Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e874a72-a3e5-3cc1-8084-e0210e197f38.roa
File:                     4e874a72-a3e5-3cc1-8084-e0210e197f38.roa (raw, json)
Hash identifier:          jk9Wqx5JFSNt1b3dhkpvH2hVmxvSvCC0CHliLBD8DO8=
Subject key identifier:   0F:51:F1:45:08:9C:E2:FF:67:1A:62:2D:AD:BF:E2:C1:2B:97:A2:B3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBDA4AF87D8F307E9C5740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e874a72-a3e5-3cc1-8084-e0210e197f38.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        35.185.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:da:4a:f8:7d:8f:30:7e:9c:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=f7658b5a-fdad-41a0-ab74-52e0ebf42e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:3e:00:16:1d:67:1b:f4:30:2e:f7:3e:03:
                    c5:4c:6e:79:f4:cf:cc:1d:d3:05:c3:a7:d2:2d:4f:
                    ac:7d:eb:02:c7:97:83:bb:6f:c8:69:b0:c5:86:fa:
                    8d:cd:b5:4e:58:d3:c0:da:b8:da:9e:03:c4:f1:f1:
                    08:ff:39:ae:c8:46:ca:6c:ab:41:d3:96:ae:f7:d3:
                    76:0c:79:5e:ab:b0:55:86:36:dd:96:dd:4f:e2:62:
                    13:c5:18:88:91:c4:90:cf:b2:33:06:4f:b7:56:de:
                    85:bd:4c:14:75:eb:5d:1c:9f:ca:8c:e7:ed:de:8b:
                    ba:c7:48:fb:27:2c:89:16:3e:3f:7d:0e:ff:d7:13:
                    29:b8:b8:97:8d:cd:47:06:5c:8c:f4:a6:78:de:3d:
                    97:6d:19:2d:c6:77:75:ce:2f:2f:30:ea:39:f7:cd:
                    40:09:47:fc:7d:90:d6:ad:ce:ad:38:62:da:9b:ef:
                    00:29:55:9d:11:1d:31:ca:aa:35:dd:95:7d:54:eb:
                    94:bf:73:ed:22:2a:74:84:c1:47:f0:6c:3f:ab:34:
                    2f:47:01:b3:9e:a4:ce:b4:19:a6:05:35:44:0b:5c:
                    f9:29:e7:b4:65:82:5c:3b:df:72:90:c2:51:6a:dd:
                    9f:8d:fb:4f:9e:a7:75:97:2b:e9:8d:0f:6e:55:a0:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:51:F1:45:08:9C:E2:FF:67:1A:62:2D:AD:BF:E2:C1:2B:97:A2:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e874a72-a3e5-3cc1-8084-e0210e197f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2a:7e:67:a4:8d:49:b1:06:79:97:32:60:8a:f6:aa:fb:42:
         c8:0d:6f:50:cc:b4:41:7b:12:dc:60:b9:06:59:3a:82:de:e1:
         3c:3a:42:b2:89:de:26:10:df:1e:ff:22:91:5c:2b:6a:a2:62:
         ba:79:59:ab:7d:1a:8e:1f:11:72:70:ea:c2:b7:a8:90:7b:26:
         e5:70:85:3a:80:11:15:36:83:62:85:f1:39:24:ed:9a:30:8e:
         b1:a3:3a:5b:2a:8d:db:61:43:5b:1c:81:98:a3:7a:dc:ea:20:
         d8:e2:13:c4:76:0a:d8:5d:62:cf:d7:e4:dc:f6:58:c9:24:35:
         e6:49:0c:31:ff:d5:8d:07:82:ac:30:2a:f1:11:de:df:48:c9:
         8e:9a:6f:b1:bd:f0:88:7a:67:05:f7:96:13:ce:cf:34:62:26:
         4a:d7:e2:44:bc:b1:7d:20:73:a1:72:3b:29:5d:d8:87:14:47:
         b2:42:13:ea:6e:44:14:3a:e4:91:7f:01:e7:1e:49:ca:73:72:
         71:a5:a1:ff:61:1b:5f:01:f7:f9:3a:3d:4d:31:9c:b3:dd:7b:
         03:0a:75:1e:e2:59:37:ac:d6:62:63:ea:9a:8e:b5:df:f7:d0:
         c0:7b:3d:aa:c8:4e:bb:b6:a7:75:82:55:1b:ec:f5:f2:89:7f:
         77:c4:f4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:44 2025 by rpki-client