Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa
File:                     35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa (raw, json)
Hash identifier:          tq0btpvL9aLtbqFkFfj+MVyJkOZDsTBur4DJSayYHms=
Subject key identifier:   87:C4:BC:40:6F:55:CF:87:22:2F:DB:56:FA:BA:13:A7:94:1F:35:3E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BFA9D87086FDA49C61900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.190.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:fa:9d:87:08:6f:da:49:c6:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=7c8d7a59-eba5-4b6c-9291-4326c21caa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:1c:4e:50:c1:c2:4b:4a:8f:47:e4:22:21:
                    51:bb:52:ad:b7:8d:5a:ba:c9:2e:43:d4:54:7c:67:
                    73:e9:47:f2:1c:ee:c8:36:03:1f:2d:a7:d8:7c:a0:
                    27:df:30:72:52:f1:e4:11:d7:7a:9d:23:90:13:7d:
                    35:db:5d:5e:b5:95:d3:8c:bc:d6:51:ec:dc:e9:db:
                    d6:21:06:59:d1:f5:73:ba:a8:9e:ab:4e:7e:34:ec:
                    5d:c6:ea:83:32:ab:94:5c:b8:24:a1:4d:d1:13:fc:
                    15:6d:cb:bc:cd:7a:0b:6e:47:3b:56:93:47:ec:05:
                    7a:71:b7:57:b4:95:2e:a7:35:49:91:32:f2:5a:9c:
                    6b:bb:29:b9:32:3f:7e:54:02:a4:35:ee:6e:9c:b5:
                    c2:27:a9:49:c3:36:9f:6f:06:b6:da:6e:e3:a6:ba:
                    db:2c:0a:f4:81:4f:50:4d:d3:4b:e6:06:f9:26:3c:
                    c2:4f:1c:74:4a:f6:a7:28:93:c7:4b:35:2a:13:15:
                    1a:c0:e7:da:d8:0b:56:b7:42:6e:cc:0b:36:1a:45:
                    52:69:e1:d0:ac:af:db:1f:c2:4e:a3:cf:cb:01:e0:
                    c5:90:28:e9:01:36:0f:77:17:01:5f:33:0c:9b:7b:
                    3d:a3:5d:aa:16:a3:03:81:03:a5:99:82:0a:53:03:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:BC:40:6F:55:CF:87:22:2F:DB:56:FA:BA:13:A7:94:1F:35:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.190.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:b9:4e:3c:81:3c:95:32:8b:fe:0c:a9:5d:6a:08:bb:7d:
         ed:66:4c:f3:cf:4b:a1:da:f4:84:77:7d:2e:cb:8b:92:29:b1:
         f8:d2:08:bd:e6:c9:58:6a:9a:35:03:4d:55:53:08:4b:05:b4:
         e3:7c:89:da:f5:95:cf:f1:c2:68:97:8f:75:bf:3f:e5:75:bc:
         37:f7:be:47:21:69:9b:70:56:2a:da:55:85:21:2b:b3:de:c9:
         47:95:e5:14:35:40:3f:55:d9:86:ff:bb:e8:cf:9e:c4:02:77:
         36:df:8f:ce:15:4a:bc:83:07:ca:68:a5:0a:16:a6:48:1e:1a:
         3c:13:c6:b0:46:f4:3e:c8:2a:48:9c:63:29:cd:f8:20:26:0c:
         00:9e:62:ec:bb:0b:21:f2:05:6b:b3:5f:20:98:c9:69:57:a9:
         a7:1d:1b:4c:97:d8:1d:2c:31:cd:91:1b:2a:55:bd:2e:45:24:
         74:47:f5:0d:9e:04:9d:ac:70:cd:ce:f3:26:96:0c:dc:bd:58:
         03:30:aa:6d:cd:7f:73:c8:1b:df:78:43:29:c3:17:e2:ed:2a:
         2a:ef:68:84:3b:62:b9:86:4a:e0:06:d5:27:f7:9a:85:35:f4:
         9b:67:86:15:88:6d:5a:fa:e7:3d:16:e4:d0:16:56:f9:ee:65:
         dc:86:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:48 2025 by rpki-client