Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd0f05be-7e0b-3be1-bdcf-aea85fc41fa1.roa
File:                     fd0f05be-7e0b-3be1-bdcf-aea85fc41fa1.roa (raw, json)
Hash identifier:          zfc4Wx196Tq9HpSpXSHns3oh7w4Lg/JHBUgPcP+aRfM=
Subject key identifier:   CA:86:B2:A0:54:59:31:DB:07:99:96:17:2B:4D:40:2F:7E:9C:15:07
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBDA0DBBAEBEEBE00B1180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd0f05be-7e0b-3be1-bdcf-aea85fc41fa1.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.205.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:da:0d:bb:ae:be:eb:e0:0b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=254cfa5c-5457-420f-af3b-b2fc1e056810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:c7:13:c3:77:a6:dc:35:4a:49:b4:d2:ed:
                    42:ab:aa:93:eb:92:ff:00:a3:65:c8:35:b2:a1:dc:
                    05:00:ed:26:c5:95:6d:55:d0:c7:d0:fd:b3:d9:2a:
                    1d:2f:26:e5:c5:43:51:f5:c0:0c:88:f8:0f:b0:65:
                    fc:ea:58:03:db:f9:01:e5:48:4e:2e:aa:03:cf:54:
                    ff:b0:56:04:57:f7:ca:44:c6:c1:3e:78:3a:b1:75:
                    86:7c:1a:c1:39:17:99:2a:05:dd:cb:0a:80:ab:b8:
                    ba:48:b9:8b:be:c0:fb:ac:10:d7:a2:18:04:7a:53:
                    b2:6e:4a:b6:d0:10:f0:1a:e7:df:2c:89:7e:68:b9:
                    d6:0d:f9:4f:4b:09:33:1f:26:52:9c:e0:6e:24:ba:
                    86:f7:26:bb:09:59:6c:ef:8f:1b:fd:92:7d:ac:ce:
                    f7:48:e1:27:73:0c:89:c8:28:53:c1:b8:2e:75:df:
                    41:54:4c:ef:a0:87:17:f9:bb:39:43:61:98:82:bc:
                    65:30:03:b7:4e:a9:f2:74:ed:8c:9b:23:05:27:fb:
                    69:79:4b:54:eb:76:81:96:bc:4e:6d:2f:60:06:be:
                    58:50:68:37:b1:65:ae:fe:56:d6:26:6c:23:93:83:
                    3e:1f:4b:49:5c:c6:dc:70:58:1a:69:e6:9c:c1:67:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:86:B2:A0:54:59:31:DB:07:99:96:17:2B:4D:40:2F:7E:9C:15:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd0f05be-7e0b-3be1-bdcf-aea85fc41fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.205.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:61:12:80:e0:0e:14:35:32:51:a0:99:50:04:eb:1d:01:63:
         07:55:95:cc:05:66:41:a7:ee:81:76:d5:cc:f9:25:28:d6:44:
         df:a6:1b:68:8f:9d:ab:a1:7d:9e:9b:92:04:fb:12:8a:8e:80:
         f5:27:77:07:79:0a:10:25:d2:ba:eb:fc:21:6c:ba:29:4e:7b:
         55:ba:e9:d4:92:20:a5:6c:75:a3:1c:5f:52:e3:fc:3d:e5:ef:
         84:56:51:f7:e8:32:99:c2:e1:15:d2:85:0d:bb:d0:32:05:66:
         54:9c:52:1e:96:d9:57:1b:8a:7c:d2:c9:bb:b0:e8:c5:bb:49:
         c2:47:64:f0:92:89:6e:34:8f:59:cd:fd:b2:58:a7:8f:4d:d0:
         4d:ec:b4:b5:dd:5f:aa:27:3a:2e:70:86:fc:d2:0b:24:fb:ea:
         b2:ae:27:18:d4:c4:6d:0d:89:45:b2:92:a8:21:cd:09:42:91:
         18:62:1f:49:35:9c:6c:56:22:2a:71:71:a3:aa:d8:22:83:b7:
         a0:43:35:65:8c:a1:e7:c0:75:19:80:c4:80:df:11:47:da:75:
         2e:69:bf:c3:87:25:e9:03:db:73:03:0a:9b:15:01:94:c8:9f:
         c3:19:7e:32:67:b9:6d:cb:52:a5:d9:36:0b:26:22:8c:5f:8d:
         a0:26:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:59 2025 by rpki-client