Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56ae11fe-204c-3119-84b3-b39f3b2c0c5c.roa
File:                     56ae11fe-204c-3119-84b3-b39f3b2c0c5c.roa (raw, json)
Hash identifier:          0o54yZsg7CoMINk0Dyq8Zyi8n3nJSQ5rSbmyfHsWiD8=
Subject key identifier:   D2:2A:B3:29:A5:2C:D3:01:98:2A:B9:7D:F8:D3:43:F3:F5:B2:A9:30
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBF56897FEDC0E9D2A8B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56ae11fe-204c-3119-84b3-b39f3b2c0c5c.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        35.208.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:f5:68:97:fe:dc:0e:9d:2a:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=3d4cf848-aced-4f7d-bfda-0fb344de2d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:73:37:d0:4c:3b:d0:6e:a9:10:54:79:d6:
                    ea:cc:84:3f:87:28:bd:bf:7d:db:86:0e:9f:78:4a:
                    d2:51:c5:48:c2:51:51:90:39:77:13:a1:46:dd:60:
                    0d:bd:b3:14:11:a6:ae:44:98:12:d7:06:82:cc:5c:
                    1a:15:d7:2c:ca:7b:83:a8:08:5b:a7:a1:80:31:0b:
                    70:33:a8:de:45:82:99:94:3a:c8:43:47:5c:78:ab:
                    d8:56:01:1a:a4:16:e9:1c:39:45:9b:b4:52:cd:fb:
                    4c:82:e2:c7:6b:67:5d:00:2b:42:f7:44:de:23:94:
                    b5:f5:5f:a4:25:75:89:01:c0:73:c0:da:b8:3f:c6:
                    29:bc:65:7f:b5:34:8b:35:a6:1a:7e:e3:5a:d3:9c:
                    b4:53:41:aa:df:6e:0e:19:ab:86:7a:08:f2:1f:80:
                    2b:07:53:1a:e7:9f:9c:f5:54:70:e1:cb:11:17:2c:
                    87:87:ba:d2:72:46:37:9e:15:35:06:99:7f:d0:8a:
                    80:d9:f5:14:42:f1:8c:45:1f:bc:30:54:f0:b5:dd:
                    bd:25:82:88:03:69:89:27:ce:7a:c3:a3:94:6f:8e:
                    b5:d0:aa:03:71:88:d6:cb:ab:4f:93:e4:44:de:7a:
                    5e:98:d2:82:7a:05:0e:97:32:f7:c0:84:6b:95:45:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2A:B3:29:A5:2C:D3:01:98:2A:B9:7D:F8:D3:43:F3:F5:B2:A9:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56ae11fe-204c-3119-84b3-b39f3b2c0c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.208.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:24:b3:d4:6c:b4:ab:2f:6c:e9:71:f2:51:64:4f:16:cf:
         84:5c:47:5f:ee:4d:04:1a:8d:b4:93:ec:db:bb:48:8a:b4:60:
         7a:7e:32:cc:37:ab:f0:12:70:70:23:be:ed:01:f9:a1:d8:00:
         61:2b:fe:5c:24:90:6b:df:fe:4d:c3:c5:17:64:8f:30:5b:b6:
         d4:79:74:21:8a:18:da:76:ed:10:07:c8:62:86:13:8b:5b:e4:
         84:46:38:6b:4e:3f:e3:ee:8e:3d:e5:44:a0:4c:53:64:81:9f:
         01:ba:ad:f5:52:7e:31:9c:7d:72:88:e6:8b:29:a4:d7:23:b3:
         71:e3:76:03:95:b7:3a:81:83:b1:63:d2:a7:f7:d6:e5:e2:26:
         ff:13:c9:e9:95:c2:89:52:a6:1d:75:84:84:59:5f:c1:71:d0:
         14:15:aa:c1:62:37:74:92:c5:8f:9c:23:e0:64:53:58:f0:be:
         00:b1:4f:fe:10:2a:82:f3:47:d1:36:ab:89:3a:7b:e6:04:34:
         93:fe:93:91:23:d7:d5:45:af:8c:02:0f:66:1a:c0:ab:cf:c3:
         87:b6:b8:bf:e6:d9:12:29:81:3a:4f:5d:9a:1b:51:64:49:b5:
         55:39:c7:97:bc:82:a5:e0:07:d4:44:db:b2:1e:b9:a9:7b:c4:
         62:13:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:16:14 2025 by rpki-client