Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa
File:                     f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa (raw, json)
Hash identifier:          IVrv2cSD3BWVginPnHWrU2HOHQjEKz2MjafB2XLaB00=
Subject key identifier:   A2:26:D7:2E:1F:5A:F6:AC:BE:21:65:FB:7B:E0:CC:FE:D2:13:6E:6A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A92062F8DFCAAF24234E3BB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.236.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:2f:8d:fc:aa:f2:42:34:e3:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=a5e03993-e89e-4f01-8e63-311cb652553f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:54:ca:28:a9:fb:e3:6c:a1:96:dc:4d:b3:
                    dc:81:bd:f4:ac:76:e5:f7:a9:e4:3b:4f:7e:9a:b9:
                    5d:c6:73:3f:6d:86:97:b8:e1:50:49:0e:9d:8f:7b:
                    11:df:17:1a:af:07:b7:5b:9e:3b:44:dd:48:26:8e:
                    a9:d4:d0:85:42:21:93:0f:96:32:58:2a:f4:37:6d:
                    98:c7:fa:05:3a:49:da:0d:d7:81:48:36:96:ce:b4:
                    46:f1:95:26:4c:c6:ce:39:75:4a:01:d1:09:b7:9a:
                    54:3f:f1:c5:47:3f:14:2e:b6:a6:28:1a:30:32:18:
                    cf:29:1a:63:f4:93:ae:fe:63:86:88:59:82:15:8d:
                    66:2b:c2:47:49:cc:c3:a8:81:96:56:8a:d9:76:96:
                    18:72:f0:06:12:bc:ac:0b:19:96:35:ef:3d:43:41:
                    1c:2d:04:b6:2b:6c:06:c4:c7:26:ad:4c:8b:a9:94:
                    82:3a:2c:66:bc:f6:f3:9e:84:37:f8:ed:db:5c:c0:
                    64:6e:1f:61:67:de:37:c3:97:c3:23:19:2e:c8:56:
                    47:b9:2c:f5:9b:05:83:de:98:4a:3f:04:b4:2a:a5:
                    df:8b:c8:a8:37:f6:46:fb:1a:e7:2d:86:b7:fb:3c:
                    4b:0e:69:96:05:71:e2:3d:55:f5:af:bb:94:20:ed:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:D7:2E:1F:5A:F6:AC:BE:21:65:FB:7B:E0:CC:FE:D2:13:6E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.236.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:95:20:af:57:1b:39:37:6a:6b:ba:1a:c2:84:c9:ee:9e:
         59:7a:e1:15:85:db:64:a8:05:e6:37:0b:d5:d5:11:0b:c9:4f:
         5c:69:10:e1:49:06:1a:45:30:77:12:9c:8b:5b:e1:85:98:f9:
         24:df:41:0c:c8:9a:da:57:ba:96:8b:6e:51:d8:3b:90:a0:61:
         ef:45:ab:54:ce:3f:86:1f:4f:2b:ee:8d:8f:ec:3d:c5:54:48:
         53:9d:7d:50:0a:e0:ec:bf:65:7e:ba:6c:64:c4:63:cd:7e:00:
         f4:6a:bb:1e:53:9c:a7:5c:a8:2b:ad:db:af:c0:18:37:1b:6a:
         34:b1:81:7d:03:b4:47:16:76:0c:fb:b3:d1:e8:94:da:98:d1:
         2a:f7:b6:15:01:2e:ad:c4:5b:81:89:bd:4d:74:e6:ca:00:a2:
         04:27:83:d9:57:05:6c:84:3f:7a:1b:3c:3f:80:7a:7d:09:79:
         ff:ed:47:22:32:4f:4e:85:e9:7f:4f:87:ec:25:b1:4c:d4:ed:
         a5:b7:88:0a:13:8c:3c:7e:b4:24:23:fd:81:41:20:52:62:1a:
         5d:05:1a:b3:23:b7:91:22:8c:fc:41:df:c0:e3:83:2d:f9:54:
         09:cb:7b:03:d5:ed:c2:e9:69:7b:e7:97:9c:da:70:66:a3:b9:
         2f:e3:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:16:22 2025 by rpki-client