Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/144301ce-321f-35ad-8b91-4ca30859736c.roa
File:                     144301ce-321f-35ad-8b91-4ca30859736c.roa (raw, json)
Hash identifier:          Jx+pWwkfln2tG4NXyb/ARtQQouvT48pkNcWecwWPI8o=
Subject key identifier:   13:AC:C4:6A:7E:FB:C5:D4:F6:59:21:FA:2A:22:21:65:6D:2A:B6:41
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBDC8DF43CC80ADE0E9E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/144301ce-321f-35ad-8b91-4ca30859736c.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.196.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:dc:8d:f4:3c:c8:0a:de:0e:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=84c92bc7-e3f8-4aaf-bbe5-4c4b2815f641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:c2:5a:66:78:cd:32:d5:e2:28:3e:54:fc:
                    e1:b9:56:77:7f:f1:15:4d:b7:07:45:09:b0:8e:34:
                    85:d9:f5:4f:cf:e2:35:b7:b2:57:fa:35:34:3a:15:
                    46:4a:cb:ad:e0:88:c7:67:22:b6:da:18:43:d1:ea:
                    a9:66:69:55:6d:80:d5:65:4c:8d:20:c4:c4:ae:67:
                    b4:40:bc:44:5b:04:07:58:3b:7b:73:f6:72:23:60:
                    75:88:f6:7c:91:d4:f2:6a:fe:50:07:7f:34:15:9d:
                    38:36:40:c5:7f:28:b2:6b:8b:fa:fa:03:e4:b1:f8:
                    7a:3a:2a:f0:a4:5e:af:52:94:24:8c:22:4c:a4:f1:
                    a4:13:a7:c1:1f:ef:93:e6:f2:83:8f:4c:c5:c2:eb:
                    ac:b6:2d:8c:83:de:2c:07:ea:a2:3a:d9:9e:0d:73:
                    e8:38:5c:fe:bd:8c:a3:93:ec:dd:82:4b:7d:ec:af:
                    3a:98:82:08:4e:b2:2b:23:5b:6f:7a:9e:1c:69:0f:
                    db:5b:71:3f:63:f4:ba:9f:39:4a:8f:40:64:15:3b:
                    48:a6:3d:de:82:af:7f:c6:6d:31:16:63:e6:f7:4b:
                    4a:4e:c3:96:c1:ca:27:f9:6a:ea:0f:8a:12:97:fe:
                    89:ff:54:7a:a6:cf:cc:3d:3c:48:09:1f:5c:7e:05:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:C4:6A:7E:FB:C5:D4:F6:59:21:FA:2A:22:21:65:6D:2A:B6:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/144301ce-321f-35ad-8b91-4ca30859736c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.196.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:48:dc:f3:30:65:90:e1:e6:b8:76:9a:94:14:fd:cf:36:55:
         7a:b1:13:6e:f0:f5:ac:d8:5e:ce:71:f6:39:87:61:75:f9:dc:
         8a:48:05:32:34:d0:9f:6d:cd:87:98:67:3b:b7:68:c3:0e:e4:
         3b:53:a4:7a:85:34:0f:00:1f:21:3f:82:45:74:1a:61:5e:a8:
         43:25:33:6c:eb:6c:91:79:11:5d:0a:2f:44:df:9a:61:87:d8:
         fb:31:f6:0f:c8:47:41:81:62:df:e3:ca:9e:3f:72:88:52:b9:
         37:1d:54:b4:be:3d:af:85:91:6a:60:21:55:14:cd:0e:cd:14:
         21:40:44:65:32:f3:64:45:7c:01:e7:40:a8:8a:af:9f:e0:f4:
         27:63:5a:62:68:86:49:ef:97:3f:75:3d:17:79:7e:85:90:78:
         ae:a2:87:22:0a:25:86:ac:36:2c:7b:e6:cf:c1:93:71:62:e0:
         e7:4c:19:ed:e1:e2:59:86:f9:11:e3:69:f4:78:72:a2:fe:03:
         10:9a:c9:4c:2d:5c:7c:06:39:d3:6d:8d:c0:b1:f6:64:40:9a:
         8f:bd:c0:46:ee:ec:4a:5b:f8:8e:93:6f:04:fb:10:ae:1b:3e:
         2b:8d:dc:09:c8:33:3a:50:14:49:ae:e5:6e:e4:00:8f:5c:ea:
         07:fb:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:11:22 2025 by rpki-client