Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea27a96e-ee77-3a7b-99de-0e6fa2507d2b.roa
File:                     ea27a96e-ee77-3a7b-99de-0e6fa2507d2b.roa (raw, json)
Hash identifier:          F1f5KPIPMTt88mAxu7IRjWE/gv9hh4fZmB6o3HrE1Nw=
Subject key identifier:   59:06:8F:CD:98:3E:2C:3E:53:77:E0:29:F5:A0:35:D2:F8:6F:A9:EB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBAC9C3563E666485008E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea27a96e-ee77-3a7b-99de-0e6fa2507d2b.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.193.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ac:9c:35:63:e6:66:48:50:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=69a29751-408d-497b-ba49-e1d54b9bd537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:d7:55:d4:93:1d:43:35:08:24:fc:62:5e:
                    83:67:8f:6f:62:2c:07:d6:a9:9c:34:88:17:ae:e8:
                    0b:25:6e:8a:16:76:67:5d:43:a2:e4:3c:3e:76:c5:
                    11:4f:ad:4d:cd:ca:bb:0c:1b:c4:13:8a:1a:06:f4:
                    07:b0:b3:51:d3:ad:e1:2b:32:02:5c:db:b1:06:b3:
                    a0:30:1b:b2:23:0e:7d:32:4e:da:47:bb:61:ed:09:
                    a9:c2:ba:aa:be:67:34:39:90:b0:c7:60:a3:15:2c:
                    42:43:0b:36:4e:a9:d0:e9:20:f3:b1:c2:46:2e:98:
                    1a:08:c5:44:66:20:f5:f6:eb:6d:b4:df:0b:a4:3d:
                    e2:6b:a7:30:27:a0:46:63:0f:2b:49:24:a4:e5:ce:
                    aa:b6:fa:b6:38:57:95:19:29:3a:3e:33:2f:a2:7c:
                    ff:5e:6e:a4:5a:73:03:da:45:37:f5:51:9e:c9:4e:
                    70:29:2d:ee:be:f3:8f:eb:87:37:31:2f:80:ca:00:
                    8c:4d:f0:66:9e:14:a7:3d:8b:76:5e:5b:83:17:9f:
                    d1:d8:d5:3a:48:9a:87:76:61:9c:3d:28:f3:3c:b1:
                    38:4d:20:ee:9f:af:02:1d:04:0d:e6:4a:53:1e:9e:
                    dd:9b:b1:2c:db:78:fd:04:2c:97:bc:51:f6:2e:a7:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:06:8F:CD:98:3E:2C:3E:53:77:E0:29:F5:A0:35:D2:F8:6F:A9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea27a96e-ee77-3a7b-99de-0e6fa2507d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:17:c5:ca:3e:9f:67:ee:e7:86:03:c7:76:75:c9:cf:40:2c:
         3b:20:67:6f:a1:7c:db:8b:09:c1:06:a8:61:a9:e2:5c:82:db:
         72:78:d6:15:87:ac:68:47:dd:8b:78:a6:4e:33:71:d3:0d:01:
         ce:9f:e8:28:ed:6a:ff:6b:bc:d3:f1:1b:25:e4:fb:6d:c3:f4:
         38:8b:d6:c0:a7:6e:ca:4e:be:41:de:6a:82:fe:7d:db:47:e4:
         71:b8:5c:37:c1:d4:69:5c:cd:3d:50:36:70:c8:81:c2:02:80:
         d2:e8:fb:d9:fc:ea:06:eb:47:ed:05:cf:46:92:ae:4c:ef:74:
         1d:3a:4f:1f:58:57:f6:d3:9c:fa:fb:0d:f6:2e:f7:d2:30:1e:
         3d:df:32:87:10:0d:7d:08:97:80:9a:8c:cb:ef:aa:ad:a1:eb:
         36:1f:37:da:51:b1:94:23:19:30:7a:4f:ca:57:f2:4b:dd:9a:
         f3:04:f2:98:07:0e:d0:6c:9c:00:b4:b8:63:e5:de:7d:a1:96:
         97:07:a6:ca:ff:fa:58:a2:c0:d8:b7:a1:4b:b6:93:46:75:ea:
         ed:13:dd:42:c4:e2:2d:e5:b6:62:7a:6a:38:a9:90:3a:af:d8:
         11:29:17:80:b9:d7:09:cd:c1:13:8a:2c:e1:45:20:4e:ce:e8:
         70:b5:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:17:17 2025 by rpki-client