Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa
File:                     ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa (raw, json)
Hash identifier:          ZvNIZqRFigw3RoNobOtyU4/xRkUGLRN1CMY+T2oOv2o=
Subject key identifier:   54:03:A6:AC:38:A6:1D:BC:CB:8E:89:B7:66:EA:00:7C:A2:75:6E:22
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBA9C90CE934A91EED9D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.193.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:a9:c9:0c:e9:34:a9:1e:ed:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=ee53c598-9559-4626-be3e-7e6cc86e7679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:ab:54:df:aa:bb:4a:08:be:f7:47:21:e0:
                    08:aa:22:ce:7f:48:fd:f9:05:bf:91:0d:15:db:f6:
                    62:e6:d8:0a:97:00:96:9d:4a:3a:e9:16:e8:6e:85:
                    1c:9b:f5:af:94:5b:ff:8f:f1:cc:d0:c9:d0:62:79:
                    e4:8b:cd:77:92:34:ad:7b:19:10:bf:14:53:2f:aa:
                    b6:02:f4:0e:5c:da:b6:80:83:96:35:8a:a7:78:11:
                    16:ec:a6:09:84:7e:44:d2:34:c6:49:a3:ef:41:54:
                    e7:26:f3:ba:99:93:a2:02:b5:ee:45:0f:5e:14:06:
                    d3:9e:53:0c:b4:d7:a4:32:0c:78:08:86:22:62:61:
                    e4:01:29:07:9d:7d:77:de:c6:5c:20:c5:1c:44:1a:
                    96:6d:f0:15:9a:fb:6f:f4:66:f2:7e:95:5e:03:b2:
                    04:d3:6f:5f:fe:a8:1f:72:cf:21:8e:da:d3:e6:ac:
                    f5:d6:e8:44:0e:51:f6:48:67:f3:86:cd:af:dc:4a:
                    eb:f1:4b:d7:42:f0:e1:0e:5c:4a:f7:23:36:dc:c2:
                    d7:e0:12:87:f2:bd:cf:04:35:1a:4a:42:80:2d:b9:
                    08:c9:87:81:54:39:ab:f4:7a:8f:e2:1d:75:c1:e0:
                    3a:30:76:d2:8e:13:81:0a:e2:6c:12:bd:b8:48:65:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:A6:AC:38:A6:1D:BC:CB:8E:89:B7:66:EA:00:7C:A2:75:6E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:a8:37:f2:bf:79:3f:c9:a6:fc:b5:7b:53:28:57:8b:94:
         c0:8c:9b:41:c4:5e:1c:c3:83:10:df:e5:52:3a:96:f5:46:f4:
         b3:06:c0:bb:b1:e0:f1:89:6a:bd:22:ca:10:94:fe:10:05:c2:
         77:5f:72:3b:58:16:c9:3e:98:3b:25:e1:98:95:bb:71:62:c5:
         e8:7c:a3:14:b2:53:57:ac:a7:f9:0b:e4:7a:36:04:b6:18:aa:
         4c:81:06:04:19:1c:f5:4c:97:95:d0:8a:66:25:a5:37:b4:f7:
         9b:be:0d:cb:e5:ec:ec:07:66:59:cf:78:20:32:2e:73:28:81:
         b9:f1:2e:7a:08:47:bf:41:5e:b9:86:05:28:6d:70:6e:29:a3:
         f7:1f:85:d5:5b:d8:91:75:8e:91:77:25:73:d1:6d:72:3d:7f:
         02:13:db:32:85:1d:f9:e6:91:d9:af:49:08:2e:cd:97:47:ef:
         64:23:93:c5:69:c8:fc:6a:51:e2:5f:9a:e9:88:3f:7b:8a:64:
         71:e7:04:32:07:55:9f:d1:d3:f3:53:7e:82:69:ac:fe:0e:1c:
         d5:1b:b9:36:42:89:f1:32:e5:16:ee:66:1f:88:e8:43:3d:04:
         68:7e:ae:08:0d:5a:ac:55:71:ca:e2:15:75:fd:e8:c4:5a:74:
         e2:3f:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:38:05 2025 by rpki-client