Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa
File:                     68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa (raw, json)
Hash identifier:          vYHmWXNMnOgzryeAWgxWTukgUqTB8WXoA0IF7f6Ixdk=
Subject key identifier:   B4:0D:40:8D:30:40:11:C5:21:97:32:18:18:6C:AD:9C:4D:23:36:14
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBA5747A07437571558980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        35.206.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:a5:74:7a:07:43:75:71:55:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=f289e20d-1d1a-44e9-934c-f6257494c26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:6c:3e:1e:8b:9c:03:c1:35:d7:87:8a:27:
                    72:c7:67:a2:47:3b:c4:f6:5a:0f:9a:37:f2:c9:05:
                    87:f2:e1:cd:8b:2d:ff:0a:0a:d4:1e:4f:04:76:6d:
                    73:95:8d:99:65:7d:73:b6:74:44:b0:5a:a1:ad:6c:
                    84:48:88:dd:ee:2a:7b:1f:4a:40:7c:66:c5:6f:c8:
                    77:e6:7f:e9:44:ab:27:98:32:88:ce:71:16:cf:b9:
                    02:e8:c4:20:88:99:20:3f:29:a4:fc:e1:9c:78:d0:
                    e9:9e:4e:e2:03:f3:71:27:d4:09:7b:0e:89:16:5f:
                    57:e7:1b:8d:49:c3:4b:ef:a8:81:14:b9:5f:dc:46:
                    a8:d6:d2:94:35:81:16:cb:1e:16:e8:9e:83:4e:4f:
                    db:c3:28:46:88:f9:3b:c5:c4:cd:a8:64:2d:69:fb:
                    79:d8:11:be:47:a4:c8:4c:b9:29:95:ae:d1:f3:2a:
                    b0:69:69:5f:27:5b:dd:25:c5:ca:72:cb:26:79:de:
                    69:8b:f8:4d:81:1d:df:2a:4c:66:9d:d1:49:74:17:
                    14:2a:0c:93:8b:cd:e5:ae:7e:4e:5c:47:66:8b:37:
                    1a:de:09:e0:d5:13:16:b3:60:27:05:50:84:d5:40:
                    ac:af:94:68:ff:b6:dc:ae:35:da:92:19:9b:db:93:
                    5b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0D:40:8D:30:40:11:C5:21:97:32:18:18:6C:AD:9C:4D:23:36:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fd:df:4c:ec:91:74:cb:f7:1a:1a:50:a2:48:6f:c1:eb:1e:
         0b:4c:65:c4:95:df:6e:cc:cc:df:80:51:9f:a9:1d:93:c6:07:
         23:13:3e:73:be:86:d7:b1:c2:9b:5a:ed:13:e4:84:b9:9a:18:
         df:8b:ae:3c:99:51:0e:8e:9e:40:9f:7c:6e:dd:ef:d3:28:9b:
         8c:cf:86:44:74:5b:44:98:f0:6e:11:76:65:90:7f:92:db:06:
         2a:d3:f1:64:5d:57:08:b3:53:cd:8f:96:ba:84:85:c1:17:5d:
         f7:db:7f:79:9c:bd:ec:2e:85:7f:cd:bc:40:19:e1:21:ff:5e:
         61:4c:e1:5a:cd:d4:51:db:77:1c:33:2c:f4:b4:96:3a:48:c8:
         e2:4f:67:a6:83:0a:b2:00:63:c2:bc:38:90:80:1a:12:34:44:
         cd:03:3e:e5:1b:ad:51:98:b9:9c:53:e5:ca:b2:a6:9a:48:ed:
         79:37:f7:be:95:dd:dd:a4:99:54:8a:7e:8d:43:5c:e7:45:1c:
         77:f9:f3:25:ad:c3:1b:0b:43:68:fb:ea:00:31:0d:e3:f8:7b:
         62:e4:31:ed:f8:73:ed:0e:ff:4c:df:b6:1e:98:20:d8:95:be:
         5c:63:bf:e5:37:f6:9c:84:c5:e3:c1:7f:cf:8a:1a:f1:70:ec:
         55:aa:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:20:43 2025 by rpki-client