Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa
File:                     a5b66589-cc75-3b3c-8fd1-571170c6000f.roa (raw, json)
Hash identifier:          yWAVbJ/Nwg4sU83KPq/foqrytD5GoYfmYjjOgbM5N3U=
Subject key identifier:   0A:12:E5:32:3E:61:7E:70:3A:5B:5C:EF:8A:E5:F3:49:3C:78:98:28
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBB2960750D467DEEF9BA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        35.216.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:b2:96:07:50:d4:67:de:ef:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=ed4b6089-1cd9-4003-956a-4e0a4027630f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:58:58:8b:20:ab:12:ec:19:07:5a:2a:cb:
                    05:2f:a9:9f:b6:c6:87:7f:74:3b:8c:3d:d9:2b:21:
                    19:ce:8f:53:d2:8a:9b:d6:b3:c1:45:29:45:3b:92:
                    b6:b3:3d:e3:6a:75:4f:75:49:f0:63:d8:f5:47:18:
                    92:ca:8a:7b:97:ea:ed:a0:d6:82:ce:22:9c:59:9e:
                    74:4b:93:65:a8:2d:8e:75:72:c7:0e:1d:da:52:df:
                    3f:fc:43:4c:79:14:e4:61:61:22:d1:4d:80:03:dd:
                    fb:db:11:1b:d2:b7:d0:63:c7:9c:e0:11:7d:6f:57:
                    0f:7b:aa:06:99:0e:41:b9:dd:0f:b7:66:f3:9d:3c:
                    1d:89:18:68:cd:28:4f:f2:6b:ad:17:9c:f2:bb:63:
                    e4:fe:a2:67:d7:43:54:f9:31:92:8f:52:9b:2d:e4:
                    1f:55:42:e3:41:7e:2d:c7:49:e3:79:f2:0e:01:d4:
                    80:8b:bd:82:2e:ef:10:f5:e3:c3:7a:6f:cf:ef:5e:
                    1a:44:25:26:2b:38:5f:6e:71:e3:11:8c:78:ca:ca:
                    d6:37:5f:13:ca:77:92:f0:58:dc:8e:f2:3c:7b:c4:
                    75:18:50:e2:7b:70:a2:3c:76:07:af:11:17:bc:42:
                    2a:91:83:fd:bb:c2:06:19:df:d6:79:62:db:b7:2e:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:E5:32:3E:61:7E:70:3A:5B:5C:EF:8A:E5:F3:49:3C:78:98:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.216.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:ca:4e:6b:69:a7:5e:5a:d7:89:2c:4d:88:e0:da:58:76:
         d4:72:8e:f5:24:97:6f:cc:d4:42:93:9e:b6:ec:31:54:e0:8c:
         e2:69:f9:a6:e3:5a:0d:bb:6e:11:d7:e9:ee:69:99:d6:d5:23:
         eb:c5:65:26:41:bc:a8:95:73:73:e5:ea:3d:0d:97:d8:a6:04:
         cb:48:58:cc:39:63:e0:c2:e3:c2:00:25:5e:23:e8:47:8b:13:
         b6:af:8d:40:3d:6f:81:89:6f:3c:58:e5:1a:e8:06:72:8c:e9:
         4f:f3:b0:32:05:bf:15:6e:d0:d3:a9:d9:fe:d9:ba:68:97:a1:
         6d:62:f2:1c:29:99:c6:2e:f7:0e:bf:e0:64:ac:c5:68:e6:59:
         41:43:e6:f1:03:a4:a5:eb:76:0c:b3:7f:fb:4b:ec:0b:e5:a3:
         44:94:b3:8b:7b:32:b9:92:a8:9a:39:1c:82:6f:c2:02:2a:b9:
         e7:79:34:91:cc:0f:6c:32:51:c7:64:b3:de:56:f1:2e:a5:a8:
         21:c2:be:d9:6e:c1:88:c3:30:e4:71:01:8b:54:c4:39:33:8b:
         2b:1f:e6:28:a0:27:cd:7c:ab:05:86:42:04:c1:81:5d:64:60:
         81:88:fa:1c:cb:3e:f3:f3:d0:d3:9e:86:1d:1f:f2:da:dc:7e:
         b1:5b:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:22:35 2025 by rpki-client