Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccdf73c4-0c82-396b-b375-097746a3d6b7.roa
File:                     ccdf73c4-0c82-396b-b375-097746a3d6b7.roa (raw, json)
Hash identifier:          PUBd6Qh5CwFa/9CQqecAhL4FFzNuq7zwvey6P2Llabs=
Subject key identifier:   23:63:96:1F:22:CF:6A:2D:29:CE:23:75:F9:2D:6D:41:48:11:76:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBA1853E67D01434701100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccdf73c4-0c82-396b-b375-097746a3d6b7.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        35.215.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:a1:85:3e:67:d0:14:34:70:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=01688eb7-28ad-484e-b81f-25189e95488d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:ae:75:c8:eb:59:77:c9:7f:c1:e0:1f:1e:
                    15:4c:fc:06:54:6f:61:99:dc:66:bf:c9:61:9e:84:
                    f7:82:20:78:d9:16:31:cc:c0:4b:d5:19:31:27:e9:
                    66:2a:6d:b7:c7:10:4a:a0:d6:d3:0e:f6:5d:57:18:
                    32:d6:1d:cd:b7:7d:f2:96:58:92:f3:8c:ed:04:c2:
                    26:e6:53:91:5d:88:56:63:70:9e:ca:2a:ed:68:a1:
                    e7:21:57:2a:3d:e8:13:46:a8:23:8c:95:a8:de:a1:
                    04:29:16:29:f0:08:ff:88:21:36:af:aa:8e:ee:94:
                    9f:27:6d:e5:1f:d6:d5:c2:e1:22:bd:3f:c5:7d:66:
                    e1:d1:b4:e2:0d:e1:19:ea:9f:8a:58:ec:fe:b2:f4:
                    e5:a9:b5:bb:a7:a2:b9:7f:ba:98:44:f9:41:41:5f:
                    48:8a:dc:09:f9:77:00:c0:b5:cf:3c:10:75:3d:2f:
                    c2:68:a0:a8:a2:55:36:c7:9b:aa:6a:f8:d3:08:ac:
                    d3:7e:fd:70:ba:45:44:ef:c4:21:55:57:0c:10:8c:
                    c2:93:ec:0f:4b:3f:f5:81:9f:d2:52:a7:f5:14:52:
                    e0:04:b5:59:58:22:d5:c1:26:d3:d8:0e:6b:70:4d:
                    84:1f:dd:ae:d6:1c:04:8f:e4:07:ed:56:45:c6:15:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:63:96:1F:22:CF:6A:2D:29:CE:23:75:F9:2D:6D:41:48:11:76:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccdf73c4-0c82-396b-b375-097746a3d6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.215.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:06:9b:ac:46:51:55:3d:51:ad:fe:da:c4:54:4c:fe:75:5b:
         e8:c4:4f:50:78:0c:3f:2f:86:19:8b:3a:e0:dd:3e:d4:ed:03:
         36:4b:6a:9f:31:5c:6b:42:d6:29:34:bb:0a:ff:0d:c0:05:10:
         ef:95:a9:d6:65:8a:34:e7:0d:36:bb:83:05:ed:ec:f3:15:f0:
         56:e9:41:cf:59:2e:de:c6:89:15:13:c1:9d:af:0e:b8:d7:11:
         75:19:92:01:f4:a2:cf:75:aa:dc:90:eb:aa:7d:c2:ad:d5:42:
         f2:f6:65:54:1d:b9:62:dd:3b:17:6e:60:9f:c1:51:59:e0:c2:
         93:cd:39:22:4b:2a:7b:a6:21:a6:10:05:6a:67:f4:d1:09:f8:
         9c:3f:81:56:24:18:7e:4a:b4:1d:2c:46:1a:e3:5a:0c:a1:d3:
         5d:b4:b7:6c:d1:f6:d7:41:59:39:f5:1b:10:46:b1:16:7e:c7:
         9e:4e:c0:b4:d9:0e:2a:e3:c2:4b:a5:b6:09:b9:47:f0:84:c2:
         de:83:ed:a5:15:84:19:e0:b9:d6:c0:8f:92:30:91:d7:69:16:
         7e:35:15:12:6b:3d:c1:f0:98:2a:39:fb:7c:8a:2d:33:d9:66:
         39:3a:a9:55:fe:89:72:00:4a:1e:6b:fd:8f:e7:e4:80:19:ca:
         f6:fb:61:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26GFPmfQFDRwEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
MDE2ODhlYjctMjhhZC00ODRlLWI4MWYtMjUxODllOTU0ODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYOudcjrWXfJf8HgHx4VTPwGVG9hmdxmv8lh
noT3giB42RYxzMBL1RkxJ+lmKm23xxBKoNbTDvZdVxgy1h3Nt33ylliS84ztBMIm
5lORXYhWY3CeyirtaKHnIVcqPegTRqgjjJWo3qEEKRYp8Aj/iCE2r6qO7pSfJ23l
H9bVwuEivT/FfWbh0bTiDeEZ6p+KWOz+svTlqbW7p6K5f7qYRPlBQV9IitwJ+XcA
wLXPPBB1PS/CaKCoolU2x5uqavjTCKzTfv1wukVE78QhVVcMEIzCk+wPSz/1gZ/S
Uqf1FFLgBLVZWCLVwSbT2A5rcE2EH92u1hwEj+QH7VZFxhUSTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNjlh8iz2otKc4jdfktbUFIEXaQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2NkZjczYzQtMGM4Mi0z
OTZiLWIzNzUtMDk3NzQ2YTNkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9cAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYGm6xGUVU9Ua3+2sRUTP51W+jET1B4DD8vhhmLOuDdPtTtAzZLap8x
XGtC1ik0uwr/DcAFEO+VqdZlijTnDTa7gwXt7PMV8FbpQc9ZLt7GiRUTwZ2vDrjX
EXUZkgH0os91qtyQ66p9wq3VQvL2ZVQduWLdOxduYJ/BUVngwpPNOSJLKnumIaYQ
BWpn9NEJ+Jw/gVYkGH5KtB0sRhrjWgyh0120t2zR9tdBWTn1GxBGsRZ+x55OwLTZ
Dirjwkultgm5R/CEwt6D7aUVhBngudbAj5IwkddpFn41FRJrPcHwmCo5+3yKLTPZ
Zjk6qVX+iXIASh5r/Y/n5IAZyvb7YcE=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:38:10 2025 by rpki-client