Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/150b2157-e386-3b67-8d98-34dc76e72d83.roa
File:                     150b2157-e386-3b67-8d98-34dc76e72d83.roa (raw, json)
Hash identifier:          747MAov8jwIMsUHb4RBNz/t32P4qfUNgT0KZG/CTMkQ=
Subject key identifier:   BF:9A:AA:E4:AC:BF:10:B1:5F:CB:16:EE:F6:9F:C9:55:C2:6D:21:5D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB99DE9DDE8C2CFE811FF0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/150b2157-e386-3b67-8d98-34dc76e72d83.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.221.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:99:de:9d:de:8c:2c:fe:81:1f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=836d2860-234a-4f6c-aa99-175f75e5fddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:50:5b:0c:76:17:d7:3b:c8:bc:5c:8d:fd:
                    0b:f4:43:e1:d1:fa:0a:4d:ba:1e:a9:ba:20:b6:80:
                    5c:7d:ef:d1:fc:59:98:19:cb:f6:9f:46:39:bb:a4:
                    0c:e9:04:b4:5c:00:8f:ea:7e:53:58:cf:4d:95:79:
                    fa:c7:9e:10:fc:1d:5b:08:50:6a:d4:56:51:b4:dd:
                    f2:50:e7:1c:14:5b:9c:c2:7c:fa:68:33:f0:e5:97:
                    87:fc:3a:0d:39:aa:f1:46:61:15:5f:40:7d:fa:f7:
                    e9:14:e5:67:85:57:9e:d6:4e:f6:7f:43:1c:f4:c9:
                    99:3d:d9:da:c0:38:51:49:cc:70:b4:2d:5c:50:ee:
                    ce:24:bc:cb:25:8c:41:b4:a9:dc:63:26:a0:44:72:
                    59:0a:51:f5:e3:39:21:8e:cf:24:d0:00:9a:04:58:
                    81:28:92:9e:30:89:16:35:48:42:2e:59:fa:4e:6f:
                    81:bf:05:67:b7:4e:4a:be:10:bb:0e:c9:ac:25:1d:
                    1e:d3:f0:fe:b5:9c:e2:da:ac:f1:77:71:c7:72:4a:
                    a1:7c:23:aa:17:63:de:14:f3:0e:9a:47:73:fc:93:
                    b8:69:21:f5:b4:c2:a4:7d:f7:ae:e8:56:28:3f:8f:
                    16:6f:f8:f8:56:47:3f:f0:74:9c:e0:87:f9:3a:32:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9A:AA:E4:AC:BF:10:B1:5F:CB:16:EE:F6:9F:C9:55:C2:6D:21:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/150b2157-e386-3b67-8d98-34dc76e72d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.221.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:aa:a3:52:a9:34:e4:a1:32:4e:ce:64:3e:6a:2c:3d:72:83:
         38:2d:b7:a1:ad:56:4e:65:0b:35:b5:af:52:f4:11:2c:a9:fb:
         12:0c:10:3a:1a:fd:b8:2f:23:a1:5f:7b:86:4f:6e:c0:f5:0d:
         96:6c:27:9d:b1:7f:b1:84:98:79:28:38:c0:92:cc:b6:f8:94:
         71:0f:e8:90:43:34:92:8b:e6:28:cf:c4:4e:25:bc:6c:14:3f:
         c2:a0:f5:46:15:17:f1:cc:27:8b:8b:ea:00:b8:bf:ba:89:05:
         c2:9c:03:b3:08:3c:9a:1b:da:de:ed:f4:9d:76:01:7e:61:d4:
         08:e1:14:75:b5:0c:32:2f:6b:d3:c8:d9:cf:e7:60:cf:56:66:
         68:9a:fa:d7:fc:eb:cf:f4:a7:ad:f0:91:a2:8b:c5:ac:a3:c6:
         b4:93:88:d7:84:21:59:9d:f6:4a:e7:1d:10:a9:b9:a0:bc:53:
         d5:21:79:b8:36:09:d1:14:bc:c3:e4:3b:a6:9d:84:76:03:82:
         91:42:0d:cb:af:24:29:2b:be:be:9f:53:31:08:4a:3a:c0:05:
         02:a8:35:32:b3:f7:32:82:ad:ee:14:71:1b:fd:32:1e:2b:9e:
         e3:6f:7a:9d:b6:5e:c4:c9:c1:e3:a3:54:d0:14:ef:1e:7b:52:
         22:d6:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:17 2025 by rpki-client