Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa
File:                     627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa (raw, json)
Hash identifier:          CsbeWlVv2ojJUJeJ0Bhxx8HLyqzPQSGyNstNn0+dHyw=
Subject key identifier:   B9:F6:30:AA:B1:81:75:85:72:E7:61:14:A2:52:7B:DF:3F:F4:59:55
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584A3A157B38C19785B5AF68A880
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     231
IP address blocks:        35.8.0.0/13 maxlen: 24
                          35.20.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7b:38:c1:97:85:b5:af:68:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=4b7e2eb1-b5fc-4c4b-84a2-994c7998904c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:8b:af:c4:5d:6e:d0:ae:b2:cc:2e:d6:0d:
                    69:bc:c2:9e:b9:e1:cc:99:75:bd:4f:9c:fd:0d:2e:
                    ce:a5:97:c4:49:56:0b:14:06:1b:a5:61:07:b6:cd:
                    48:62:af:9b:ee:2d:af:c3:5f:8a:e7:c9:07:0f:ae:
                    7a:7c:c3:d2:4c:c1:f2:19:02:f4:a2:02:32:f0:e9:
                    f0:0a:b5:81:ef:e0:77:84:22:04:93:6c:62:78:e9:
                    1a:7b:4f:a0:35:86:e0:07:82:78:34:15:97:bb:54:
                    cf:63:9d:a3:1d:7a:0b:de:5f:02:21:73:9c:b2:44:
                    17:07:ba:73:47:ee:7b:b3:67:80:fe:24:41:4b:57:
                    49:24:1f:c3:25:38:82:95:16:8f:d8:cc:10:f1:64:
                    19:fc:b6:db:bb:80:f9:a5:6f:b2:0c:1e:d1:ac:74:
                    5b:70:0a:4e:03:59:cf:91:c7:05:53:c5:1f:fc:4c:
                    4b:6b:42:ce:71:7c:97:39:3f:fc:49:22:69:07:d9:
                    0c:28:88:fe:66:65:61:58:79:0f:6d:24:fb:e8:b1:
                    32:65:fe:26:4c:53:e3:5e:cc:ca:10:12:c7:89:f0:
                    ce:b9:5c:64:ae:e5:5e:f4:c1:2e:da:96:a0:0c:fa:
                    fd:27:1b:d6:1c:20:48:f9:0f:23:ce:dd:13:35:05:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F6:30:AA:B1:81:75:85:72:E7:61:14:A2:52:7B:DF:3F:F4:59:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.8.0.0/13
                  35.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:15:6e:b9:9b:5e:25:02:c0:37:fe:5f:c6:93:34:81:67:cf:
         33:77:99:7b:ad:7d:e8:56:13:46:46:92:01:3f:e3:80:a0:51:
         e2:c1:4c:cb:62:d5:74:96:20:1b:84:81:c7:2e:05:78:c6:57:
         29:91:25:41:25:99:2a:9a:2d:62:51:a9:37:c3:38:6f:0d:b8:
         6d:3f:48:cb:7e:a1:29:3a:3e:88:71:c1:3c:a7:39:93:2a:8b:
         e7:38:d7:54:41:4f:f5:36:5e:b4:88:70:a3:47:11:a9:a7:43:
         15:b9:92:9a:02:3f:28:77:01:a4:4d:1f:aa:f8:93:7c:1e:42:
         14:9f:f7:79:63:39:c0:a9:63:78:82:b0:60:ba:47:fc:81:94:
         00:64:f6:db:7e:7f:53:b2:f3:1a:e6:d2:7f:d4:d0:e9:35:0d:
         c0:71:aa:6b:05:47:2b:38:48:c6:d4:78:4c:25:84:bd:e9:85:
         4a:ba:ea:ef:45:00:55:ea:fb:06:e3:c8:cf:ea:7e:9d:de:07:
         75:35:61:a3:51:29:cd:85:40:f9:75:50:a1:3e:2f:c1:28:07:
         53:39:68:f3:5f:a7:a6:e7:cc:4e:0e:40:92:94:79:88:7e:cb:
         ce:5e:32:7c:04:95:04:39:78:b6:ed:0d:4b:93:71:63:33:58:
         c5:89:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:28:32 2025 by rpki-client