Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa
File:                     2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa (raw, json)
Hash identifier:          DyXHU75RFn4lgqMVlBkLav7ex+JzEEN/OoKsMBMeDtc=
Subject key identifier:   D6:AB:D3:8C:48:FD:AF:6E:19:EB:DF:E5:62:63:46:E8:9C:FF:87:3B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBDED423B502BA78672480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.245.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:de:d4:23:b5:02:ba:78:67:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=5498f179-e882-4bfd-bc0f-1bb724314c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:07:07:e9:1c:ff:fd:8d:79:97:e8:13:48:
                    91:13:28:26:d4:a5:a2:ba:86:43:ba:9b:86:96:be:
                    9a:ac:28:d9:11:f0:a6:30:c0:8a:fc:b8:b4:f2:2f:
                    81:5e:64:c5:35:0e:24:c5:3e:1c:1f:d8:82:0a:80:
                    f4:fd:e3:f5:18:9c:2c:c6:91:4e:1f:3b:90:39:a2:
                    ea:ab:d7:bc:9a:81:c8:94:3a:c3:1e:30:e9:42:cf:
                    04:d9:b0:ab:ee:5d:0e:7b:68:40:92:a8:f4:87:ab:
                    ab:3b:97:fb:b0:df:1a:e1:bc:75:8a:f1:94:04:ca:
                    8c:f7:d2:ac:c6:72:8f:24:7d:fb:61:18:7f:01:4a:
                    03:b2:68:3f:20:1a:bd:d0:18:9f:e2:d7:04:83:a7:
                    22:f5:2f:ac:3a:64:46:30:70:56:36:23:10:2a:e9:
                    da:7b:5b:4e:d5:71:86:d8:72:e6:c3:a4:79:3c:d8:
                    9b:ac:6b:e5:53:06:be:f4:69:64:e5:d1:75:e5:77:
                    8b:c6:8a:7f:96:de:85:8a:99:9e:18:0e:b9:ec:13:
                    f0:dc:5e:e3:f2:29:8f:fe:02:08:c7:c2:d5:fc:a8:
                    dc:02:28:0f:ad:f9:2d:74:0b:a2:23:79:b3:1a:7b:
                    5c:1a:90:6a:85:f8:5b:99:8c:09:25:3b:06:80:53:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AB:D3:8C:48:FD:AF:6E:19:EB:DF:E5:62:63:46:E8:9C:FF:87:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.245.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:01:ee:d3:77:40:69:27:be:44:e4:e9:0c:92:d7:59:fb:31:
         82:e5:d0:29:28:25:cd:da:2b:26:58:1d:7a:57:b6:20:5e:76:
         52:ba:44:df:c2:3c:13:60:a1:9a:27:75:90:12:1e:bc:ff:53:
         7b:de:17:1c:d9:0d:4b:46:6c:59:99:ab:ac:8e:75:27:bc:a3:
         7e:8c:c9:7e:3a:c2:2d:73:be:b0:c0:c2:2b:3c:5f:f9:fd:ec:
         99:a3:cd:80:f4:a6:4e:8e:90:8c:ad:3a:29:78:65:4c:72:6c:
         cc:57:bc:f6:0c:f9:bf:9b:45:5d:ef:9f:4e:56:84:fc:b7:37:
         9f:ec:e1:57:29:13:f0:3b:a9:ca:c4:43:da:ef:d7:62:65:08:
         70:aa:8b:7b:68:93:d7:d6:f9:dd:e9:86:2a:38:ea:fc:28:51:
         25:ef:21:90:bf:5c:fe:14:83:21:03:93:c1:3c:68:c7:16:11:
         92:a0:b4:6a:e7:83:d2:06:cf:55:a9:67:a7:85:66:0b:8e:68:
         45:36:ad:1b:70:4e:84:a9:6f:03:99:8e:e5:22:ea:e5:cd:59:
         1f:79:c6:ee:27:b4:bd:05:08:b1:e6:fd:ea:23:42:a0:bf:b4:
         9a:bb:10:1b:80:09:a6:ee:a2:f0:40:75:fb:d4:38:61:1e:23:
         5e:fc:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:44 2025 by rpki-client