Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ada69f4-1606-3221-9fb5-77f414aca9e4.roa
File:                     2ada69f4-1606-3221-9fb5-77f414aca9e4.roa (raw, json)
Hash identifier:          I5gsOwPm80WUd3U8MvtegWYEvT4BuRTjTHa850hb2YY=
Subject key identifier:   88:53:98:EB:01:3A:8A:C9:D6:F2:A7:A4:CD:6C:F1:CC:2A:07:91:17
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BE30EA3088BB53544C240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ada69f4-1606-3221-9fb5-77f414aca9e4.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        35.219.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:e3:0e:a3:08:8b:b5:35:44:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=18ded792-678b-4e41-a5e1-0b1242d04473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:12:19:42:32:ac:c0:de:9d:e7:fd:02:1b:
                    3d:cd:73:5e:9c:40:8c:24:26:43:7c:94:09:2a:c4:
                    90:62:85:dd:70:64:60:97:8d:62:f3:57:30:80:8f:
                    76:c4:b5:89:5c:12:93:4a:36:51:c8:f0:aa:a8:97:
                    61:34:a8:13:cd:83:93:27:54:b9:28:dd:05:bc:d0:
                    7e:94:a7:30:06:f5:8e:66:b1:1b:87:45:5c:e2:10:
                    db:c4:f0:77:fb:c3:c9:c0:86:70:00:4a:69:f3:16:
                    ed:57:e9:f6:ff:52:ae:c6:87:09:8e:8e:42:96:06:
                    c9:56:df:dc:25:e5:a0:32:b1:10:a3:40:14:b6:9b:
                    b9:50:f6:a8:c3:71:77:21:11:f8:bf:63:44:d5:c2:
                    7b:82:13:63:d7:42:e5:37:f0:36:dd:95:4c:c0:31:
                    a6:4f:1e:38:d3:11:98:c3:f5:b9:df:9e:45:db:23:
                    91:5d:fb:37:3e:46:23:75:f4:77:dc:32:38:a0:40:
                    89:3a:99:d5:b6:42:ee:ab:03:94:61:ee:91:cf:c1:
                    96:d2:64:d4:b9:23:c8:d3:d5:f0:4d:c7:f6:8b:3b:
                    0c:32:50:5b:17:4e:c9:c8:63:51:35:fd:67:14:b1:
                    0d:9a:7a:ac:1c:4f:05:ed:d2:95:e6:dd:7c:1b:b5:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:98:EB:01:3A:8A:C9:D6:F2:A7:A4:CD:6C:F1:CC:2A:07:91:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ada69f4-1606-3221-9fb5-77f414aca9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b5:8e:01:83:2b:c4:f5:60:f6:34:5e:08:98:ec:db:25:09:
         4b:59:6a:24:42:a7:b7:5c:fb:f2:47:f8:d6:1d:1a:2f:49:c4:
         8f:15:45:1d:52:63:ba:55:ab:88:fb:17:47:e5:45:78:37:ba:
         d5:d0:b2:b1:a6:5b:e8:92:6f:2e:0d:ae:86:95:a7:6e:87:6c:
         3e:08:0f:7b:c0:9b:73:79:d2:20:9d:c3:52:37:bb:a2:a8:c1:
         a2:88:21:d0:f2:24:16:06:9f:06:2e:53:5e:d3:ce:d9:4d:b7:
         b9:11:ab:f7:3d:df:c9:5d:22:96:14:85:48:24:43:0d:d7:4f:
         e2:05:8c:be:df:b4:6b:37:9b:95:29:a9:f3:a6:49:57:e1:3a:
         4a:65:73:a9:79:97:7f:80:30:2a:d6:b2:58:5a:70:29:7d:07:
         25:4a:9b:7f:ae:be:40:9a:53:37:25:34:a4:4b:59:d0:46:35:
         4d:80:c6:9e:20:b9:cd:df:d2:78:8f:a1:07:47:ba:ab:fd:99:
         7e:6f:12:ff:da:7c:ba:12:a7:73:56:cf:20:17:a5:cc:f5:9d:
         1e:01:46:b4:f1:27:1f:94:e0:e5:cc:af:67:b7:92:ec:b2:aa:
         4d:ab:3f:2d:1a:96:b1:01:d1:a3:22:7e:f6:51:de:88:53:1a:
         99:c6:b8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:59 2025 by rpki-client