Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa
File:                     33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa (raw, json)
Hash identifier:          OTrwrWxwGRTLzSSDCSl7nYgrjGnNsgLe3TKz9szu4fo=
Subject key identifier:   1B:6B:7A:6D:E3:1A:24:64:EB:C7:CE:34:3A:D8:74:A6:FF:DA:97:67
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBD65BBFF1A57CE5269040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.245.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:d6:5b:bf:f1:a5:7c:e5:26:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=e7b11381-d4f5-4918-9946-a9c29f73461f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:29:c9:5e:69:8f:e1:71:86:2d:62:cf:a0:
                    7e:a3:fa:90:9e:07:67:08:b3:7b:90:92:06:f2:e6:
                    c5:a4:2b:23:e3:f1:e7:1c:2c:07:c1:5c:a3:00:b1:
                    75:67:b7:45:48:f5:f0:77:d8:52:52:9b:65:f2:82:
                    be:9a:53:8c:56:57:8d:3a:9f:1c:c1:84:07:74:d0:
                    0f:59:50:b1:84:62:a4:3e:a9:56:40:fd:9e:bb:f5:
                    d5:80:db:0c:87:3f:43:e7:bf:dd:76:89:9d:4f:6b:
                    9d:a4:69:65:5c:e4:4b:cc:d3:b1:74:3c:f9:85:62:
                    a9:4b:70:21:95:5b:b2:70:0e:65:8f:ef:45:2e:29:
                    d9:66:c9:6c:74:d6:a6:00:66:16:01:f2:e3:de:d9:
                    95:11:63:7e:81:81:cb:84:e2:ed:69:f3:06:a6:4c:
                    9b:01:df:2a:44:4a:c0:df:6f:e5:dd:ac:e1:e9:a0:
                    00:43:c8:52:9c:2a:a3:9e:68:7e:da:3e:81:54:50:
                    d8:7a:c2:02:d4:be:32:01:fe:fe:88:c0:57:dd:cd:
                    38:04:ec:3c:45:05:e0:ea:1f:ca:33:97:8d:f9:2e:
                    bd:d5:01:c6:37:55:ea:42:d7:94:f3:9c:97:d6:91:
                    76:de:05:1b:a4:35:a5:5a:45:f8:71:79:f1:cf:79:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:7A:6D:E3:1A:24:64:EB:C7:CE:34:3A:D8:74:A6:FF:DA:97:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33317f26-7a4e-3fb7-8e4c-a6ad57fe7d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.245.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:55:18:e7:60:8f:b2:f6:36:12:a8:25:21:27:a2:5b:76:
         28:83:58:cc:7d:b2:5b:d2:55:cd:46:cb:de:47:df:75:ed:e3:
         9e:db:38:2d:ea:57:6a:5d:9b:cd:c9:da:7e:40:b5:93:66:6c:
         05:0d:6c:f9:67:b4:f6:6a:c0:8b:be:29:4e:82:44:36:53:0d:
         5f:41:02:ea:5e:0e:96:d8:40:06:4e:86:b0:4a:ae:ef:da:0a:
         f0:c1:49:0c:1d:fd:bb:46:4e:14:05:e3:74:f4:62:43:93:87:
         2a:88:0f:c7:90:66:4f:b6:a5:67:44:13:52:67:0d:09:a5:99:
         d6:d4:2b:2c:c8:2f:0c:56:2c:e7:77:31:05:be:b9:d7:60:79:
         d4:3e:db:0b:b7:cb:3b:55:3b:b8:96:19:a8:95:45:31:48:0d:
         e0:c0:71:18:e3:2a:12:d5:e0:0f:fc:11:4c:39:84:95:b9:b9:
         9d:d5:27:d4:ec:01:29:18:4f:46:e8:3e:f3:8f:6a:88:aa:cb:
         f6:11:c9:79:bb:54:b2:25:a3:8a:91:1b:49:d7:f8:04:f5:53:
         0d:ed:fe:95:1f:bc:41:76:52:b4:6f:b4:1f:92:e8:71:e0:35:
         b5:d7:c7:1e:3b:a4:3c:40:7f:e5:27:b1:9e:cf:47:8a:f1:84:
         f0:0d:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:52 2025 by rpki-client