Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a790454-2da8-39d3-a592-ac0278d6e3e4.roa
File:                     9a790454-2da8-39d3-a592-ac0278d6e3e4.roa (raw, json)
Hash identifier:          BnFyKz9MOW+vg3ssd/hf8oh2CjQl3tA069qRmbk9acI=
Subject key identifier:   3B:EF:73:FF:18:97:A4:F2:93:01:BC:8E:19:E1:EB:83:63:00:80:AB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB890861541F5A62771B40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a790454-2da8-39d3-a592-ac0278d6e3e4.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.198.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:89:08:61:54:1f:5a:62:77:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=e2c68a1e-901e-4bed-b7d3-431fdd78583a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:a1:6a:45:ad:31:2c:18:3b:88:f0:9f:a6:
                    d5:80:05:4c:40:31:a6:43:e3:65:b3:01:28:f2:f5:
                    4b:73:5d:5b:9c:f1:fe:46:40:dc:ac:3b:3f:b1:9d:
                    29:a4:d4:35:e1:a4:5e:35:4c:8d:60:c1:1a:9e:15:
                    14:ee:f8:b4:61:7b:df:1c:9f:ff:3b:f1:21:fd:93:
                    69:55:cc:82:f5:bc:f2:c2:c1:0a:7f:0e:09:c0:3d:
                    3d:83:5b:7b:a6:a8:b5:ac:c8:89:28:b2:c9:d7:18:
                    b5:ce:f2:16:d8:01:9b:77:f9:9a:22:41:2a:4a:ab:
                    59:90:af:cb:53:ec:d1:7d:77:20:66:5c:db:23:3d:
                    12:d6:84:de:5c:29:19:96:21:e3:a2:e6:fa:e9:e7:
                    16:12:a8:5b:42:f2:82:f8:7d:ab:7c:1f:48:c7:39:
                    e0:24:f0:65:d7:d7:70:7f:26:c2:b4:dd:55:93:8f:
                    ed:c9:fa:db:e8:cf:0a:42:26:02:5e:18:43:af:e0:
                    fa:95:55:24:0c:31:f9:aa:43:79:11:54:d0:f6:a8:
                    2e:5b:7a:dc:8d:06:18:1f:79:4f:6c:d0:28:01:42:
                    78:51:93:d2:0c:ec:e8:fe:f0:18:17:9d:15:54:77:
                    bc:3a:e0:9d:68:71:d6:99:0a:66:4b:d6:d8:5a:ca:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EF:73:FF:18:97:A4:F2:93:01:BC:8E:19:E1:EB:83:63:00:80:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a790454-2da8-39d3-a592-ac0278d6e3e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.198.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d1:c8:f0:60:9f:19:f5:d8:f5:6c:0c:f5:ea:c1:90:c0:43:
         16:e0:6c:44:99:6e:9b:3f:8b:c8:66:16:28:e2:9b:02:32:50:
         ae:40:72:5e:51:77:1b:92:f8:f7:ef:ee:ac:0e:84:6f:1d:cf:
         e8:ed:81:70:34:61:bc:c3:31:b7:72:13:81:59:db:91:b0:55:
         ae:32:cf:ee:6c:b8:ba:8f:e7:73:b7:3d:d2:e6:00:70:69:04:
         9a:e5:0f:c1:83:76:d1:c4:70:4a:34:6d:37:1f:a7:24:72:ab:
         75:ae:20:ee:55:d7:5f:5a:4e:68:f0:f5:6f:16:56:1e:11:96:
         cf:c9:70:5c:7e:43:a2:0e:6d:87:92:bf:84:35:49:c8:27:09:
         b1:73:a7:bb:ce:a4:20:0a:71:c2:0b:2f:cf:70:1b:cf:0f:d6:
         92:47:60:2d:51:1f:9c:4b:1e:da:ba:bc:1e:f2:cc:3f:b8:09:
         d9:d0:2d:60:45:27:9c:17:a4:28:75:5d:01:fb:bc:61:07:55:
         30:4b:f1:49:db:be:44:33:b8:af:f8:5c:f7:2d:8d:e4:8a:cf:
         0a:bb:0f:33:dc:6c:a1:af:15:5b:5a:1c:b1:ed:67:6b:22:b9:
         ca:7a:8b:51:e8:ac:69:da:b3:8a:b4:33:11:4b:b7:0d:70:58:
         03:cf:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:23:54 2025 by rpki-client