Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d66e6241-2faa-35ee-9569-b33d65377c71.roa
File:                     d66e6241-2faa-35ee-9569-b33d65377c71.roa (raw, json)
Hash identifier:          KCXdaHjheWKeyinKEssiIqDMGpfG5ageLhfG8Kalhb0=
Subject key identifier:   C2:B7:C8:29:79:AA:7A:51:1F:ED:C8:7D:39:04:99:7F:13:62:84:D2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB960744FCE43C02F05200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d66e6241-2faa-35ee-9569-b33d65377c71.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        35.219.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:96:07:44:fc:e4:3c:02:f0:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=56aeb0c6-21c7-4ef0-b7b2-9123bb488b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:3d:ad:2d:44:2b:b7:91:0b:ba:35:ea:74:
                    3a:8d:3f:36:6d:71:22:3d:18:68:23:c7:6e:8a:b9:
                    64:8f:13:b4:a6:96:65:da:af:a9:34:10:7a:6f:a7:
                    22:d1:93:08:6b:59:61:11:8a:c3:e5:c2:bc:7b:7a:
                    bd:02:b9:0b:2e:96:ec:80:0e:00:b8:d7:36:e5:75:
                    7f:c8:33:93:64:fb:b1:33:c2:fd:c8:3c:a6:9c:d1:
                    ee:7e:e1:0f:de:22:b0:ff:f6:42:f0:fb:b6:61:2f:
                    fc:4e:23:4f:56:4c:26:ab:4d:53:96:cb:d5:c6:9e:
                    8d:e6:1d:18:2c:f2:9e:aa:08:81:33:86:0d:24:92:
                    c0:e9:24:11:5c:43:15:81:2f:9f:1b:9d:9a:c6:12:
                    f8:38:4c:63:3b:7d:ba:3c:9a:24:c5:b1:74:99:de:
                    fc:46:d3:ab:ec:b1:06:50:76:ce:8a:3d:a3:16:94:
                    52:a0:88:6c:0b:f0:d0:eb:c3:b3:a3:88:35:17:c9:
                    10:ae:b2:9d:34:8b:82:75:77:3d:cf:37:98:48:cc:
                    fa:61:79:93:6d:a8:25:32:d9:be:44:88:d9:31:f3:
                    db:b8:00:96:d4:c8:9d:6c:a4:42:43:04:2b:8a:27:
                    cd:86:de:f4:df:03:ab:3f:2a:3f:7e:8c:45:db:80:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B7:C8:29:79:AA:7A:51:1F:ED:C8:7D:39:04:99:7F:13:62:84:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d66e6241-2faa-35ee-9569-b33d65377c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3a:c0:b0:3c:09:65:8f:19:5d:ee:4c:78:ac:66:2e:28:85:
         4b:9c:e8:4e:c6:ea:c6:e4:90:47:16:f5:aa:e0:a7:e7:46:51:
         b2:6c:04:06:da:93:80:f1:d2:f5:86:c9:d7:6e:7f:7b:29:4f:
         57:13:a4:b8:86:5c:4f:69:69:78:84:1c:85:0b:b1:38:63:5d:
         9b:94:a9:d3:b8:06:28:cd:0c:92:f5:33:5c:b8:2a:4e:09:61:
         b6:75:32:f4:c3:e7:3c:75:03:96:a8:e4:d4:4c:a6:40:63:4c:
         b5:2d:69:7e:7f:97:4f:c5:88:90:9c:31:b8:70:57:be:84:0f:
         d7:62:a2:3c:f9:cb:f0:ea:42:21:08:9c:2d:b3:a6:65:c9:27:
         e8:34:3d:aa:8f:ea:53:b0:04:6e:a2:46:02:60:b6:d1:c0:24:
         37:8d:c7:ca:ba:fb:f8:84:7e:49:5a:85:68:a8:52:99:31:03:
         66:92:ad:28:11:4a:4f:1f:25:ea:eb:9c:6f:ce:a8:69:e6:9f:
         19:1b:e9:23:fa:73:52:65:11:15:7b:25:52:1d:57:c8:99:ee:
         e9:00:33:9a:56:bb:47:bb:19:61:ce:2d:00:2b:e3:52:3c:e1:
         70:cb:05:13:84:91:45:f5:4e:7c:f6:eb:d0:cd:db:f0:98:aa:
         21:e3:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:27:37 2025 by rpki-client