:d2:f9:28:
         14:7e:d6:f3:8b:d5:fb:71:ac:e9:6c:61:46:f1:53:4a:a5:73:
         b6:9a:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:14:34 2025 by rpki-client