Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa
File:                     5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa (raw, json)
Hash identifier:          8dlCSysiaFpsLN1sWNgkJ+UNh3c6VjzBhEPcIcCOrws=
Subject key identifier:   37:C7:19:4F:DA:E8:8D:01:8A:6B:EE:B0:43:9B:E9:6C:46:49:71:78
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB999B698C29601C454780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        35.199.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:99:9b:69:8c:29:60:1c:45:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=126a4f88-9d45-42e3-bfca-e1d9d12a6b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:1f:04:f6:f3:2b:7e:98:1a:52:23:ba:27:
                    45:c2:22:5d:33:83:d6:93:8d:c8:87:8a:54:df:a5:
                    87:ac:81:20:06:87:33:76:e1:74:ab:98:29:19:62:
                    2d:4e:22:0b:5f:d2:51:a2:b2:ba:67:8e:2a:fc:99:
                    f6:f6:1a:26:57:58:da:5e:c5:c3:f3:95:6b:8c:10:
                    4c:fc:3b:31:0f:ff:d9:e8:ad:38:19:46:df:dd:5b:
                    22:6d:e2:97:e7:f6:6b:cf:99:2e:e5:9b:4a:d9:cd:
                    a6:81:21:1b:50:35:d1:4f:ce:74:2e:0b:c3:c8:9c:
                    b1:91:bf:65:9a:63:28:41:2c:c2:6c:df:d3:da:56:
                    c3:a4:1a:eb:3c:9e:da:1c:44:0a:e7:7b:75:60:6d:
                    9b:9f:85:5f:99:78:ba:5f:58:7d:d5:5a:88:6d:b9:
                    83:ca:d2:25:38:17:99:8b:48:5a:70:22:cd:2a:5b:
                    25:2a:b9:2a:10:ba:6b:0d:49:d8:5d:50:b5:d6:b9:
                    9e:de:0f:9f:b2:c4:57:80:f3:c9:42:ab:d4:a7:2d:
                    9e:c4:50:a9:03:c8:ec:38:b1:75:91:da:63:ce:3d:
                    79:f6:9a:17:74:e2:e5:6b:0f:f8:56:b6:50:9c:7b:
                    6c:f8:4f:ed:46:7c:0f:ab:6d:fb:7b:22:d6:87:ff:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:19:4F:DA:E8:8D:01:8A:6B:EE:B0:43:9B:E9:6C:46:49:71:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.199.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5a:bf:63:84:de:cd:c2:23:58:22:b4:9b:c3:e4:4d:62:bf:
         28:5d:36:c5:95:fd:01:70:cb:1d:db:e7:a8:87:5f:de:d0:54:
         76:4e:2d:85:d4:78:5f:96:31:88:d2:5e:3e:0d:0a:2d:fd:97:
         84:ba:18:e5:af:29:1b:cb:53:86:e3:ef:80:37:12:a5:3e:c6:
         de:ee:17:5a:30:c6:f7:e4:be:5e:a3:1d:eb:6a:0f:8e:9f:fa:
         a6:07:30:11:9f:bb:16:2b:56:08:2d:f5:6b:51:04:7b:c3:cd:
         c6:93:ca:52:2b:0e:a6:ee:e3:48:73:83:fe:2b:f8:be:c0:83:
         96:50:78:67:ec:db:0f:70:5d:cc:82:80:9f:65:9d:7f:75:b1:
         11:70:db:19:dc:9f:04:26:b4:75:81:65:fe:91:2a:69:40:4e:
         53:87:2e:28:ef:81:2c:5b:ae:d8:ed:a7:c5:a7:49:f0:9f:92:
         23:c4:cb:ae:d2:9c:a6:82:ca:b3:d6:34:ce:10:ba:cb:a5:08:
         5a:d2:90:4d:6a:04:1a:a5:30:8b:dd:1b:93:21:36:09:d7:15:
         e5:4e:57:09:05:92:cf:59:83:52:48:43:42:c6:95:7a:ab:ac:
         7b:ff:c9:5c:01:42:6b:68:7a:0b:7f:02:57:00:37:39:58:7e:
         55:7f:21:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25mbaYwpYBxFR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
MTI2YTRmODgtOWQ0NS00MmUzLWJmY2EtZTFkOWQxMmE2YjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm4fBPbzK36YGlIjuidFwiJdM4PWk43Ih4pU
36WHrIEgBoczduF0q5gpGWItTiILX9JRorK6Z44q/Jn29homV1jaXsXD85VrjBBM
/DsxD//Z6K04GUbf3VsibeKX5/Zrz5ku5ZtK2c2mgSEbUDXRT850LgvDyJyxkb9l
mmMoQSzCbN/T2lbDpBrrPJ7aHEQK53t1YG2bn4VfmXi6X1h91VqIbbmDytIlOBeZ
i0hacCLNKlslKrkqELprDUnYXVC11rme3g+fssRXgPPJQqvUpy2exFCpA8jsOLF1
kdpjzj159poXdOLlaw/4VrZQnHts+E/tRnwPq237eyLWh//PxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfHGU/a6I0BimvusEOb6WxGSXF4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQxMjFkYzUtY2ZiYy0z
YzQxLWI2NjctYWEwZWNmNjdmZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI8eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBav2OE3s3CI1gitJvD5E1ivyhdNsWV/QFwyx3b56iHX97QVHZOLYXU
eF+WMYjSXj4NCi39l4S6GOWvKRvLU4bj74A3EqU+xt7uF1owxvfkvl6jHetqD46f
+qYHMBGfuxYrVggt9WtRBHvDzcaTylIrDqbu40hzg/4r+L7Ag5ZQeGfs2w9wXcyC
gJ9lnX91sRFw2xncnwQmtHWBZf6RKmlATlOHLijvgSxbrtjtp8WnSfCfkiPEy67S
nKaCyrPWNM4QusulCFrSkE1qBBqlMIvdG5MhNgnXFeVOVwkFks9Zg1JIQ0LGlXqr
rHv/yVwBQmtoegt/AlcANzlYflV/IUM=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:21:38 2025 by rpki-client