Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c83b1416-dc2f-3c33-968c-3e2a76c2b3f0.roa
File:                     c83b1416-dc2f-3c33-968c-3e2a76c2b3f0.roa (raw, json)
Hash identifier:          P8k4wCBLoGPSAO7fLJ18mYhB0RxZ4/1jIBXozjKzitM=
Subject key identifier:   7B:44:7F:E2:88:44:AD:DF:F2:D4:D3:70:7B:E7:FA:55:7B:2C:79:37
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBC4B6FD4509108557EB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c83b1416-dc2f-3c33-968c-3e2a76c2b3f0.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        35.208.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:c4:b6:fd:45:09:10:85:57:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=5629fa7d-672f-43ae-bd31-966e80b5b407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:9d:c0:2b:56:b2:00:01:53:8e:6a:3a:dc:
                    26:12:77:8f:26:18:b0:e8:cc:e9:50:cb:26:c4:f3:
                    84:df:3f:36:a6:28:31:4d:b4:b1:1d:25:ed:99:8d:
                    cc:1c:1b:14:0a:99:d1:0a:7e:14:ee:ae:16:64:df:
                    da:22:e6:27:2f:af:18:54:22:b4:fd:46:55:b1:d6:
                    fe:e0:98:ab:21:2a:42:c2:0f:fe:66:5a:e5:78:a5:
                    f3:94:a9:e3:10:c6:70:0c:9e:e1:bf:f8:2f:8d:50:
                    47:e2:69:9f:42:11:a7:9b:17:40:25:e7:10:ab:65:
                    2f:57:55:2c:6d:44:33:37:a9:4b:25:02:e6:98:33:
                    f5:71:85:64:b1:d0:af:58:18:88:9c:88:55:03:2b:
                    c3:1f:7b:e9:5e:82:a9:f1:c3:fe:6f:5b:5c:fc:1c:
                    a0:8e:80:69:91:81:3e:ea:bd:8a:d4:89:27:1a:26:
                    77:8c:60:8e:4e:42:bd:2f:27:1d:35:47:3f:11:f0:
                    b4:7a:4a:74:95:d6:9f:c7:c6:6a:aa:c9:a0:ad:71:
                    8c:68:54:4b:ee:c3:05:ad:68:bb:01:5d:4e:f9:d0:
                    3f:43:ae:a8:50:cc:6a:58:8f:26:a3:a0:bd:63:37:
                    df:35:2b:6e:3c:f6:45:0b:4a:ea:cd:6f:e3:b8:d8:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:7F:E2:88:44:AD:DF:F2:D4:D3:70:7B:E7:FA:55:7B:2C:79:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c83b1416-dc2f-3c33-968c-3e2a76c2b3f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.208.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:84:9d:79:b4:e3:8d:45:37:cb:88:fe:d3:21:c0:76:77:
         a1:08:84:91:f0:a5:b1:e6:c1:a2:a4:d1:4d:82:cf:14:e4:83:
         08:fa:a7:13:03:c3:81:a6:23:82:4d:20:4d:cd:8f:b0:ab:f3:
         1f:62:e2:e1:fc:7b:00:34:39:83:0f:4f:de:24:80:e6:34:69:
         66:6e:ce:76:16:f1:99:be:77:e5:e7:a7:d4:da:81:b3:04:54:
         5f:1d:9a:e0:be:d7:1a:2f:bd:18:c7:b2:31:8a:ea:77:c2:9b:
         61:5e:f8:e4:42:94:77:00:79:a2:fb:61:85:a6:14:ff:4e:cb:
         8d:13:d2:a1:92:27:34:24:5f:0f:94:95:a3:37:87:42:5c:c9:
         5a:83:7e:94:4f:a1:bb:49:8a:f4:56:bd:49:ec:30:84:6d:17:
         cd:89:fc:62:86:38:7e:0d:d9:fc:ef:3a:98:cd:50:a6:58:89:
         30:ae:23:9d:27:e4:bd:7f:ce:50:72:fa:55:69:38:55:50:78:
         01:bb:35:49:90:6a:0e:3b:b5:91:93:04:10:75:1d:4f:f7:ba:
         5e:6e:9c:e4:fa:b9:45:cc:07:e0:54:95:b6:b8:93:3e:c8:34:
         05:c4:98:6b:02:c2:ae:4b:09:d5:1f:e8:9e:a9:6f:be:87:44:
         33:d1:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:58 2025 by rpki-client