Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa
File:                     f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa (raw, json)
Hash identifier:          EQIDiCxNtMKXlXs+5PfS74+yONMOm1g+qjhaBG8UNF4=
Subject key identifier:   5C:CC:85:82:75:7F:7A:8E:BC:76:CC:27:59:85:08:E4:4E:06:8B:68
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B33F1A589C0F664FC06E87040
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     237
IP address blocks:        35.46.0.0/18 maxlen: 18
                          35.46.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a5:89:c0:f6:64:fc:06:e8:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=abc06a76-19d6-485a-a390-2941c56c8739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:66:19:12:fd:c4:bf:be:af:43:13:b3:de:
                    bd:2f:15:a7:d3:11:b6:3f:6e:36:7f:91:8c:9a:8d:
                    e1:3d:85:e6:b7:b4:e1:db:e6:5e:1d:5e:74:bb:95:
                    55:19:84:04:9e:51:be:69:f4:a1:be:b5:da:79:40:
                    29:dd:78:7b:4c:34:02:00:07:b9:76:ff:28:65:20:
                    39:79:a6:73:a1:73:ea:10:73:5e:1a:2f:a1:21:5d:
                    10:02:78:ac:58:d0:78:17:72:a8:1b:d7:8c:c1:37:
                    6e:15:71:ba:15:41:ca:b6:79:0c:82:83:7f:8c:6f:
                    7d:98:51:86:72:77:b5:77:27:d7:fe:91:10:1f:06:
                    92:e5:af:34:a4:b7:6b:82:3b:60:ef:1a:99:1b:f9:
                    f1:66:62:60:8b:8e:17:70:86:92:ab:d8:3b:77:03:
                    39:55:b3:42:12:75:ad:99:48:16:68:02:5f:9c:29:
                    e3:b0:5c:01:a0:fd:8c:bd:44:40:87:d4:aa:72:7f:
                    56:a1:da:98:d6:46:ae:17:0c:5f:3c:d8:71:34:14:
                    cd:cd:49:0e:5d:84:09:66:a3:d5:d5:17:6d:1e:8d:
                    68:48:ea:0a:94:c5:53:16:41:5a:e0:5e:83:d2:95:
                    e8:6b:14:8e:50:4f:57:fc:55:c4:40:5f:a5:33:cc:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CC:85:82:75:7F:7A:8E:BC:76:CC:27:59:85:08:E4:4E:06:8B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.46.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:92:5f:1f:73:8d:8b:30:43:82:11:8e:df:56:4a:72:9c:73:
         8e:c8:62:a5:89:d9:33:9f:fc:66:62:43:00:23:46:09:5a:8a:
         dd:23:20:c7:96:c8:49:17:37:4f:c8:3b:65:2d:03:40:18:fa:
         86:31:dc:91:8d:34:dc:24:4c:b3:33:db:39:01:24:20:18:0b:
         0e:04:9d:8e:b3:90:21:ca:45:b4:dc:97:f1:20:2a:f5:ce:9d:
         35:ca:8a:06:e2:e3:dc:32:e4:5f:81:ed:6f:05:6b:77:34:4f:
         4f:eb:de:65:25:8d:e8:2d:6c:e7:6e:9d:5b:48:e9:56:ce:4f:
         e3:12:df:86:8d:6b:bb:38:11:93:ae:66:3a:41:da:c7:6b:a0:
         76:0d:36:7d:21:24:cf:ce:ad:32:e3:86:d5:89:da:83:c3:17:
         a3:3f:12:5c:62:4d:be:a4:94:28:da:8b:57:71:36:91:18:e4:
         31:5b:f4:6d:5f:08:f7:85:ce:52:f2:ed:13:15:b4:d6:96:0b:
         74:e5:47:33:5f:48:ab:de:ed:57:a6:94:1b:f4:85:ea:57:c4:
         2b:c7:98:fc:60:7e:93:cc:a0:25:92:03:ae:bd:8f:0c:66:a1:
         20:58:8f:c4:d6:8f:e9:62:7d:9e:e7:33:74:ac:e4:49:83:a8:
         36:1a:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:14:34 2025 by rpki-client