Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c59d058c-ea38-3154-8bfd-623f17622897.roa
File:                     c59d058c-ea38-3154-8bfd-623f17622897.roa (raw, json)
Hash identifier:          Yt4l2qOzEnkBmpHZhUR9T5WYddRL2J9JIasdn86RMPs=
Subject key identifier:   55:DF:1F:35:E1:05:4D:74:00:50:D8:9E:31:43:67:C6:A9:2F:ED:FB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBE9AE6E39813F723C9500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c59d058c-ea38-3154-8bfd-623f17622897.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.242.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:e9:ae:6e:39:81:3f:72:3c:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=28a1dd37-cf04-46c8-bdfd-dfe057c0405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:61:13:2e:ce:78:9d:bf:25:82:73:4e:32:
                    60:ab:f4:98:df:b7:84:fe:2f:fd:16:a0:ef:ad:06:
                    3b:71:1d:d9:c4:e0:43:ac:f8:42:cd:dc:a4:9c:44:
                    d1:a8:e6:ff:b1:87:07:41:08:59:35:51:2b:83:91:
                    c9:12:a1:5d:0e:17:d5:15:f3:66:99:c0:c3:1b:e9:
                    c8:97:7e:00:ea:33:0b:e9:0b:f6:59:b5:24:1a:a5:
                    fc:88:39:12:cf:f5:d3:b6:2c:26:07:77:13:27:96:
                    79:ec:37:09:de:f8:a4:ba:88:f4:3e:7b:d0:be:8f:
                    ab:ce:f4:5d:b6:4d:34:4a:c0:1e:10:93:cf:ad:d4:
                    ed:3a:cd:a4:77:39:86:93:d8:b6:b9:3d:76:71:3f:
                    93:c1:ca:88:4f:04:aa:cb:b9:04:dd:90:48:67:14:
                    51:37:16:f6:c8:ec:be:a4:5f:c6:02:ee:89:52:d2:
                    6d:af:6e:b7:a8:18:40:15:f7:11:8f:f9:95:b3:45:
                    62:0b:e7:27:c7:10:de:48:52:14:06:eb:73:92:58:
                    8f:69:8a:fe:d6:8b:76:e6:e6:65:a6:31:f1:89:87:
                    b5:2e:39:f1:fc:c3:fd:90:31:2e:36:01:86:76:1b:
                    ff:57:ea:f5:fb:96:0a:43:35:f1:ff:a1:fe:e6:4a:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DF:1F:35:E1:05:4D:74:00:50:D8:9E:31:43:67:C6:A9:2F:ED:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c59d058c-ea38-3154-8bfd-623f17622897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.242.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:76:b9:3e:10:c3:a9:c1:21:f4:0f:0e:f3:1b:18:e8:fa:
         63:76:b7:c1:2f:f3:a6:84:43:7b:a1:18:df:55:d0:77:4b:2c:
         ec:8d:02:00:57:e6:73:ea:ff:96:23:58:bb:de:a2:0f:86:82:
         65:df:ca:08:05:04:21:8d:c7:6e:d7:05:37:51:f6:53:69:3e:
         41:99:86:c4:60:1a:cb:20:e5:6a:23:a6:1f:6c:6f:a7:68:db:
         be:75:d0:3e:c0:09:bc:22:ec:1c:3d:22:87:5a:cc:4b:68:ca:
         1c:1b:f5:d2:29:6e:12:f0:d6:4c:71:2f:5e:d9:c5:61:9a:4f:
         37:a8:7d:84:33:c3:9c:62:d3:3f:81:a5:c9:56:64:1b:5c:1a:
         44:a0:fd:a5:c8:63:92:cf:2a:45:3c:c5:3d:77:45:b3:ac:d0:
         08:1c:f8:d7:64:51:89:9f:ed:14:00:5f:e9:62:65:c3:b8:3d:
         c9:9a:50:7e:33:f2:1b:59:9f:4c:9c:a6:08:30:4f:bb:09:3d:
         26:b4:00:1b:aa:5a:e5:a2:95:39:00:97:ee:27:b8:37:db:66:
         82:2a:5c:28:17:49:79:40:7b:ba:7b:9c:47:8e:72:66:76:5b:
         cf:c3:19:a2:ab:8f:df:db:4f:82:d8:c6:d5:e7:cc:43:52:c1:
         a6:13:5e:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+mubjmBP3I8lQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
MjhhMWRkMzctY2YwNC00NmM4LWJkZmQtZGZlMDU3YzA0MDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuhhEy7OeJ2/JYJzTjJgq/SY37eE/i/9FqDv
rQY7cR3ZxOBDrPhCzdyknETRqOb/sYcHQQhZNVErg5HJEqFdDhfVFfNmmcDDG+nI
l34A6jML6Qv2WbUkGqX8iDkSz/XTtiwmB3cTJ5Z57DcJ3vikuoj0PnvQvo+rzvRd
tk00SsAeEJPPrdTtOs2kdzmGk9i2uT12cT+TwcqITwSqy7kE3ZBIZxRRNxb2yOy+
pF/GAu6JUtJtr263qBhAFfcRj/mVs0ViC+cnxxDeSFIUButzkliPaYr+1ot25uZl
pjHxiYe1Ljnx/MP9kDEuNgGGdhv/V+r1+5YKQzXx/6H+5kqcpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXfHzXhBU10AFDYnjFDZ8apL+37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzU5ZDA1OGMtZWEzOC0z
MTU0LThiZmQtNjIzZjE3NjIyODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/KgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANrdrk+EMOpwSH0Dw7zGxjo+mN2t8Ev86aEQ3uhGN9V0HdLLOyNAgBX
5nPq/5YjWLveog+GgmXfyggFBCGNx27XBTdR9lNpPkGZhsRgGssg5Wojph9sb6do
27510D7ACbwi7Bw9IodazEtoyhwb9dIpbhLw1kxxL17ZxWGaTzeofYQzw5xi0z+B
pclWZBtcGkSg/aXIY5LPKkU8xT13RbOs0Agc+NdkUYmf7RQAX+liZcO4PcmaUH4z
8htZn0ycpggwT7sJPSa0ABuqWuWilTkAl+4nuDfbZoIqXCgXSXlAe7p7nEeOcmZ2
W8/DGaKrj9/bT4LYxtXnzENSwaYTXmg=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:16:22 2025 by rpki-client