Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa
File:                     ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa (raw, json)
Hash identifier:          /0ZLqwDvg0Ny0P3RoMAr+yMiDYi58JsV/U0NLAt7uB0=
Subject key identifier:   07:A2:E6:76:5F:D6:85:C6:AE:16:CE:60:EF:84:EB:C7:5B:63:50:8A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB7C46378D000C1FE16FC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.199.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:7c:46:37:8d:00:0c:1f:e1:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=4c41fbb4-e489-4b56-8bc1-02827b52d365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:28:f5:f7:5c:7b:23:01:fa:f6:58:c9:4a:
                    eb:38:85:51:3d:ea:49:84:fd:fc:3e:eb:2c:2f:31:
                    16:33:9c:4c:00:70:f5:78:c5:c1:4b:a1:75:56:5b:
                    3c:dd:51:88:27:db:db:e4:d5:bc:6b:86:5c:7d:28:
                    35:f4:2e:ba:6b:ae:f7:1e:d6:36:07:60:24:7e:29:
                    80:19:a8:12:d4:cb:20:73:5f:7d:84:60:96:b8:cd:
                    7b:55:81:23:f3:5a:c2:4d:28:9b:91:7e:b1:fc:18:
                    60:36:b5:58:50:de:29:dc:78:05:d2:a0:f0:e0:f1:
                    7d:13:7a:4e:45:8c:cb:40:ca:be:34:9a:35:70:e0:
                    df:ac:a8:1c:d1:0a:18:25:0c:02:b7:50:a4:65:ac:
                    02:3c:18:85:42:59:eb:ee:cf:40:0a:7a:33:2c:a9:
                    de:b1:7d:c9:f1:ee:d9:d6:dc:7c:bb:21:c5:4b:6f:
                    ac:84:7b:4f:20:78:d6:87:8b:37:2c:1d:c3:2c:73:
                    25:da:57:a6:1e:79:84:ec:00:f0:44:56:fa:ac:aa:
                    36:a5:cf:ae:91:aa:1b:98:f6:c0:87:02:f7:4f:b4:
                    22:54:14:f2:af:5e:de:28:f9:db:77:6c:c4:80:c2:
                    ca:33:f2:90:bc:4d:d5:f0:6d:d7:a1:69:ed:7b:b2:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:E6:76:5F:D6:85:C6:AE:16:CE:60:EF:84:EB:C7:5B:63:50:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce7e8ef8-01f1-35c9-b119-bd13063ff8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.199.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:02:a1:69:0d:c9:0d:82:b5:b2:a8:c2:99:d4:05:27:05:
         b2:86:a4:2c:a3:35:78:7f:d5:d0:99:a4:de:43:55:88:56:c5:
         34:02:b8:87:93:ad:22:60:da:9c:a5:68:2f:7b:39:03:78:1e:
         49:76:87:8c:63:f4:e3:25:ce:5f:2c:fa:e3:31:f4:dd:dc:6a:
         34:79:90:7f:9c:c9:7c:44:d5:1f:6c:67:8d:1f:11:c5:37:6c:
         cd:62:78:37:a0:c8:b2:af:94:19:7b:b6:91:aa:bf:8e:a4:12:
         50:7d:08:5f:6f:60:f9:3a:9a:e3:f8:05:ee:f7:1a:b1:2f:48:
         ed:bc:2b:6f:9a:65:8f:f8:2f:a0:fb:a4:ce:23:0c:d3:66:39:
         0c:bd:09:ec:82:bd:d6:31:38:6e:7d:95:36:43:72:a9:6b:a8:
         f5:e5:20:b1:e9:2a:c3:b2:0f:46:86:9b:ae:39:b4:65:29:cd:
         7d:1d:bd:e6:91:16:8f:c9:14:a2:83:17:22:96:cc:07:ea:fc:
         bd:0c:51:f3:f4:ad:ba:cc:bd:03:a2:84:41:b0:02:34:bb:82:
         26:63:f0:ef:21:b7:1e:fd:10:8b:32:31:e0:ec:7c:17:10:aa:
         de:48:b4:99:40:dd:cb:33:56:31:6e:29:53:b4:c7:a3:bd:ba:
         53:6f:a4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:38:07 2025 by rpki-client