Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e56fe00e-61bb-3bd0-83fa-334d5e1cb15c.roa
File:                     e56fe00e-61bb-3bd0-83fa-334d5e1cb15c.roa (raw, json)
Hash identifier:          uX01Yj2ls5N4BVmAKsqiLfzveirRptwy9MKz4pH0imI=
Subject key identifier:   56:AE:AB:86:B8:7F:6F:E3:C3:57:67:FB:B0:99:53:49:C2:6D:BE:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB8F1CC09A8252FA884040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e56fe00e-61bb-3bd0-83fa-334d5e1cb15c.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        35.206.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:8f:1c:c0:9a:82:52:fa:88:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=e3ac753d-a8e3-4688-b776-aa58d26ce85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:bb:7a:0b:fb:30:91:dd:e9:d6:88:46:a6:
                    86:9a:6c:65:5d:f4:28:a2:f1:fe:da:23:82:5c:34:
                    4d:a9:cc:3d:5a:44:19:32:53:6b:71:e1:bd:23:58:
                    58:6d:3e:a8:a8:86:81:46:71:75:ed:3a:cb:7b:1b:
                    51:db:cd:58:02:36:71:99:03:48:b5:0e:a1:bf:65:
                    15:9f:ee:1d:d5:8f:97:0c:f1:b6:b5:7b:10:27:0f:
                    ff:78:0e:30:9a:ee:c4:02:79:f4:6c:81:fc:b9:66:
                    92:6f:4f:38:b2:c3:6b:07:91:34:06:ea:f6:b1:07:
                    67:1d:44:a8:c8:ef:e0:06:b5:b4:0c:e7:e7:5a:56:
                    c9:98:76:92:11:7d:fc:c6:d8:8a:64:1e:20:8d:56:
                    f5:5b:71:f2:e7:af:a9:6f:d9:5c:6d:c7:a3:1d:73:
                    87:db:e8:d0:54:e3:bc:47:d9:b4:12:5d:fd:6a:40:
                    4a:a5:c7:e9:dd:a5:81:d1:6a:be:c5:9a:e2:f3:dd:
                    bb:ad:8b:10:41:48:28:12:f0:7d:ba:05:a0:77:59:
                    26:20:f5:44:bd:91:a7:eb:35:72:46:2e:f9:9b:9b:
                    fd:e7:cb:5f:b1:64:fa:1a:62:42:d7:7d:cc:fa:ae:
                    43:b3:c9:ee:2a:22:98:42:65:96:18:c4:24:b5:a2:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AE:AB:86:B8:7F:6F:E3:C3:57:67:FB:B0:99:53:49:C2:6D:BE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e56fe00e-61bb-3bd0-83fa-334d5e1cb15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:1c:f9:d7:e2:f9:97:df:c3:6d:a0:69:94:72:fc:27:bb:
         21:88:a4:05:31:0e:56:96:28:b7:fd:24:06:6b:2c:15:5c:75:
         fb:9e:d8:f1:d9:4f:59:47:09:2d:9c:41:37:4d:2d:07:4f:65:
         77:19:4d:6a:fa:39:8c:7c:b4:f6:0f:bd:45:9b:97:e2:2b:fc:
         40:45:7c:e8:14:04:5b:be:5a:d3:0d:a5:57:07:fa:d9:f0:cc:
         b9:e2:f5:e4:d6:d3:3a:ee:f8:be:d5:00:3b:5a:13:19:91:41:
         eb:f1:0d:c5:db:f8:6f:64:e7:3c:06:f7:99:21:9f:b5:ab:10:
         d0:98:37:e6:7e:f5:b1:a7:b4:c4:67:b8:bf:de:86:9f:9c:6e:
         f8:60:29:bc:8f:5f:85:ed:86:49:1f:5b:44:a0:1b:b4:f3:48:
         bc:3d:1f:ed:23:4c:87:42:7c:c0:44:43:c7:fc:a3:09:ba:45:
         3f:37:7d:e8:c1:cf:2b:5d:32:65:1b:f8:1f:8d:62:0c:3c:dc:
         ff:dc:c0:4f:57:b0:ac:d7:9f:a6:1a:cf:69:c2:f7:0c:f4:cd:
         66:3f:8f:ae:3f:a0:99:60:70:34:7a:06:0a:09:b5:d1:84:8f:
         a1:1b:7b:68:4f:60:d5:6e:c3:58:c2:7c:d6:01:ff:81:0c:aa:
         2b:88:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:29:34 2025 by rpki-client