Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa
File:                     3f340104-27ea-3248-b605-b7052e970967.roa (raw, json)
Hash identifier:          MiQPhS+RBlLBi6ZF+NCGF9+U3mLG/cbFvUBHeWNf+hM=
Subject key identifier:   A8:68:29:99:4D:16:70:CB:69:74:20:99:4D:7F:6E:40:C5:F8:43:CE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB993C0832A9B9269D8E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        35.206.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:99:3c:08:32:a9:b9:26:9d:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=7b861a06-c209-4ee2-a22b-3bb93a72a03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:38:82:35:da:82:15:f8:1f:23:5e:a9:b9:ad:
                    9d:a3:e3:08:cf:2f:64:b4:e3:38:72:e4:e5:54:94:
                    a2:e6:51:a0:94:5b:24:19:39:4e:0c:7c:c6:f5:0b:
                    6a:59:e9:7f:e4:09:39:0e:2e:86:99:eb:d2:73:69:
                    77:12:5a:58:e2:d8:81:b9:ca:76:18:4b:25:3b:0f:
                    67:fb:b9:ea:d7:94:45:48:47:79:58:19:2d:f8:cb:
                    ee:5f:c7:e8:44:c8:54:c7:ea:60:8e:ac:31:cc:d6:
                    e8:47:30:13:8b:4a:8d:6f:77:a4:a6:46:91:83:ff:
                    85:56:4f:7d:2d:32:7e:84:8e:6b:cb:71:fe:47:26:
                    70:8d:93:30:55:c9:3b:db:0b:96:ce:63:44:9b:c8:
                    2b:bf:7b:e7:5d:2f:82:33:f7:d9:65:62:27:93:d1:
                    01:30:38:0f:89:0b:32:03:55:10:ff:10:8e:6b:81:
                    a6:2e:c1:4c:dc:64:81:75:99:3a:2a:6a:36:a2:b8:
                    24:d7:b3:34:a6:77:7b:d7:df:d9:97:a7:f9:e7:ec:
                    38:b3:4d:6d:c7:02:ca:cf:17:c5:6f:8b:e5:24:43:
                    ad:cb:e7:07:f6:c1:8f:b8:2e:2b:e3:33:c2:3c:5c:
                    a0:15:65:ad:6d:2d:3e:3e:a1:bc:f6:06:b5:36:30:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:68:29:99:4D:16:70:CB:69:74:20:99:4D:7F:6E:40:C5:F8:43:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:4a:f4:46:48:a4:dd:7c:33:44:55:2b:d3:31:40:aa:df:
         d2:14:7c:40:e2:88:a3:01:84:54:d9:bd:a3:40:6c:17:c0:b6:
         12:77:50:10:32:65:d7:8c:fc:c9:32:d3:0c:28:e0:66:57:4c:
         c6:39:4e:b8:92:d3:2b:a5:6b:53:ad:71:6d:23:2f:4b:81:56:
         6f:44:30:d6:16:a1:b9:fc:0a:72:d6:a7:77:5e:a2:3d:93:18:
         44:94:fa:1f:f9:cb:12:93:b5:a1:53:8a:81:8c:f3:e7:8d:df:
         7a:d6:b4:cf:ba:91:69:85:b9:95:f7:83:0d:33:73:25:a9:6e:
         2a:40:2d:73:64:86:e4:23:98:85:9b:36:85:31:d0:a8:6d:54:
         58:91:ca:d6:4d:9e:4f:d6:99:cc:3e:d1:0a:55:45:a9:04:02:
         06:6e:04:40:b1:d8:48:91:72:5b:04:9d:67:f6:53:23:ad:62:
         34:d4:f0:a0:fe:e8:33:c4:92:2a:82:98:e7:5e:71:2a:f6:8a:
         04:8d:2c:16:fc:b0:68:6b:a8:dd:ce:74:20:3a:a0:5b:7f:7d:
         e7:41:e7:db:51:2c:3a:ba:9b:03:bb:e7:db:ee:bd:26:5c:53:
         2b:6d:79:bf:ba:34:cc:ea:21:c5:46:48:e3:42:73:d7:22:98:
         60:7d:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:41:49 2025 by rpki-client