Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa
File:                     0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa (raw, json)
Hash identifier:          3lkoVOqJjQT9YszXVEDgcFklaLrIlcda28oZBgLblWA=
Subject key identifier:   4C:82:83:01:8A:4C:D7:97:9D:0C:F4:6A:AE:95:9E:57:30:BD:A9:AA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBD45F3CEA480E63C586CC
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.223.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:d4:5f:3c:ea:48:0e:63:c5:86:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=9d28de44-59f9-4b3e-80e4-ab924b9bff99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:32:c0:a0:85:f3:5d:04:e7:0e:51:41:76:
                    60:1e:04:26:42:ff:7c:57:09:11:41:7e:b8:5e:12:
                    4b:d8:16:f2:aa:cd:38:a4:ca:40:2b:2f:4f:3c:6e:
                    78:db:f3:3c:57:c6:2a:2b:37:2c:bf:dd:3d:cf:12:
                    6c:07:a9:72:ff:b3:dc:e0:09:c3:f8:38:d6:80:24:
                    e7:9f:59:f5:d0:eb:67:f2:c2:da:6f:b6:55:39:32:
                    9f:77:d5:7d:45:24:a4:e5:a2:41:b0:b6:86:94:68:
                    fb:cc:ea:77:2d:7c:54:a6:ae:68:b3:da:fe:d6:3c:
                    d4:70:85:55:24:a6:58:98:ae:bd:ed:11:b9:7c:4e:
                    83:24:9c:66:37:1f:5f:3d:03:64:0c:38:71:17:1a:
                    23:1f:1d:7d:c6:05:b1:bc:87:8f:d4:2c:80:a3:99:
                    1d:86:3f:a7:22:6d:81:7e:b2:19:35:ed:e5:e5:9e:
                    b3:d9:0b:9a:56:77:70:94:43:73:f4:23:8b:66:ea:
                    63:fb:fb:e0:09:18:63:49:2d:bb:76:85:30:47:0b:
                    ec:28:e8:dd:ea:24:5c:b8:8d:29:cb:75:ed:3a:85:
                    0d:4d:77:fd:9f:bf:31:a3:44:6a:8a:88:9c:67:48:
                    c9:df:aa:e8:4c:22:3d:12:3c:2e:20:e5:23:ac:82:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:82:83:01:8A:4C:D7:97:9D:0C:F4:6A:AE:95:9E:57:30:BD:A9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.223.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d3:b9:1c:45:e0:cd:e8:6b:05:ae:9d:8e:dc:ec:00:d4:d3:
         dd:bb:7e:03:bc:85:82:33:c0:57:1c:9b:0d:0e:1f:41:cd:6a:
         af:2c:2e:e2:d9:96:72:0b:08:ed:eb:f9:6f:18:8d:70:a5:2c:
         d8:92:c8:b8:61:c8:84:23:74:22:ad:a0:69:2b:fb:74:1c:ce:
         a7:b6:b2:76:ae:e4:cf:30:ba:77:f8:d8:b4:b4:29:fc:64:84:
         c2:e0:ad:cf:a6:4a:24:23:88:32:01:a9:a5:2c:31:bf:76:99:
         ec:2f:43:3e:80:b3:f2:78:bb:fc:b2:74:f6:fc:89:d1:2d:cd:
         91:a4:d3:a4:cb:f4:32:df:2d:35:d0:18:f7:23:59:01:8e:bf:
         97:86:eb:92:60:28:31:40:73:31:95:8b:30:77:3d:fb:6f:64:
         5b:eb:9c:1f:a2:77:3a:bd:43:ac:d2:aa:70:a5:ef:f3:68:23:
         49:01:84:f8:65:91:bf:9c:3d:6f:aa:e8:09:cb:d2:02:12:4c:
         10:c8:13:3d:a3:cc:94:7d:fe:f8:de:3a:b2:6f:e8:5e:45:32:
         a3:64:45:68:ba:bb:89:42:4b:e7:b6:29:b9:e0:01:7b:04:7c:
         07:cf:0a:03:d9:99:57:be:17:9d:18:42:ab:41:07:3c:29:11:
         96:f1:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:38:02 2025 by rpki-client