Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7178be7a-ddc6-3ad1-a16c-d940ba25fc81.roa
File:                     7178be7a-ddc6-3ad1-a16c-d940ba25fc81.roa (raw, json)
Hash identifier:          5ILXGgC5Nxap4wsXLquO1zgpFajxsPTfHPc7Oz8EukI=
Subject key identifier:   56:5B:20:D6:3B:CF:90:98:7F:62:5E:13:9A:64:EB:E2:63:FF:2F:F8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBC39AE5A917D4EC196900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7178be7a-ddc6-3ad1-a16c-d940ba25fc81.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.202.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:c3:9a:e5:a9:17:d4:ec:19:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=c6d12731-bd08-412b-a924-ffc213096c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:48:99:ec:3f:e3:80:7d:75:87:61:e1:60:
                    29:9b:a6:d3:50:1a:ba:df:b2:a9:26:c2:dd:e2:43:
                    66:d5:07:d1:f8:35:fd:59:1e:04:a7:fe:db:38:e4:
                    7a:23:72:d2:d6:92:06:67:4d:76:ad:6a:4d:03:a2:
                    3a:ba:9e:14:a7:e7:91:20:c2:51:b8:b1:57:c8:d0:
                    47:f2:5e:2d:56:02:21:bb:a4:3d:bb:00:78:2d:17:
                    fe:7d:47:b4:d1:89:64:32:54:f4:f6:2b:80:ac:fb:
                    d1:2d:51:1c:ab:df:3d:1e:6c:94:06:72:11:5b:f9:
                    b5:72:6f:8b:90:ca:be:da:97:c8:2a:d5:1b:30:13:
                    03:8f:ca:48:5a:e3:55:e0:e1:fa:b0:ab:04:49:9b:
                    a3:dc:2d:19:75:7a:ee:d6:9d:81:17:43:4d:8a:89:
                    68:40:18:fc:2e:24:a0:99:ac:04:51:ae:a2:0c:ce:
                    ac:49:92:04:71:af:98:f9:3f:7e:4e:9e:31:9b:95:
                    3f:67:65:04:6f:32:13:63:f3:34:d0:0d:48:28:e4:
                    02:71:50:d7:24:09:3c:c1:ed:bb:25:42:04:08:db:
                    62:31:30:de:10:d3:62:16:4b:0a:60:5f:fd:59:c3:
                    8a:a9:b0:df:6c:1c:a3:70:2a:15:a6:60:77:f8:51:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:20:D6:3B:CF:90:98:7F:62:5E:13:9A:64:EB:E2:63:FF:2F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7178be7a-ddc6-3ad1-a16c-d940ba25fc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.202.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:57:56:99:35:34:38:e1:5c:df:d8:f8:0e:da:c8:f0:68:
         36:e7:e1:a3:d5:77:e2:1b:fb:ec:39:96:32:fd:3c:01:90:fd:
         c6:19:ff:e3:9a:cd:7f:27:4c:59:89:a2:25:a5:66:09:ca:9d:
         35:d2:4b:33:9d:37:96:e5:91:2e:b9:7a:e9:67:59:6b:f6:61:
         62:88:39:4e:51:b6:63:f1:ce:7e:a2:21:6f:bb:d7:b2:58:53:
         2d:da:b2:0b:53:a7:55:c1:85:cd:f6:1b:73:00:b7:36:b4:3f:
         d8:b8:11:79:b3:a2:1f:c6:9a:a8:dc:56:a9:cd:71:30:ec:99:
         49:b0:cc:df:1a:73:6e:f4:86:dd:f7:c1:3b:76:bb:a6:1d:98:
         8f:58:6f:d9:d3:49:10:18:63:33:28:93:73:52:f7:ca:61:83:
         2f:0a:04:d0:ec:7d:66:3b:58:5c:3b:81:fb:6e:1a:00:e6:7e:
         19:1f:91:3f:a3:64:d9:8c:0d:e0:ba:03:15:c1:8a:81:42:4e:
         b3:f2:84:20:5d:8a:d2:86:5d:eb:a8:97:01:72:76:62:71:eb:
         f3:a8:fd:03:9a:cb:91:52:73:5f:a5:6b:b0:86:d0:64:fc:6e:
         43:b8:ee:02:dd:f6:de:5f:8d:34:8b:e8:8b:3b:20:77:01:0c:
         ef:cd:3c:27
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG28Oa5akX1OwZaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
YzZkMTI3MzEtYmQwOC00MTJiLWE5MjQtZmZjMjEzMDk2YzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjRImew/44B9dYdh4WApm6bTUBq637KpJsLd
4kNm1QfR+DX9WR4Ep/7bOOR6I3LS1pIGZ012rWpNA6I6up4Up+eRIMJRuLFXyNBH
8l4tVgIhu6Q9uwB4LRf+fUe00YlkMlT09iuArPvRLVEcq989HmyUBnIRW/m1cm+L
kMq+2pfIKtUbMBMDj8pIWuNV4OH6sKsESZuj3C0ZdXru1p2BF0NNioloQBj8LiSg
mawEUa6iDM6sSZIEca+Y+T9+Tp4xm5U/Z2UEbzITY/M00A1IKOQCcVDXJAk8we27
JUIECNtiMTDeENNiFksKYF/9WcOKqbDfbByjcCoVpmB3+FFgoQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFZbINY7z5CYf2JeE5pk6+Jj/y/4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzE3OGJlN2EtZGRjNi0z
YWQxLWExNmMtZDk0MGJhMjVmYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBI8owVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA7dXVpk1NDjhXN/Y+A7ayPBoNufho9V34hv77DmWMv08AZD9xhn/45rN
fydMWYmiJaVmCcqdNdJLM503luWRLrl66WdZa/ZhYog5TlG2Y/HOfqIhb7vXslhT
LdqyC1OnVcGFzfYbcwC3NrQ/2LgRebOiH8aaqNxWqc1xMOyZSbDM3xpzbvSG3ffB
O3a7ph2Yj1hv2dNJEBhjMyiTc1L3ymGDLwoE0Ox9ZjtYXDuB+24aAOZ+GR+RP6Nk
2YwN4LoDFcGKgUJOs/KEIF2K0oZd66iXAXJ2YnHr86j9A5rLkVJzX6VrsIbQZPxu
Q7juAt323l+NNIvoizsgdwEM7808Jw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:44:52 2025 by rpki-client