Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/191b7b72-2bfb-3e14-b791-a5489d912c8a.roa
File:                     191b7b72-2bfb-3e14-b791-a5489d912c8a.roa (raw, json)
Hash identifier:          HG1PWjZQzUNTEQ8QNxyRiMKZcedq/BGqX23n91MteQQ=
Subject key identifier:   5C:06:5C:1D:95:B5:21:01:A7:03:4B:9E:05:2A:5D:5F:1D:B4:2B:3D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBDBFED71658BDFFEDAD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/191b7b72-2bfb-3e14-b791-a5489d912c8a.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.194.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:db:fe:d7:16:58:bd:ff:ed:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=205327f9-559e-4039-bd92-a4a1e0f34305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:8f:2c:00:6f:55:95:d9:9e:40:89:5c:97:
                    cf:f0:f7:95:9b:5b:1b:7b:fd:c6:69:f2:67:5c:7d:
                    f8:f8:83:64:fd:00:b5:e5:e9:37:ad:7e:1b:9b:56:
                    7f:6d:fb:d5:29:11:4b:ef:87:1f:8b:a7:1d:61:b6:
                    26:26:be:67:14:c5:60:85:8f:32:c0:29:37:07:b1:
                    5f:e2:5b:d2:df:de:94:33:bb:0c:40:07:fc:bc:d8:
                    3f:00:7a:0f:5c:60:8d:35:32:27:f8:b3:c3:f9:ce:
                    38:43:b2:0a:4d:6c:ea:a8:5e:d2:00:84:71:ba:b3:
                    c6:95:92:1d:8f:0c:45:92:64:14:ae:dc:69:44:f9:
                    c5:6d:85:e8:4b:9c:a0:93:5a:54:79:b0:54:1d:2c:
                    5a:0d:f2:3b:39:1d:69:51:89:4e:c0:8d:59:16:9a:
                    e2:d7:6a:f4:ee:da:12:8e:92:f3:bd:56:39:55:95:
                    0d:c3:e2:e1:8c:78:61:3f:09:e7:20:15:d4:54:2b:
                    64:db:f8:07:2e:91:6c:61:2c:d4:e2:d3:ce:73:d3:
                    15:e3:46:44:68:5c:33:b9:59:c3:d6:8a:01:15:4e:
                    04:24:22:3a:8a:d0:cf:d0:93:2b:85:e7:f6:cd:87:
                    7c:4e:c6:fd:42:c1:ee:cc:17:49:e4:f1:c6:2b:a0:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:5C:1D:95:B5:21:01:A7:03:4B:9E:05:2A:5D:5F:1D:B4:2B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/191b7b72-2bfb-3e14-b791-a5489d912c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:2f:64:da:b6:21:4d:08:1c:bc:9b:2c:8e:de:66:93:3b:
         9e:be:30:5d:ef:a6:3b:92:11:e0:94:23:7e:6b:2c:e0:76:19:
         51:95:0b:e2:bd:12:85:ef:90:0d:90:84:2b:81:ed:56:cf:35:
         92:e7:0d:e1:8a:cd:b7:f9:83:7f:49:ea:8f:b4:90:23:01:5a:
         bf:5a:fa:7a:2a:40:27:8a:37:cf:37:95:8d:34:30:1e:bc:2e:
         12:6c:7b:81:9f:5d:26:4d:fc:03:fa:66:3d:6f:97:51:1c:4c:
         64:65:16:e5:2b:1d:bf:40:84:df:97:d7:05:e3:9e:53:f6:99:
         2f:d1:10:43:b2:a5:6b:25:51:c0:21:36:4e:6a:5f:87:b8:4f:
         d1:79:ce:bb:33:ee:7b:25:e8:f5:f9:b5:86:5b:49:b5:fb:41:
         d2:40:8d:47:5a:cf:01:ea:67:d5:f6:ea:21:1a:7a:51:ca:ea:
         e6:b8:5e:a6:43:14:ff:5d:30:d5:ef:9d:de:f2:8f:f2:0f:53:
         96:b3:6c:9b:f8:44:22:41:1a:6e:ad:36:f0:48:96:a1:c3:9c:
         03:78:92:15:8a:6b:41:b4:16:60:6c:14:84:69:e3:12:ea:ae:
         71:35:35:0f:2e:f8:b1:52:13:b8:b5:8d:ea:5e:ab:4d:a4:be:
         e5:24:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:17:09 2025 by rpki-client