Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa
File:                     1ac14654-b739-3df4-a7af-add24c8361cc.roa (raw, json)
Hash identifier:          Cxf1LW+vp+kP8jfaVqNxyozOvGZBfQ/HbeB7iDIENsk=
Subject key identifier:   81:B0:8C:7F:D8:BA:C6:C9:16:4A:6A:21:71:55:D2:0C:EA:51:2B:D0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BBE1C13FCCED2E2920A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        35.212.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:be:1c:13:fc:ce:d2:e2:92:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=a559260d-289d-4c33-8e11-0526eb23d0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:c1:45:c9:09:54:66:0f:c2:ba:9d:c9:1d:
                    f8:c3:00:3e:b0:96:12:24:8b:19:dc:da:08:4d:12:
                    8a:40:23:e3:7d:1c:46:25:5c:d7:84:f7:f8:25:74:
                    52:b7:fd:07:72:12:4e:53:e6:86:d5:4f:63:5c:c4:
                    8f:2c:00:f4:1e:13:51:88:87:c0:9c:99:73:ce:00:
                    68:f3:a1:5b:bc:43:ad:a0:f5:10:ab:8d:bc:ad:10:
                    4f:9e:0a:9a:07:1a:e0:0b:8a:c3:2e:d0:f3:8d:db:
                    e2:a5:3e:50:61:99:4f:af:ca:28:e8:77:8b:9e:cb:
                    40:94:c0:81:bb:49:25:ad:fd:c7:3f:67:28:1c:1e:
                    eb:a0:5d:cc:47:a9:b9:65:3d:62:6d:96:19:66:a9:
                    b2:d6:f0:3d:41:38:b6:ad:63:be:32:c2:3b:e7:fe:
                    f8:a3:c1:4d:dd:a8:48:11:c0:cd:cc:92:51:f0:a6:
                    cc:39:39:f6:17:1c:d6:19:e8:72:35:23:60:90:77:
                    f7:99:45:83:0f:57:c0:f0:37:92:a8:d1:f4:03:df:
                    1f:4e:6c:31:4d:b6:e3:f3:34:28:9b:50:23:7f:58:
                    89:74:1f:5b:da:7d:12:59:3f:93:84:f7:23:47:9e:
                    59:e6:e8:60:2c:3d:c3:1f:67:23:78:40:fa:e0:f1:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B0:8C:7F:D8:BA:C6:C9:16:4A:6A:21:71:55:D2:0C:EA:51:2B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.212.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:42:df:26:48:fb:ab:db:90:e2:0a:e5:23:41:1b:b0:a0:e0:
         d4:68:d6:a3:13:e9:cf:bc:49:4b:44:b5:20:f7:24:98:17:5e:
         f7:03:58:11:ef:2c:84:18:e4:8d:31:e2:5e:5a:65:c4:9a:f4:
         b7:ab:b8:ac:4f:b2:68:18:3a:d9:c1:67:94:b8:97:ee:02:fd:
         c6:21:e4:3f:76:76:c7:fd:bb:ae:3c:e5:8f:27:6e:52:52:18:
         bd:44:54:be:a0:27:ba:2f:6f:00:62:6e:89:78:a0:3c:82:5e:
         14:75:5d:5f:40:9b:50:53:f6:0b:b6:43:c0:72:e7:96:1d:65:
         25:1e:4e:b8:fe:da:87:c7:4a:ec:6a:67:2e:9c:7d:cb:74:c1:
         36:3e:d5:9b:33:9f:41:59:f5:6d:b5:3a:83:e2:58:c6:69:6d:
         f3:c4:80:13:98:74:a6:44:aa:40:93:27:ec:25:a5:85:37:bb:
         47:d3:6b:7e:d3:88:e5:a2:bf:91:b1:8b:e7:e2:a4:cb:3c:9c:
         94:42:27:c6:d9:47:18:62:e9:c8:3a:00:26:e6:98:05:c3:53:
         3f:fa:e3:79:23:50:7a:f9:44:92:9d:a2:61:be:ef:58:b8:bf:
         96:f0:08:64:f4:9b:a4:a8:d9:d1:39:12:03:31:58:fe:91:ba:
         07:fd:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:48:30 2025 by rpki-client