Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41a40669-90e0-3f53-8ff1-d8aba92118e4.roa
File:                     41a40669-90e0-3f53-8ff1-d8aba92118e4.roa (raw, json)
Hash identifier:          tF1HOvUJge/ynql0MtoFECu+xiIViPGApbJDAmaTQaM=
Subject key identifier:   BF:C8:06:42:BE:62:58:7E:1D:20:A6:29:F1:EC:4F:78:B8:ED:FC:A8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBF4CAD6F8E67BCE66D880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41a40669-90e0-3f53-8ff1-d8aba92118e4.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        35.217.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:f4:ca:d6:f8:e6:7b:ce:66:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=d5081d40-0926-4d73-9eb9-3d60b3dd0de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:75:08:09:13:cb:9d:ed:db:dd:a1:17:d0:
                    b2:a8:5e:4e:36:a3:71:3a:cb:69:3e:06:e6:c9:8e:
                    96:49:89:9c:86:72:8d:36:77:8a:0b:99:6c:e9:f5:
                    fc:34:0f:87:eb:4d:35:0c:35:f2:84:18:6e:5d:f7:
                    f6:31:3e:e1:00:d1:f1:08:43:37:fe:55:9e:56:f3:
                    73:6b:43:6e:01:84:34:47:9a:72:f8:c2:00:2a:c3:
                    23:d9:2a:fa:2f:f5:da:05:d4:cd:fc:4a:1b:04:b6:
                    03:7c:bb:cb:98:10:00:fa:7f:bd:7b:6a:a3:59:d2:
                    98:40:82:e5:33:ec:de:65:ee:08:df:11:bf:54:d4:
                    67:1d:77:f5:92:70:b0:8a:2a:b5:ce:b9:aa:da:22:
                    a7:67:c0:17:f8:e5:5f:a4:43:9b:00:97:73:1a:77:
                    72:02:b3:1a:ff:da:28:90:61:0f:18:5e:a4:92:2a:
                    f7:cb:a6:e0:a2:89:09:88:ee:fa:3c:49:f0:fb:41:
                    a2:88:a3:87:2c:93:5a:63:68:c3:b8:99:15:ae:4b:
                    34:1f:8f:db:92:3c:5e:3f:c9:b4:54:c5:64:9c:ca:
                    67:48:0d:8c:91:c9:10:89:c2:a6:5a:58:28:ad:f9:
                    66:ad:97:0c:b0:eb:47:3f:47:87:68:ff:5c:d3:64:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C8:06:42:BE:62:58:7E:1D:20:A6:29:F1:EC:4F:78:B8:ED:FC:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41a40669-90e0-3f53-8ff1-d8aba92118e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.217.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:2c:94:32:71:e5:60:e6:a3:0c:f8:b8:a0:87:80:a7:ed:
         0c:b9:7a:c0:50:3c:6d:a5:70:cd:23:cd:9b:37:bf:c5:69:8b:
         33:d7:50:7a:f0:24:04:a4:b4:78:c2:37:6c:fa:cd:1c:06:df:
         3a:6b:13:16:c7:16:cf:8e:6b:f0:9a:2f:e6:31:ea:85:61:38:
         4a:42:20:e5:53:5b:ed:ff:e8:63:ce:cd:ca:05:13:af:3d:99:
         b3:f7:13:b0:01:7d:35:8c:78:ae:80:81:c8:50:e7:8e:3d:f0:
         b1:31:2b:90:5d:2d:6b:4c:cf:71:ea:5d:0f:11:08:8c:dd:64:
         2e:18:f6:2d:4b:37:df:97:87:ba:07:e2:4e:83:dd:a3:3c:1f:
         db:11:84:5a:d0:70:97:87:71:4d:de:04:c8:e2:6e:5f:1a:21:
         23:ef:5a:ec:1e:45:81:41:8b:12:ff:f0:20:53:75:3c:81:ca:
         41:58:3f:04:d7:22:cc:93:03:43:e8:2c:f5:b7:45:9f:07:59:
         91:99:76:ff:a8:66:ad:8e:ce:73:46:b5:ce:27:62:03:62:13:
         31:fb:11:70:a8:fb:2d:75:18:dc:5b:66:a1:37:43:47:79:89:
         28:50:17:dc:34:29:0c:34:ff:83:99:05:57:ff:cf:33:c2:a6:
         ce:08:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:36:23 2025 by rpki-client